Marah Al-Eidy, MBA, MSIST
Vice President of Information TechnologyCorporate Headquarters
5911 Kingstowne Village Parkway
Alexandria, VA 22315
Ms. Al-Eidy has been with Strategic Management for more than ten years and in her capacity as IT professional was responsible for managing numerous private- and public- sector IT projects, coordinating the activities of technical staff, and managing the IT Department at Strategic Management Systems, Inc.
Ms. Al-Eidy has performed and managed assessments against published security standards including DISA, FISMA, and HIPAA/HITECH. She is responsible for developing Strategic Management’s assessment methodology and educating clients regarding up to date compliance standards.
As technical consultant Ms. Al-Eidy has led the HIPAA and FISMA audits, as well as the Security Test and Evaluation (“ST&E”), of Strategic Management’s sister organization Integrity Management Services (IMS) information systems as the business owner hosting Centers for Medicare & Medicaid (CMS) data (part of the system’s Certification and Accreditation (“C&A”) process). She has led the development and maintenance of the system’s C&A documentation, including System Security Plans (“SSP”), Risk Assessment, IT Contingency Plans (“ITCP”), and ST&E Plans. She provides IT infrastructure and application systems advisory to perform data analysis and integrity for projects related to CMS. As consultant to IMS she currently manages multiple health care compliance projects and mediates communications among engineers, clients, and end-users. In her capacity as VP of Operations for Strategic Management she oversees the technical infrastructure of our commercial health care consultancy.
Ms. Al-Eidy joined Strategic Management with considerable previous experience in the information technology field. Ms. Al-Eidy started her career as a Technical Support Specialist with Government Management Services, Inc., which has been spun off. She was involved in the successful development and implementation of the proprietary software product known as FACIS®, a web-based data service that reports on disciplinary actions taken against healthcare professionals and entities and now continues to operate under as a separate entity and firm name Verysis. She provided subject matter expertise to define and design, develop and deploy custom applications for clients. Among them a HIPAA web application that was deployed within the Department of Defense/Tricare Management Activity (TMA) and used worldwide by TMA’s HIPAA privacy and security officers. When she first joined Strategic Management, Ms. Al-Eidy performed system administration duties to support LAN and network elements for the organization’s users.