SnowBe Online Security Plan
I developed a comprehensive IT Security Plan for SnowBe Online, a growing e-commerce organization, defining security policies, standards, roles, and procedures to protect the confidentiality, integrity, and availability of systems across cloud and on-prem environments.
Skills demonstrated: IT security planning and program design; GRC documentation; policy and standards development; role definition for security operations; risk management and control alignment; exception/exemption handling; and technical writing for both executive and operational audiences.
Frameworks and tools used: CIS Critical Security Controls, the Cybersecurity Capability Maturity Model (C2M2), patch management policy frameworks, secure SDLC principles, AWS cloud security considerations, and industry policy references from higher-education and government security plans.