Work Samples

Paid work belongs to the client and is never published. These three documents are written to show how I work: a policy written as a client organization's own document, and two control mappings of a Windows hardening baseline I built and maintain.

• Configuration Management Policy

  A policy for a fictitious 60-person defense subcontractor, addressing NIST SP 800-171 Revision 2, family 3.4.

• NIST SP 800-53 Control Mapping

  134 Windows configuration settings mapped to NIST SP 800-53 Revision 5, including the 28 the baseline declines to apply.

• NIST SP 800-171 Security Requirement Mapping

  The same settings read against the requirements CMMC Level 2 assesses, derived from the 800-53 mapping.