Who Runs Secure In Security
Secure In Security is written and maintained by N. Craig, an information security practitioner with nearly three decades in information technology and cybersecurity with a large federal organization. SIS exists to turn that field experience into clear, practical reference material for people building or growing a career in security.
N. Craig started out as an information systems administrator and has since worked as a systems engineer, information assurance technician and acting IT director, and spent more than fifteen years as an organization’s Information System Security Manager (ISSM), responsible for keeping networks secure, accredited and compliant.
Experience at a Glance
| Area | What that work involved |
|---|---|
| Security management & compliance | Information System Security Manager and cybersecurity workforce manager; DoD Risk Management Framework (RMF) authorization packages in eMASS; security policy and procedure development |
| Network & perimeter security | Routers, switches, firewalls, web proxies and site-to-site VPNs linking geographically separated networks |
| Vulnerability & endpoint management | Enterprise vulnerability scanning and host-based security systems; system hardening to NSA and DISA guidance |
| Systems & identity | Active Directory domains supporting 2,500+ users, PKI-based single sign-on, Windows Server, SQL Server and SharePoint |
| Continuity & operations | Disaster recovery planning, data-at-rest protection, and ITIL-based change and incident management |
Credentials & Education
- Degrees M.S. Information Technology (Capella University); B.A. Psychology (University of Central Oklahoma)
- Certifications CISSP (Certified Information Systems Security Professional); Microsoft MCSE and MCSA; Certified Citrix Administrator
- DoD qualification DoD 8570 Information Assurance Management (IAM) Level III
- Additional training CompTIA CySA+, Cisco CCNA, RMF with eMASS, Juniper routing, VMware vSphere and Windows Server
How SIS Content Is Built
SIS reference pages are built from primary sources — the published standards, framework documents and vendor documentation themselves — and shaped by practical experience applying them in real environments. Tool walkthroughs and commands are written for learning; test them in a lab before using them on any network you are responsible for.
Spotted an error or something out of date? Use the Contact page; corrections are reviewed and fixed.
Our Mission
Secure In Security helps IT and security practitioners — and the people working toward those roles — understand frameworks, certifications and tools well enough to apply them, not just pass an exam. Coverage spans security foundations, network and cloud security, offensive and defensive operations, governance and compliance, and certification paths.