Judith Ross

Designed and delivered Standard Operating Procedures for the DC OSSE Orchard platform, edited a 100-page environmental quality report for Aerus Holdings, and built a resume training curriculum for the University of the District of Columbia Foundation.

Validated ICAM performance and security Capabilities Statements against GPRA and FISMA standards, and co-authored the ICAM-FIBF Standard Operating Procedure.

Authored Third-Party Vendor Risk Management Procedures and Document Review and Approval Procedures, and established SOP and Job Aid templates for Digital Risk documentation.

Led development of the Statement of Work, contract terms, and procurement strategy for a new agency-wide procurement operating model, which was used to build the RFP for Category Management implementation.

Drove the update of 130+ information-security processes in six months, contributed to the Zero Trust implementation plan, and produced work instructions, flowcharts, and executive reports.

Core member of the Active Directory Migration team consolidating nine agency directories into a single ENT domain, authoring the migration plan, SOPs, runbook, and readiness checklists.

Created and modernized system and user documentation for three OLR IT systems, delivering user guides, maintenance manuals, policies, SOPs, and training materials.

Created the INFOSEC policy framework incorporating NIST guidelines, performed gap analysis, and authored enterprise security policies for Active Directory, media sanitization, records retention, BYOD, and mobile device management.

Conducted an onsite CRM assessment of a Department of Energy facility, measuring operations against the contract SOW and reporting findings, and co-developed a Project Management Orientation with the CEO.

Authored baseline documentation for the transition to Continuous Monitoring, ran the annual Security Awareness Training to 97% compliance, and developed new cybersecurity policies and IT services documentation.

Supported Windows 7 rollout planning, testing, and training for 200+ pilot users, authored a document management system user manual, and gathered requirements for a mail processing system.

Authored the Revolving Fund Business Process Document governing vaccine and medical supply purchasing, including Visio workflows, RACI chart, and a standardized claim form.

Authored Data Center Shutdown and Recovery Plan, Incident Management and Communications Plan, and ITS SOPs, and produced documentation for the GroupWise-to-Exchange migration.

Conducted annual Certification & Accreditation reviews of 15+ systems, documented specifications for 30 systems, and published Software Maintenance Manuals.

Re-engineered IT support operations on ITIL, delivering procurement, asset management, service desk, and incident, problem, change, release, and configuration management procedures.

Developed business requirements for a Public Key Infrastructure redesign, performed security analysis and design documentation, and provided proposal red team reviews.