UK Ministry of Justice

We was responsible providing Security Technical approval application and infrastructure changes requests. We was required to review technical details including rollback plans, implementation steps, Live and Non Live changes and approved/rejected more 5+ changes on a weekly basis. He was part of the client’s internal Change Advisory Board and approved statement of work orders acting as the Security Design Authority. 

We was also responsible for reviewing penetration test report for the DARTS application via an iDAM solution. We reviewed more than 35+ vulnerabilities and created a remediation action plan. We engaged with multiple stakeholders across the business to ensure the observations identified mitigated to acceptable risk level. During the project we was also responsible for reviewing client contract requirements (Security Management Plan) and was the owner of the risk register for the penetration test mentioned above.