CISO Insights: Navigating the GRC Landscape
A robust GRC program fosters the ability to manage key risks and protect sensitive data, aligning security initiatives with organizational objectives; and ultimately allows the CISO to establish trust and confidence with key stakeholders. However, the constantly evolving regulatory landscape is resource intensive to manage and requires striking a delicate balance of security controls that won’t stifle productivity or innovation. In this panel discussion, CISOs from diverse industries share insights on: • Determining and implementing appropriate policies and security controls • Addressing challenges to integrate GRC practices into organizational operations • Securing adequate resources to implement and maintain a GRC program
Speakers
Parham Eftekhari is a recognized business executive in the information security sector with a lifelong passion for leadership, and community engagement. His expertise spans critical infrastructure technology and policy, business strategy and operations, executive advising, and thought leadership content initiatives.
Parham has published over a dozen information security reports, regularly engages with the media, and has contributed to countless briefings and events at institutions including TEDx, Congress, the World Bank, RSA, IFA+, (ISC)2, C-SPAN, and the Institute for Critical Infrastructure Technology (ICIT).
Steven Fox directs the GRC strategy for Educational Testing Services, the world’s largest private educational testing and assessment organization. He brings a cross-disciplinary, international perspective to the practice of information security; combining his experience as a Deputy CISO, security consultant, an IT Auditor and a systems engineer with principles from behavioral/organizational psychology to address security challenges.
Shannon Culp is currently the Director Global Information & Cyber Security Governance & Awareness for Archer Daniels Midland Company. She has over 29 years of Business Continuity and Information Security and Risk Management experience, as well as consulting experience, Management in “Big 4” environment and large private industry management experience. She has designed general computer controls for SOX and defined a PCI program for level 2 Merchant. Shannon helped lead the development of E&Y’s Security Architecture Methodology, and helped developed Governance Programs, Identity and Access Management Programs, Risk Management Programs and Vulnerability Management Programs.