Professional Services Proposal - Criminal Justice Information Security Compliance Gap Assessment

Home Browse Search

Proposal to Provide CJIS Gap Assessment City of South Bend 15 Appendix A — Delivery Team Resumes We have provided resumes for the proposed engagement team on the pages below. Michaels J. Del Giudice Profile Mr. Del Giudice is a Principal in the Consulting Practice with 19 years of experience in the areas of information security and data privacy. He is a security and privacy thought leader, leading Crowe's cybersecurity practice for the Public Sector, while providing security services to a broad range of Fortune 500 organizations across industries. Professional and Industry Experience Mr. Del Giudice evaluates and developes solutions to improve IT capability, maturity, and governance. He is experienced in critical infrastructure environments, including insurance, financial institutions, energy, transportation, healthcare, and government sectors. Mr. Del Giudice assists management in the execution of security strategies, including the solution design, requirements gathering, and vendor selection. He also designs and implements customized cybersecurity frameworks addressing confidentiality, integrity, and availability requirements. Mr. Del Giudice has experience with data security, including data classification and inventory, control framework design and implementation, and data strategies. He designs and implements Business Impact Assessments, Business Continuity Plans, and Disaster Recovery Programs. Mr. Del Giudice understands Intellectual Property (IP) protection procedures addressing logical, physical, and business controls; and he has experience with multiple regulatory requirements, such as GLBA, HIPAA, NERC CIP, CJIS, and FTC Safeguards Rule, as well as security frameworks such as NIST 800-53, NIST Cybersecurity, and ISO. Education & Certifications • Bachelor of Science, Computer Engineering o University of Illinois I Champaign, Illinois • Certified Information Systems Security Professional (CISSP) • Certified in Risk and Information System Control (CRISC) 225 West Wacker Drive, Suite 2600 Chicago, Illinois 60606-1224 Direct 630.575.4359 Fax 312.899.5300 mike.deigiudice@crowe.com www.crowe.com Client Focus Services: • IT Risk Management • Data Security and Privacy • Security and Maturity Assessments • Security Consulting Publications and Speaking Engagements • FSA Times, "Have You Conducted a Data Protection Audit Lately?" • EUCI NERC Fundamentals course, "NERC CIP Compliance" and "NERC CIP Compliance" • Trained the Office of the Comptroller of the Currency (OCC) on IT security • IIA Chicago's annual seminar • NADA national conference, "Manage your IT Risk and Improve your Bottom Line,." • IIA, "Mobile Device Risk in an Increasingly Connected World." • NADA national conference, "Technical Security — Protecting your Dealerships Information Assets." • WI Automobile & Truck Association, the VT Automobile Dealers Association, and the Chicago Automobile Trade Association • Dealer Magazine and Digital Dealer, FTC's Safeguards Rule. • IIA IT Fraud seminar • OH Information Security Conference, "Security Strategy: Planning the Next 3 to 5 Years." Professional Affiliations • Institute of Internal Auditors • Chicago Chapter of ISACA (D 2019 Crowe L.1...P w p w.crowe, oxn