Amiller0814
Ashley Miller
GRC Analyst | ISSO | Cybersecurity Compliance Professional
| 📍 Grovetown, GA | 🔐 Active DoD Secret Clearance | 📧 a_miller101@yahoo.com |
About Me
Cybersecurity and GRC professional with 13+ years of progressive experience executing Risk Management Framework (RMF) lifecycle operations, implementing NIST SP 800-53 security controls, and driving compliance across DoD and enterprise environments. Former U.S. Army Information Assurance Officer with a proven track record of authoring security documentation, managing vulnerability remediation programs, and serving as the bridge between compliance requirements and technical execution.
Currently pursuing a second M.S. in Cybersecurity at the University of Maryland Global Campus.
Core Competencies
- Risk Management Framework (RMF) Lifecycle
- NIST SP 800-53 Control Implementation & Validation
- Continuous Monitoring (ConMon) Operations
- POA&M Development & Closure Tracking
- System Security Plans (SSPs) & ATO Support
- Vulnerability Assessment & Remediation Management
- Security Policy & SOP Authorship
-
Microsoft Sentinel Splunk Defender for Cloud - Azure Cloud Security Architecture
Certifications
| Certification | Status |
|---|---|
| CompTIA CASP+ / SecurityX | ✅ Active |
| CompTIA Security+ (DoD 8140) | ✅ Active |
| CompTIA Network+ | ✅ Active |
Portfolio Projects
🏥 MedSecure Cloud Platform (MSCP)
Azure-Hosted Healthcare GRC Portfolio Project
A fictional Azure-hosted healthcare platform built to demonstrate applied GRC and security architecture skills. Artifacts developed follow real-world ISSO and compliance standards.
| Frameworks: NIST SP 800-53 Rev 5 | HIPAA / HITECH | NIST RMF |
Deliverables Completed:
- ✅ Azure Architecture Diagram
- ✅ Security Control Matrix (16 controls across 6 domains)
- ✅ Gap Analysis Summary
- ✅ Risk Register
- ✅ Plan of Action & Milestones (POA&M) — 10 findings
🏛️ Operation Iron Shield (OIS)
DoD RMF Authorization Package | AWS GovCloud | CUI System
A fictional DoD program supporting a web-based case management system processing Controlled Unclassified Information (CUI) on AWS GovCloud. This project demonstrates the full NIST RMF authorization lifecycle for a DoD information system — from initial FIPS 199 categorization through control implementation documentation and POA&M development.
| Frameworks: NIST SP 800-53 Rev 5 | NIST RMF | FISMA | FedRAMP | 32 CFR Part 2002 | DoDI 8510.01 |
Deliverables Completed:
- ✅ System Security Plan (SSP) — 8 sections, 5 control implementation statements
-
✅ Security Control Traceability Matrix (SCTM) — 30 controls across 7 families 19 POA&M entries identified -
✅ Plan of Action & Milestones (POA&M) — 19 findings 3 remediation phases 90-day ATO target -
✅ ATO Recommendation Memo — IATO recommended 90-day remediation plan 7 conditions
✈️ AeroPass (APS)
Commercial Aviation Compliance Assessment | PCI DSS | SOX | DFARS
A fictional commercial airline passenger services platform processing payment card data, SOX-scoped financial systems, and CUI under government charter contracts. This project will demonstrate multi-framework compliance assessment — where PCI DSS v4.0, SOX ITGC, and NIST SP 800-171 obligations overlap on shared enterprise infrastructure.
| Frameworks: PCI DSS v4.0 | SOX ITGC | NIST SP 800-171 | DFARS 252.204-7012 |
Planned Deliverables:
- ✅ 1. PCI DSS v4.0 Gap Assessment
- ✅ SOX ITGC Test Matrix
- ✅ DFARS / NIST SP 800-171 Readiness Assessment
- ✅ Cross-Framework Control Mapping
- ✅ Splunk Executive Compliance Dashboard
Education
| Degree | Institution | Year |
|---|---|---|
| M.S., Cybersecurity Management and Policy | University of Maryland Global Campus | 2025 |
| M.S., Cybersecurity (In Progress) | University of Maryland Global Campus | Expected 2027 |
| B.S., Information Technology | University of Arizona Global Campus | 2023 |
Professional Development
-
CISSP Prep Course — Tromenz 6-Week Intensive June–July 2026 -
ISSO Development & RMF Practitioner Series — KyoraIQ Weekly Ongoing
This portfolio is actively updated as new projects and certifications are completed.