Recommandé
Contenu connexe
Similaire à Jeff kushner trends in grc management
Similaire à Jeff kushner trends in grc management (20)
Dernier
Dernier (20)
Jeff kushner trends in grc management
- 1. Trends in GRC ManagementJeff Kushner, Director of Marketingjeff.kushner@modulo.com
- 2. Modulo Leadership 25+ years experience in IT security and GRC management 300% US growth (09-10) Over 400 employees world-wide Global Leader- Automated GRC Management Solutions Nine-year of development, a mature product Active member of evolving GRC standards ISO 27001, ISO 31000, PCI SVA & Shared Assessments/Bits Initiative 1st company in the world to obtain ISO 27001 certification ISO 9001 certified since 1998
- 3. Complexity and Risk Continue to Increase Source: An Executive View of IT Governance, IT Governance Institute
- 4. Constant Change Regulations Polices People Processes Technology Technology Technology Technology Policy Policy Process Process Process People People
- 9. Automation, Practice and Policy in Information Security for Better Outcomes, IT Policy Compliance Group
- 10. Global survey into the integration of governance,risk and compliance, KPMG
- 11. Global survey into the integration of governance,risk and compliance, KPMG
- 12. IT Balancing Enterprise Risk and Reward, Aberdeen Group
- 13. IT Balancing Enterprise Risk and Reward, Aberdeen Group
- 14. Beyond Demonstrating Compliance, Aberdeen Group
- 15. Beyond Demonstrating Compliance, Aberdeen Group
- 16. Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen The goal: An enterprise view of risk and compliance on a common architecture The Value: A common architecture relieves the GRC burden on the business Disconnected risk and compliance processes introduce greater exposure Manual processes drive inefficiency and raise GRC costs GRC, done right, delivers efficiency and value to the organization
- 17. Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen Foundations of a GRC Technology Architecture A common user interface (screen design) for all applications A common workflow engine throughout the applications A common security model to protect applications and data A common programming language used to build the applications A common database used to run the applications A common enterprise architecture (a method for describing the departments and divisions within the organization)
- 18. References http://www.itgi.org/ http://www.itpolicycompliance.com/ http://www.kpmg.com/Global/en/IssuesAndInsights/ArticlesPublications/Pages/The-convergence-challenge-Global-survey.aspx http://www.modulo.com/research/ (Aberdeen Reports) http://www.corp-integrity.com/
- 20. Example of Modulo Clients South Carolina Department of Health and Human Services
- 22. The Modulo Advantage Automate the manual fragmented approach to GRC management Comply with multiple regulations Lower IT and enterprise risk Reduce cost of people resources and IT infrastructure overhead Know where you stand quicker = ROI
Notes de l'éditeur
- Modulo is the industry’s leading global provider of automated Governance, Risk and Compliance (GRC) management solutions. Our Award-winning Risk Manager™ Software delivers a consistent out-of-the-box solution that simplifies the management of the GRC life-cycle which significantly reduces management costs and corporate risk. Unlike other non-integrated GRC solutions, Modulo provides quick visibility into the corporate risk and compliance posture for executives, management and technical staff . To effectively and effectively measure, manage and proactively sustain risk mitigation, compliance obligations and governance objectives.
- THE MODULO ADVANTAGE Automate the manual fragmented approach to GRC management -Distributed database driven platform with common policy, asset, reporting and incident repository Comply with multiple regulations- Effectively manage the policy lifecycle and map multiple policies to common controls Lower IT and enterprise risk- Consistently measure and communicate risk posture across enterprise Reduce cost of people resources and IT infrastructure overhead- Automate common tasks and leverage technology in place without adding the complexity of agents Know where you stand quicker = ROI- Get value in hours not days or weeks from 25 years of experience in IT security and GRC management expertise