top of page

Governance, Risk, and Compliance

GRC stands for Governance, Risk, and Compliance: a strategic framework that integrates how an organization sets direction (Governance), manages threats/opportunities (Risk), and adheres to rules (Compliance) to achieve goals, act ethically, and operate efficiently and reliably. GRC ensures that business activities align with strategy, protect assets, and meet legal/regulatory requirements, preventing issues such as fines and reputational damage.  Interested in hiring an expert who will right-size a security framework for your organization?

​

  • Former Chief Information Security Officer (CISO).

  • Appointed as the Qualified Individual for compliance with the FTC Safeguard Rule. Wrote Risk Assessments, the organization's Information Security Program and reported to the board of directors.

  • Lead SOC 1 and SOC 2 compliance efforts at multiple organizations.

  • Performed NIST Cybersecurity Framework risk assessments at multiple organizations. 

​

Logo for AICPA, the organization that governs SOC regulatory standards
Symbol for the National Institute of Standards and Technology (NIST)

SOC 2 and NIST Cybersecurity Framework (CSF)

Is your company still using outdated security practices?

Contact by Email

bottom of page