Crown Prosecution Service

We was accountable for validating and ensuring more than 120+ security contract requirements are met (including ISMS requirements, Security Mangement Plans and Security Testing). We was was responsible for reviewing and interpreting more than 15 High Level and Low Level Designs aligning them with secure architecture patterns such as NIST/SANs best practices. Identified cyber security issues relating to authentication, authorization, network security, encryption, anti-virus and pen testing etc. are resolved acting as the Security Design Authority. He was responsible for the scope and delivery of more than 5+ IT Health checks / Penetration Testing to the satisfaction of the client. We was accountable for creating proposals for penetration testing activities that includes internal, external assessments, firewall configuration review, server build reviews and database configuration reviews. In addition to this, he was responsible for reviewing proposals from third party suppliers. 

We remediated more then 341+ vulnerabilities found on the client’s estate relating to infrastructure (200+ servers / 10+ network devices) and application issues regarding the Case Management System. We delivered multiple reports and client presentations to senior stakeholders highlighting the observations raised in a graphical format and summary of the findings (criticality) raised by the penetration test teams. We was responsible for secure firewall configuration and reviewed more then 200+ firewall rules. Managed a junior cyber resource to help created a firewall remediation action plan to ensure overly permissive filter rules and filter rule permitting plain text protocols were remediated.  

We was the owner of the risk register of all IT Health Checks and coordinated remediation action plans with the project manager. We produced the ITHC security risk assessments to the client’s required methodologies on all critical, high, medium risks and assigning a risk value based on the likelihood and impact with current technical controls in place.