Debbe Watson

 PCI Compliance Responsibilities: Leading annual PCI assessment since 2009. Working directly with assigned QSA from Compliance Validation firms: o Lead PCI Assessment preparations which includes security process documentation and evidence gathering, i.e.; system configuration documents, flow charts, and network diagrams. o Participate in governance and change control process to influence project(s) to adhere to PCI DSS requirements o Provide guidance on PCI requirements to internal business units to aid their efforts in implementing, deploying, and maintaining PCI certified systems and infrastructures. o Evaluate secure configuration and operations of all in‐scope devices to determine risk and possible scoping violations, as well as, validate the efficiency of any existing compensating controls.

Project Management Responsibilities: Strategic planning, standardization, and implementation of enterprise products, services, and solutions requested by I.T. and other business units. Manage complex IT projects, vendor relationships, and contract negotiations. Providing status reports to management at regular intervals. o Active Directory Project: Managed project, outside consultant, and internal team in upgrading AD Infrastructure and leverage secure AD design to isolate CDE systems within a protected child domain with no trust relationships with other child domains in the forest. o Anti‐Virus Project: Developed strategic plan for deploying Symantec End Point Protection across enterprise and systems within CDE.

 Manage and support all deployed technologies  Point of Sale Technical Support