Governance, Risk and Compliance: A Holistic Approach 
Greg Zimmerman
Jefferson Wells
Presentation Abstract:
Governance, Risk, and Compliance, The fundamentals – communication, assessment, risk ranking, improvements / remediation. The presentation will enable the attendee to bridge the gap between theory and reality and will focus on the fundamentals of Information Technology Governance. Greg will discuss the Risk Management & Compliance Landscape, provide a general understanding of IT Governance, Risk, and Compliance, where to begin your GRC implementation, and some lessons learned during the implementation. A special focus will be placed on linking multiple regulatory and compliance frameworks to develop a unified approach.
Bio:
Greg has over 19 years of progressive experience in information technology support, management, analysis, and consulting. He has a varied background, with industry experience in telecommunications, financial services, and professional services, and consulting experience in the energy industry. Greg received his BBA in Computer Information Systems from Mercer University and his MBA from Auburn University. He has obtained his certifications in CISA, HISP, and PMP.
In his current position as Global Solutions Manager within Technology Risk Management, his responsibilities include solutions enhancements, methodology development, and maintenance of technology risk toolkits and templates. The majority of this role consists of product development for the Technology Risk Management practice.
Greg has previously served in a Governance capacity for a large local bank. While there, he was responsible for business performance management within the Information Technology organization. The majority of his experience has been in the electronic communications and enterprise messaging operations environment where he managed projects to implement corporate messaging systems for 80,000 and 40,000 users.
