FISMA and Risk Management Framework Panel Discussion

April 17

The conference will be held on April 17, 2025 from
2:45 pm to 5:00 pm.

Add this event to your calendar using the Add to Calendar link at the bottom of the page.

Virtual Event

The workshop will be held using Zoom.

Prior to the event, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.

GWDC Member Fee – $5

The fee for GWDC Members is $5 for the conference.
The fee for all other registrants is $15 for the conference.

To become a member and take advantage of the member rate for our events, among other benefits, join ISACA and select the Greater Washington D.C. Chapter as your local chapter.

Earn up to 2 CPEs

Attendees can earn up to 2 CPEs for this event.

Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits. The GWDC will not be responsible for the participant’s inability to respond to the polls.

Opening Remarks and Housekeeping

2025 Panel Discussion on FISMA and Risk Management Framework

Moderator:

• Sarah Mirzakhani
  Principal @ Sikich

Panelists:

• Jennifer Franks (GAO)
  Director, Center for Enhanced Cybersecurity @ US Government Accountability Office (GAO)
• Lisa N. Barr (ONCD)
  Deputy Assistant National Cyber Director @ Office of the National Cyber Director (ONCD)

Closing Remarks

Sarah Mirzakhani
Principal @ Sikich
CISA

Sarah Mirzakhani, CISA, is a principal with over 20 years of experience in information technology audit/information assurance and information security solutions. Sarah serves federal agencies with varied, complex IT systems and environments. Her experience includes leading information technology internal control reviews and security audits, such as the Federal Information Security Modernization Act (FISMA) and overseeing vulnerability assessments and penetration testing.

Sarah is also skilled in conducting and leading system and organization controls/SSAE18 audits and readiness assessments, regulatory compliance reviews, and system implementation reviews for not-for-profit, commercial, and governmental entities. She has extensive knowledge of the National Institute of Standards and Technology (NIST), Federal Information Processing Standards (FIPS), and Office of Management and Budget (OMB).

She provides services in areas, such as IT and Cybersecurity Audits, FISMA Audit Services, and Performance Audits/p>

Sarah holds a Bachelor of Science in Business Administration, Management Information Systems, West Virginia University, and is a Certified Information Systems Auditor (CISA). She is affiliated with the Information Systems Audit and Control Association (ISACA) and the Association of Government Accountants (AGA).

Jennifer Franks
Director, Center for Enhanced Cybersecurity @ US Government Accountability Office (GAO)

Jennifer Franks directs the Center for Enhanced Cybersecurity within GAO’s Information Technology and Cybersecurity team. She oversees reviews that primarily focus on emerging cybersecurity issues and assessing an agency’s ability to protect the confidentiality, integrity, and availability of its sensitive data and computing infrastructure. Her multi-disciplinary teams actively review agencies’ computer security vulnerabilities across their enterprise-wide computing environment by assessing program management compliance and technical controls recommended for the agencies to follow in accordance with federal guidance and leading practices. In addition, she leads reviews in the areas of IT management and operations, financial management, healthcare and public health IT, data protection, and privacy.

Jennifer joined GAO in 2006. Jennifer is a Diversity Champion who leads efforts to increase inclusiveness at GAO, and has facilitated numerous Diversity, Equity, Inclusion, and Accessibility (DEIA) courses. Further, she serves as a Gallup-Certified Strengths Coach.

Jennifer completed the Key Executive Leadership Program at American University, earned a master’s degree in information security policy and management from Carnegie Mellon University, and earned a bachelor’s degree in computer information systems from Hampton University.

Lisa N. Barr
Deputy Assistant National Cyber Director @ Office of the National Cyber Director (ONCD)

Lisa Barr has over 20 years’ experience in the public and private sector leading and directing projects in Cybersecurity, IT Strategic Planning and Risk Management. Lisa is the first Director for Federal Cybersecurity within the Office of National Cyber Director. She leads federal cybersecurity initiatives and efforts that focus on creating cohesion across the federal enterprise and reducing the burden on federal agencies. Within these 20 years, she spent 13 years with the Department of Homeland Security and the Cybersecurity and Infrastructure Security Agency (CISA). She has held numerous trusted leadership positions covering cybersecurity policy, supply chain cybersecurity, federal cybersecurity governance, and critical infrastructure resilience. Lisa served a one-year rotational assignment to the OMB Office of the Federal CIO as a Senior Advisor and program lead for the Federal Acquisition Security Council. Previous to her federal service, Lisa spent several years in the private sector focusing on IT and cyber strategic planning and program management.

Lisa holds a Master’s degree in National Security and Resource Strategy; has received an Executive Chief Information Security Officer certification through Carnegie Mellon; and is a Certified Information Security Manager.