Pius Bedifeh

I’m a cybersecurity professional with 12+ years of experience as a Security Controls Assessor and Information Security & Compliance Analyst supporting federal environments. I specialize in FISMA and NIST RMF (NIST SP 800-37 Rev. 2), NIST SP 800-53 control families, and Authorization & Accreditation (A&A) across on premises and cloud systems.

Across my roles, I lead system categorization (FIPS 199, NIST SP 800-60), continuous monitoring (NIST SP 800-137), POA&M management, and the creation of Security Assessment Plans (SAP), Security Assessment Reports (SAR), and complete A&A packages. I bring deep expertise in FedRAMP and Cloud ATO processes, plus PCI DSS, ISO/IEC 2700 2, IDS/IPS, and data encryption to help teams achieve and maintain authorization.

Whether I’m assessing controls, validating artifacts for submission to the Authorizing Official (AO), or coordinating remediation with System Owners, my focus is clear: produce accurate documentation, confirm controls are effectively implemented, and keep risk moving forward through measurable POA&M execution.