Jo Anna Bennerson, PMP, ITIL, CPA, CISA, CGEIT, serves as a Technology Advisor and Information Systems Security Officer (ISSO) for the U.S. Federal Government, where she leverages her extensive expertise in information cyber security transformation and operations. With a robust background in policy formulation, strategy...
Jo Anna Bennerson, PMP, ITIL, CPA, CISA, CGEIT, serves as a Technology Advisor and Information Systems Security Officer (ISSO) for the U.S. Federal Government, where she leverages her extensive expertise in information cyber security transformation and operations. With a robust background in policy formulation, strategy development, and organizational program management, Jo Anna is instrumental in enhancing the security posture of federal information systems. Her role encompasses performing comprehensive risk management assessments, ensuring compliance with FISMA and NIST standards, and implementing the Risk Management Framework (RMF) to safeguard sensitive data.
Jo Anna's key projects include leading initiatives focused on vulnerability management and the development of Plans of Action and Milestones (POAMs), which are critical for tracking and mitigating security risks. Her proficiency in writing policies and Standard Operating Procedures (SOPs) ensures that security protocols are not only effective but also aligned with federal regulations. As a published technical author, she contributes to the body of knowledge in information assurance, sharing insights that help shape best practices within the industry.
In addition to her technical acumen, Jo Anna excels in client engagement, utilizing her skills in business coaching and consulting to foster collaboration among stakeholders. Her project management expertise, combined with a deep understanding of the Software Development Life Cycle (SDLC), allows her to effectively oversee complex IT audits and readiness assessments. Jo Anna's commitment to building and transforming cybersecurity frameworks positions her as a pivotal figure in the ongoing evolution of information security within the federal landscape.
