The assignment
In my IT Manager role, I performed a company-wide security assessment using the NIST Cybersecurity Framework 2.0. The work looked beyond an individual system to consider security across the organization.
The assessment was part of my operational responsibility, not an independent certification audit. Its purpose was to identify gaps and inform practical improvements.
My contribution
I used NIST CSF 2.0 as the assessment framework and established a cybersecurity risk register. I also implemented improvements across identity and access management, network security, disaster recovery and legacy infrastructure.
- Conducted the company-wide security assessment.
- Established a risk register to organize identified risks.
- Integrated solutions to address security and infrastructure gaps.
- Connected assessment work with the systems I managed day to day.
Areas of implementation
Identity & access
Improvements to the controls governing accounts, permissions and access to business systems.
Network security
Security improvements across the infrastructure connecting people, systems and locations.
Disaster recovery
Recovery-related improvements supporting the protection and availability of business systems.
Legacy infrastructure
Integration of updated solutions within an existing operational environment.
What this work demonstrates
The work resulted in a risk register and implemented security improvements, rather than an assessment that ended with recommendations alone. It brings together framework application, organizational scope and practical remediation.
My contribution connected assessment with implementation: understanding the environment, identifying gaps and carrying improvements into the systems I managed.
Disclosure boundary
Specific weaknesses, internal documents and detailed before-and-after configurations are not published here. The separate illustrative work sample shows an example documentation structure using fictional scenarios, not employer data.
View the illustrative work sample