cybersecurity-risk-assessment

Cybersecurity risk assessment conducted for a nonprofit organization, aligned with CIS Critical Controls, covering enterprise, data, network, and endpoint security

My Contribution

• Led Network Security Risk Assessment
• Identified risks in:
  • Network segmentation (IoT isolation)
  • Wi-Fi security weaknesses
  • VPN hardening gaps
  • Network logging & monitoring
• Provided remediation strategies aligned with CIS Critical Controls

Key Findings

• Lack of network segmentation for IoT devices
• Weak VPN and remote access hardening
• Limited network visibility and logging
• Absence of documented network architecture

Tools & Frameworks

• CIS Critical Controls
• Risk-based assessment methodology
• Interview-based security evaluation

Outcome

Produced a detailed risk report with prioritized recommendations to improve security posture and reduce enterprise risk.

cybersecurity-safeguards

Designed cybersecurity safeguards and policies including Acceptable Use Policy (AUP), Incident Response, and Vulnerability Management aligned with CIS Controls.

My Contribution

• Designed Acceptable Use Policy (AUP) safeguards
• Contributed to policy development covering:
  • Secure use of organizational systems
  • Data handling and user responsibilities
  • Acceptable usage of devices and networks

Policies Included

• Acceptable Use Policy (AUP)

Framework Alignment

• CIS Critical Controls v8
• NIST SP 800-61 (Incident Response)
• Security governance best practices

Outcome

Delivered a structured safeguards framework enabling secure operations, policy enforcement, and risk mitigation.