The process of CMMC implementation is a project that will occupy LightGrid, and myself for the foreseeable future. Opposed to smaller projects, CMMC compliance determines the success and operational ability of LightGrid, proving to be absolutely necessary when determining importance. While compliance is required by March of 2023, our team will need to constantly alter, develop, and implement new policies to ensure continued compliance, a task that will extend far beyond my time at Old Dominion University. Prior to my time at LightGrid, I found myself understanding these topics, but unaware of how in depth they could extend. With Alan’s leadership, I discovered a newly acquired skillset that far extended that of what I learned within a classroom environment, not by topic alone, but due to the real-world experience of physically being the one to research and develop these policies. My understanding of cybersecurity has extended tenfold due to the complexity of the tasks I have undertaken. Researching current events combined with mapping different frameworks established a mindset dependent on searching for the small details that allow cybersecurity to become interconnected, something I had previously envisioned as a process much simpler than reality. Without LightGrid, I fear that my knowledge of cybersecurity policy would not have extended even half as far as it has now. Similarly, I believe that with these new skills in mind, I find myself stronger in understanding and developing these systems, alongside a newly discovered confidence in my research capabilities.
Throughout the ODU curriculum, cybersecurity courses focused primarily on theory and research opposed to the more technical nature of coding defenses or even forming attacks. While this was something I initially enjoyed, I was unaware how useful in the field these techniques would be. While the data specific coding approach was offered frequently throughout the ODU curriculum through electives, I often strayed away from those offered classes as I was unsure of my technical ability when compared to my research capabilities. For this reason, the ODU curriculum perfectly prepared me for skills required within my internship as I found myself focusing heavily on research and theory-based analysis of both potential and currently in place systems. This was achieved primarily through my chosen electives, a series of theory related courses chosen from my enjoyment in the topic. This enjoyment eventually turned into a minor in cybercrime, the progress in which further prepared me for this internship. The reinforcement of research skills improved my confidence within a learning environment, as my self-doubt stemmed not from my inability to compete with research requirements, but of the quality of my delivered research and writings. In approaching the Fall 2022 semester, I find myself standing taller than before, with more confidence in my ability to uncover, and communicate findings and ideas necessary for discussion and debate.
Of the abilities both strengthened and discovered, I found myself acquiring newly designed skillsets revolving around the research and cross-examination of cybersecurity frameworks and policy sets; a topic that while discussed within the curriculum, was not fully explored in comparison to what I have accomplished at LightGrid. This new ability to dig deeper into both pre-existing frameworks and currently developing frameworks, is one that I find myself being useful in future semesters at ODU, as it builds on my research capabilities and provides a deeper insight into the technical nature of cybersecurity without having to delve too deep into the engineering side of the practice.
The bulk of my experience with LightGrid revolved around the skillset I desired to explore and strengthen, leading me to say with absolute certainty that my goals were fulfilled. While I was confident in my ability to research cybersecurity policies, I was unaware of the complexity that comes from development and implementation of those same policies, a practice I was eager to undertake and explore further. The skills required to develop and implement cybersecurity policy frameworks was built through the intense analysis and discussion of current cybersecurity frameworks, including NIST 800-171, CMMCv2.0, and CISv8.0, three heavily documented and in-depth explanations of cybersecurity systems including the development and implementation and how to further advance these systems. With my new skills, I find myself confident in my abilities to excel within this field, as I know for certain that my love of theory and research combining with these new skills, will offer a future company a great asset that I am able to deliver.
With previously discussed acquired skills in mind, I reflect on my time so far with LightGrid and contemplate what contributed most to my development of said skills as well as what led me to succeeding within the new environment as much as I have. For this reason, I chalk the bulk of my acquired skills, boosted confidence, and desire to continue to learn directly to my supervisor and his excellent leadership. Alan at all times worked to strengthen his interns by boosting cooperation and encouraging discussion as well as debates. With a task as monumental to the business as developing a policy that will soon be mandated by the same departments we take contracts from, I was surprised to see the level of cooperation that Alan encouraged. However, because of this I believe we were able to operate as a team with a further strengthened bond to both each other and the work we were completing. This motivation coming from my supervisor allowed for my success, as I truly believe in a more competitive environment that I would not have operated as efficiently or as effectively as I did here.
Despite my growth in confidence as a reflection, I can confidently relay my initial discomfort in my abilities within this type of environment. Simply put, a lot was riding on this project and my self-doubt served as a tool to hinder my ability to remain confident in my ability to properly dictate my ideas while remaining unsure of how to discuss future topics. This plagued my performance for the first few weeks, as my anxiety got the better of me when it came to sharing my progress and ideas. This was remedied by Alan’s leadership and encouragement but remained slightly due to the challenge in implementing such a complex framework while also being faced with the task of improving or even replacing the already in place, and out of date, policy. While it wasn’t impossible, it was a daunting task that seemed impossible in the beginning, however, again due to the supervision and assistance by a mentor who encouraged success, I found myself slowly adapting to the project and recognizing it for what it was. Opposed to an impossible task, I began to view it more as a means to an end. I began to notice myself viewing it as a real career opposed to the homework I was used to. The challenge overall wasn’t the work I was doing or the skills I was trying to acquire, but instead the self-doubt that held me back, coupled with my constant ability questioning. Once that was past, I felt assurance in my ability to become a full member of the team, both mentally and physically, and was ready to tackle the remainder of the project.
For future interns within the field, my best recommendation will remain keeping an open mind to new ideas as well as your ability to discuss both your own goals and assisting others in realizing the potential of their ideas and discoveries. In preparing for tasks such as policy development, remember that the process is one that takes a significant period of time when compared to projects you are most likely already used to. But above all else, remember that teamwork is crucial within the environment of a government contractor, as without that, some ideas have the potential to be forgotten or abandoned entirely.
In forming new ideas both on your own or within your team, try and remember to pursue every theory no matter how small. If unsupported, try and find the slightest evidence either within existing policy or by approaching your team with uncovering the deeper insights of what could be implemented. Remember that nothing is concrete, that the document you are drafting is a living document that will be referenced by a large number of individuals throughout numerous divisions within the business environment. However, above all else I recommend remaining confident in both your abilities as well as in your team. Self-confidence is crucial in presenting new ideas as well as defending those ideas. A lack of confidence suggests a lack of confidence in what you are presenting opposed to a lack of confidence in yourself. Stay true to what you are presenting and defend what you are confident in while also remaining open to new ideas and insights from other team members.
Throughout my time with LightGrid, I look back on my developed skills and ideas and remain confident that I have made significant progress in both self-discovery as well as self-confidence. I look forward to both the future of my time at ODU as well as my time within a professional environment not with the anxiety I used to own but instead a new found excitement about what the future holds. I am eager to explore my new possibilities, eager to develop new ideas, and eager to continue to explore the world I am very much invested in. LightGrid taught me a lot, but above all else it taught me how to remain open minded and confident within a complex field filled with conflicting ideas. If I were to isolate a single takeaway, I would rest easy knowing that I have gained the experience necessary to become a real player in the field opposed to a student observing. Though it is hard from a first-person perspective, I no longer feel like a student, but instead a real team member, working towards a goal that is admired by others working on similar projects. Throughout my senior year at ODU, I enter my Fall semester with high hopes that my new found skills will propel me not only to success but to the overall goal of entering the field of cybersecurity with confidence in my abilities. For that, I thank LightGrid, and I thank my team members for pushing me to pursue my ideas and continue to present them with enthusiasm. For the future, I know I am where I belong, and remain eager to explore the future.