Maartje Aangeenbrug

Security Process Assessments at customers.

Responsible for the coordination and monitoring of the general Triage Activities within ING CCERT. Process Owner of Incident Management Process. Active Operational Incident Manager, handling assigned cases, monitoring progress of the cases and assessing the given solutions. Cooperation with international local cyber security experts. Management Reporting as well as informative reporting to international entities.

In my role as Team lead of the CCERT Triage team, I was responsible for the operations of the process from september 2013 untill december 2016. Top Priority was communication with the reporters (White Hats). The valuable reports gave us the opportunity to learn and improve. Most helpful in the process was the self designed Case Management Tooling. In the role as Product Owner for the tool, I had the responsibility for the requirements, the design and user tests during development.

Process Owner of the Security Incident Management process (SIM). SIM handled all sorts of computer related Incidents from the global organisation. Incidents varied from virus infections to escalated events from monitoring processes. Besides the role as Process Owner, I was also one of the Operational Incident Managers, handling and coordination assigned incidents cases. This role also included Stand-by shifts.

Creating overview of all tasks and responsibilities by the TSA team. Collecting all process descriptions and procedures used for the tasks and responsibilities. A gap analysis was made to give insight in the missing or incomplete process descriptions and procedures. I was responsible for the coordination and initiation for creating the missing documents.

Authorisation Management, Project Security Consultancy, Coordinator for the Security team. - Regular operational tasks - Project support - Audits - Authorisation Verifications - Role Based Access Control.

During this period I worked with several Security Control Processes. Several regular testings were implemented to create compliance evidence dossiers. Verifications showed deficiencies which where then analysed and followed up on. This involved cooperation with several expert teams throughout the Infra organisation. Reporting gave us direction of priorities and process improvements to avoid deficiencies in the future. My main expertise was Authorisation Verification on the different Infra platforms.

As (temporary) additional force I was added to the Role Control Centre. By supporting the team, handling the requests for changes of the Authorisation Roles (authorisation change requests), I was also able to expand my knowledge of the organisations Authorisation Management, which was a valuable extra. The many authorisation Verifications I processed did benefit from my RBAC knowledge.

Different projects for implementing testings for SOx Regulation. For Applications, pressure cooking sessions were planned with several functional and technical experts. - Applications were completely analysed and Audit Evidence dossiers for Sox testing were created. For Infra systems, the technical admins performed several TOE's (Test of Existence) and TOD's (Test of Design). - Evaluate the testing results and create Audit Evidence Dossiers.

Teaching English pronunciation to Vietnamese Primary school children

Basics of programming including Java and SQL

General Building Construction Engineering