SlideShare une entreprise Scribd logo
1  sur  21
Trends in GRC ManagementJeff Kushner, Director of Marketingjeff.kushner@modulo.com
Modulo Leadership 25+ years experience in IT security and GRC management 300% US growth (09-10) Over 400 employees world-wide Global Leader- Automated GRC Management Solutions   Nine-year of development, a mature product Active member of evolving GRC standards  ISO 27001, ISO 31000, PCI SVA & Shared Assessments/Bits Initiative 1st company in the world to obtain ISO 27001 certification ISO 9001 certified since 1998
Complexity and Risk Continue to  Increase Source: An Executive View of IT Governance, IT Governance Institute
Constant Change Regulations Polices People Processes Technology Technology Technology Technology Policy Policy Process Process Process People People
Fragmented Approach to GRC Management People People People Technology Technology Technology Process Process Process Facility Facility Facility ,[object Object]
Lack of automation
Little Consistency
Limited visibility,[object Object]
Automation, Practice and Policy in Information Security for Better Outcomes, IT Policy Compliance Group
Global survey into the integration of governance,risk and compliance, KPMG
Global survey into the integration of governance,risk and compliance, KPMG
IT Balancing Enterprise Risk and Reward, Aberdeen Group
IT Balancing Enterprise Risk and Reward, Aberdeen Group
Beyond Demonstrating Compliance, Aberdeen Group
Beyond Demonstrating Compliance, Aberdeen Group
Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen The goal: An enterprise view of risk and compliance on a common architecture The Value: A common architecture relieves the GRC burden on the business Disconnected risk and compliance processes introduce greater exposure Manual processes drive inefficiency and raise GRC costs GRC, done right, delivers efficiency and value to the organization
Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen Foundations of a GRC Technology Architecture A common user interface (screen design) for all applications A common workflow engine throughout the applications A common security model to protect applications and data A common programming language used to build the applications A common database used to run the applications A common enterprise architecture (a method for describing the departments and divisions within the organization)
References http://www.itgi.org/ http://www.itpolicycompliance.com/ http://www.kpmg.com/Global/en/IssuesAndInsights/ArticlesPublications/Pages/The-convergence-challenge-Global-survey.aspx http://www.modulo.com/research/ (Aberdeen Reports) http://www.corp-integrity.com/
Modulo The Company
Example of Modulo Clients South Carolina Department  of  Health and Human Services
Modulo GRC Metaframework

Contenu connexe

Similaire à Jeff kushner trends in grc management

Ecom Nets Technologies
Ecom Nets TechnologiesEcom Nets Technologies
Ecom Nets Technologies
nveeravalli
 
IO Journey All Up
IO Journey All UpIO Journey All Up
IO Journey All Up
baselsss
 
Nassers Pitchbook 03032010
Nassers Pitchbook 03032010Nassers Pitchbook 03032010
Nassers Pitchbook 03032010
Nasser J Khan
 
Nassers Pitchbook 03032010
Nassers Pitchbook 03032010Nassers Pitchbook 03032010
Nassers Pitchbook 03032010
Nasser J Khan
 
NachiketaSharmaResume - Executive
NachiketaSharmaResume - ExecutiveNachiketaSharmaResume - Executive
NachiketaSharmaResume - Executive
Nachiketa Sharma
 
Thomas R Graham bio
Thomas R Graham bioThomas R Graham bio
Thomas R Graham bio
Tom Graham
 
Security architecture rajagiri talk march 2011
Security architecture  rajagiri talk march 2011Security architecture  rajagiri talk march 2011
Security architecture rajagiri talk march 2011
subramanian K
 
IBM - Understanding the value of ECM
IBM - Understanding the value of ECMIBM - Understanding the value of ECM
IBM - Understanding the value of ECM
rashmin_cby
 

Similaire à Jeff kushner trends in grc management (20)

Ecom Nets Technologies
Ecom Nets TechnologiesEcom Nets Technologies
Ecom Nets Technologies
 
S Rod Simpson Resume
S Rod Simpson ResumeS Rod Simpson Resume
S Rod Simpson Resume
 
IO Journey All Up
IO Journey All UpIO Journey All Up
IO Journey All Up
 
Nassers Pitchbook 03032010
Nassers Pitchbook 03032010Nassers Pitchbook 03032010
Nassers Pitchbook 03032010
 
Nassers Pitchbook 03032010
Nassers Pitchbook 03032010Nassers Pitchbook 03032010
Nassers Pitchbook 03032010
 
Maclear’s IT GRC Tools – Key Issues and Trends
Maclear’s  IT GRC Tools – Key Issues and TrendsMaclear’s  IT GRC Tools – Key Issues and Trends
Maclear’s IT GRC Tools – Key Issues and Trends
 
Real World Governance Risk and Compliance | European Collaboration Summit 2023
Real World Governance Risk and Compliance | European Collaboration Summit 2023Real World Governance Risk and Compliance | European Collaboration Summit 2023
Real World Governance Risk and Compliance | European Collaboration Summit 2023
 
MullaneyChrisER
MullaneyChrisERMullaneyChrisER
MullaneyChrisER
 
NachiketaSharmaResume - Executive
NachiketaSharmaResume - ExecutiveNachiketaSharmaResume - Executive
NachiketaSharmaResume - Executive
 
FulcrumWay GRC Solutions
FulcrumWay GRC SolutionsFulcrumWay GRC Solutions
FulcrumWay GRC Solutions
 
Enterprise Architecture: An enabler of organizational agility
Enterprise Architecture: An enabler of organizational agility Enterprise Architecture: An enabler of organizational agility
Enterprise Architecture: An enabler of organizational agility
 
The Challenges Of, And Advantages In, Establishing A Consistent Architectural...
The Challenges Of, And Advantages In, Establishing A Consistent Architectural...The Challenges Of, And Advantages In, Establishing A Consistent Architectural...
The Challenges Of, And Advantages In, Establishing A Consistent Architectural...
 
Thomas R Graham bio
Thomas R Graham bioThomas R Graham bio
Thomas R Graham bio
 
Sept 2008 Presentation Quality & Project Management
Sept 2008 Presentation Quality & Project ManagementSept 2008 Presentation Quality & Project Management
Sept 2008 Presentation Quality & Project Management
 
Erpppt
ErppptErpppt
Erpppt
 
Adaptive grc life_sciences_case_study
Adaptive grc life_sciences_case_studyAdaptive grc life_sciences_case_study
Adaptive grc life_sciences_case_study
 
GLOBAL LIFE SCIENCES COMPANY USES ADAPTIVEGRC SUITE TO MANAGE RISK & COMPLI...
GLOBAL LIFE SCIENCES COMPANY USES  ADAPTIVEGRC SUITE  TO MANAGE RISK & COMPLI...GLOBAL LIFE SCIENCES COMPANY USES  ADAPTIVEGRC SUITE  TO MANAGE RISK & COMPLI...
GLOBAL LIFE SCIENCES COMPANY USES ADAPTIVEGRC SUITE TO MANAGE RISK & COMPLI...
 
Security architecture rajagiri talk march 2011
Security architecture  rajagiri talk march 2011Security architecture  rajagiri talk march 2011
Security architecture rajagiri talk march 2011
 
IBM - Understanding the value of ECM
IBM - Understanding the value of ECMIBM - Understanding the value of ECM
IBM - Understanding the value of ECM
 
CMMi & IT Governance
CMMi & IT GovernanceCMMi & IT Governance
CMMi & IT Governance
 

Dernier

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Safe Software
 

Dernier (20)

Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Corporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptxCorporate and higher education May webinar.pptx
Corporate and higher education May webinar.pptx
 
Apidays Singapore 2024 - Scalable LLM APIs for AI and Generative AI Applicati...
Apidays Singapore 2024 - Scalable LLM APIs for AI and Generative AI Applicati...Apidays Singapore 2024 - Scalable LLM APIs for AI and Generative AI Applicati...
Apidays Singapore 2024 - Scalable LLM APIs for AI and Generative AI Applicati...
 
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...
 
Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...Apidays New York 2024 - The value of a flexible API Management solution for O...
Apidays New York 2024 - The value of a flexible API Management solution for O...
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...
 
Manulife - Insurer Transformation Award 2024
Manulife - Insurer Transformation Award 2024Manulife - Insurer Transformation Award 2024
Manulife - Insurer Transformation Award 2024
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot ModelNavi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin WoodPolkadot JAM Slides - Token2049 - By Dr. Gavin Wood
Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood
 
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers:  A Deep Dive into Serverless Spatial Data and FMECloud Frontiers:  A Deep Dive into Serverless Spatial Data and FME
Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME
 

Jeff kushner trends in grc management

  • 1. Trends in GRC ManagementJeff Kushner, Director of Marketingjeff.kushner@modulo.com
  • 2. Modulo Leadership 25+ years experience in IT security and GRC management 300% US growth (09-10) Over 400 employees world-wide Global Leader- Automated GRC Management Solutions Nine-year of development, a mature product Active member of evolving GRC standards ISO 27001, ISO 31000, PCI SVA & Shared Assessments/Bits Initiative 1st company in the world to obtain ISO 27001 certification ISO 9001 certified since 1998
  • 3. Complexity and Risk Continue to Increase Source: An Executive View of IT Governance, IT Governance Institute
  • 4. Constant Change Regulations Polices People Processes Technology Technology Technology Technology Policy Policy Process Process Process People People
  • 5.
  • 8.
  • 9. Automation, Practice and Policy in Information Security for Better Outcomes, IT Policy Compliance Group
  • 10. Global survey into the integration of governance,risk and compliance, KPMG
  • 11. Global survey into the integration of governance,risk and compliance, KPMG
  • 12. IT Balancing Enterprise Risk and Reward, Aberdeen Group
  • 13. IT Balancing Enterprise Risk and Reward, Aberdeen Group
  • 16. Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen The goal: An enterprise view of risk and compliance on a common architecture The Value: A common architecture relieves the GRC burden on the business Disconnected risk and compliance processes introduce greater exposure Manual processes drive inefficiency and raise GRC costs GRC, done right, delivers efficiency and value to the organization
  • 17. Value of a CommonArchitecture for GRC Platforms, Michael Rasmussen Foundations of a GRC Technology Architecture A common user interface (screen design) for all applications A common workflow engine throughout the applications A common security model to protect applications and data A common programming language used to build the applications A common database used to run the applications A common enterprise architecture (a method for describing the departments and divisions within the organization)
  • 18. References http://www.itgi.org/ http://www.itpolicycompliance.com/ http://www.kpmg.com/Global/en/IssuesAndInsights/ArticlesPublications/Pages/The-convergence-challenge-Global-survey.aspx http://www.modulo.com/research/ (Aberdeen Reports) http://www.corp-integrity.com/
  • 20. Example of Modulo Clients South Carolina Department of Health and Human Services
  • 22. The Modulo Advantage Automate the manual fragmented approach to GRC management Comply with multiple regulations Lower IT and enterprise risk Reduce cost of people resources and IT infrastructure overhead Know where you stand quicker = ROI

Notes de l'éditeur

  1. Modulo is the industry’s leading global provider of automated Governance, Risk and Compliance (GRC) management solutions.  Our Award-winning Risk Manager™ Software delivers a consistent out-of-the-box solution that simplifies the management of the GRC life-cycle which significantly reduces management costs and corporate risk.   Unlike other non-integrated GRC solutions, Modulo provides quick visibility into the corporate risk and compliance posture for executives, management and technical staff . To effectively and effectively measure, manage and proactively sustain risk mitigation, compliance obligations and governance objectives.
  2. THE MODULO ADVANTAGE Automate the manual fragmented approach to GRC management -Distributed database driven platform with common policy, asset, reporting and incident repository Comply with multiple regulations- Effectively manage the policy lifecycle and map multiple policies to common controls Lower IT and enterprise risk- Consistently measure and communicate risk posture across enterprise Reduce cost of people resources and IT infrastructure overhead- Automate common tasks and leverage technology in place without adding the complexity of agents Know where you stand quicker = ROI- Get value in hours not days or weeks from 25 years of experience in IT security and GRC management expertise