Chrissy Ford

01 About

02 What I Do

• Phishing Simulation

  Run the program across 350+ organizations and roughly 20,000 users: building campaigns, tailoring them to each client, and using the results to shape what comes next.

• Security Awareness Training

  Create and deliver training campaigns relevant to each customer, tailoring content, frequency, and user groups as needed. Deliver annual Information Security Training to finance-vertical customers, covering both end users and executives.

• vISO Advisory

  Monthly Virtual Information Security Officer review calls for a finance-vertical client: explaining technical findings in their environment, walking through security best practices, and relating both back to the frameworks that apply to them.

• Dark Web Monitoring

  Launched our new Dark Web Monitoring service with Flare as the vendor, from concept to go-live: six-vendor evaluation, proof-of-concept testing, pricing and labor model, and delivery lead at launch.

• Incident Handling

  Grounded in the GCIH certification and its SANS course, SEC504: Hacker Tools, Techniques, and Incident Handling. Covers the incident handling process, attacker techniques, and hands-on detection and response in a lab setting.

• Identity

  Working experience across Google Cloud Platform and Microsoft Azure. Allowlisting in Microsoft Defender, GCP, and Proofpoint and other email security platforms, plus SSO configuration, user provisioning, and troubleshooting.

03 Experience

1. Cybersecurity Support Specialist

   All Covered (Konica Minolta) · Tampa, FL

   Jul 2024 – Present

   • Launched a new Dark Web Monitoring service (Flare) from concept to go-live: evaluated six vendors, ran proof-of-concept testing, partnered cross-functionally on pricing, labor model, and service functionality, and was selected to lead delivery at launch.
   • Deliver monthly vISO review calls for a financial-vertical client, plus annual information security training covering security best practices to a mixed audience of end users and executives.
   • Administer security awareness and phishing simulation programs across more than 350 client organizations covering roughly 18,000–20,000 end users; translate observed phishing and social-engineering trends into targeted training.
   • Investigate and resolve issues across the Managed Security Awareness Training and Dark Web Monitoring services: provisioning and directory sync failures, integration errors across KnowBe4, Google Workspace, Microsoft 365, and Proofpoint, and log review.
   • Configure identity and email security controls during client onboarding: SSO in Google Workspace and Azure AD, Microsoft 365 threat policy allowlisting, and Proofpoint allowlisting.

04 Technical Proficiencies

05 Credentials

06 Projects & Community

• Speaking

  TryHackMe Company Retreat, Italy 2024

  Invited to speak to the TryHackMe team about my path into cybersecurity, from an advertising degree through nursing to GIAC certification.

• Labs

  Top 3% of TryHackMe Users Globally

  Offensive and defensive lab practice, plus Hack The Box and CTF events including SANS NetWars.

• Homelab

  Self-Hosted Lab & Site

  Built and administer a LAMP stack on Ubuntu running WordPress; working knowledge of Kali, Parrot, and Slingshot Linux distributions.

• Community

  GIAC Advisory Board & WiCyS

  GIAC Advisory Board member since 2024, contributing feedback where applicable. Member of Women in CyberSecurity (WiCyS).