Author: Ashley Miller
Frameworks: PCI DSS v4.0 | SOX ITGC | NIST SP 800-171 | DFARS 252.204-7012 | NIST SP 800-53 Rev 5
Platform: Hybrid Enterprise Environment
Classification: Unclassified — Portfolio Demonstration Project
Status: Active — Artifacts In Development
AeroPass (APS) is a fictional commercial airline passenger services platform that processes payment card transactions, supports SOX-scoped financial reporting systems, and handles Controlled Unclassified Information (CUI) under government charter contracts. Unlike a single-framework federal system, AeroPass demonstrates the multi-framework compliance reality of a regulated commercial enterprise — where PCI DSS, SOX, and DFARS obligations overlap on shared infrastructure.
This project demonstrates cross-framework compliance assessment skills: scoping, gap analysis, control testing, and translating findings into executive-ready reporting.
Scoping analysis and gap assessment of the cardholder data environment (CDE) against the PCI DSS v4.0 requirements, with prioritized remediation roadmap.
File: APS_PCI_DSS_Gap_Assessment_v1.xlsx
Documents IT General Controls supporting financial reporting integrity for Regional Air Holdings.
File: APS_SOX_ITGC_Test_Matrix_v1.xlsx
Framework Sources: PCAOB AS 2201 | COSO Internal Control Framework | NIST SP 800-53 Rev 5 Control Mapping | Standard ITGC Audit Practice
CUI readiness assessment against the NIST SP 800-171 security requirement families supporting DFARS 252.204-7012 compliance for government charter contract data.
File: APS_NIST_800171_Readiness_Assessment_v1.xlsx
Unified mapping of overlapping requirements across PCI DSS v4.0, SOX ITGC, and NIST SP 800-171 — demonstrating test-once, comply-many efficiency.
File: APS_Cross_Framework_Control_Mapping_v1.xlsx
Executive-level Splunk dashboard concept visualizing compliance posture, open findings by framework, and remediation velocity.
File: APS_Executive_Compliance_Dashboard_v1.xlsx
Part of the Ashley Miller GRC & Cybersecurity Portfolio
← Back to Portfolio