Holly Tennyson

Years with MIL: 1

What are you working on now?

Currently I am the technical lead for the implementation of the RSA Archer eGRC application. In this role, I am managing the RSA Archer eGRC application and overseeing application development. This includes application user security, module customization and development, and integration with other applications. I also manage the Microsoft SQL Server Database for the application.

What is important about your work?

The RSA Archer eGRC is going to enhance the security posture of the NAVAIR RDT&E network through continuous monitoring, security operations, and assessment and authorization tools. The application will assist the Security Operations Center with monitoring our network and all devices giving them a place to track security incidents. Additionally, it will streamline the Risk Management Framework (RMF) Authorization Package process, in turn enhancing the security posture of the network and all attached systems. Once the RSA Archer eGRC is operational on the NAVAIR RDT&E network, other competencies and PMA’s will join in use of the application as well.

What are the best aspects about your current job?

The best aspect of my current job is that the 5.4.1 RDT&E staff is really more like a family then a bunch of co-workers. There is no line dividing government versus contract employees, and everyone gets along really well. Our division does pretty regular team-building activities to make work a little more fun. We celebrate accomplishments as a team and recognize those individuals that have done outstanding work.

I enjoy working at MIL because of the family friendly atmosphere. I have been told numerous times that “family comes first,” and that means a lot. I always feel as though MIL leadership has my back and is willing to go the extra mile to make sure that anything I need in my position is covered.

What is the most challenging project you’ve worked on at MIL?

I would have to say that while the project I am currently working on is challenging, the most challenging thing I have worked on during my short time with MIL would be the Microsoft SQL Server Security Technical Implementation Guides (STIG) for an accreditation package. When I began with MIL in June 2015, the RDT&E unclassified accreditation package was being composed and I was tasked with doing the STIGs for Microsoft SQL Server 2012. These guides are like gospel in DoD. Having never seen or executed a STIG, this was a big challenge for me. I was working weekends and late nights to complete them on time for package submission.

What is the best piece of career advice you can offer someone in your field who is either applying to or beginning a career at MIL?

The best piece of career advice that I could offer to someone coming into my field is to be flexible. In IT, situations are always changing and you must be flexible to these changes. Think of every situation as a learning opportunity and a way to grow. I know it is cliché, but knowledge is definitely power! The more you know and the more flexible you are, the further you will go in your career. Another piece of advice I can give is to prepare for retirement: always put (at least) the percentage that will be matched by the company into your retirement account.