With increased security and privacy threats to the business, management has placed greater emphasis on GRC (Governance, Risk, and Compliance), forcing teams to improve their reporting capabilities.

In this webcast, our experts will:

•  Discuss what goes into impactful reporting
•  Explore how to avoid blind spots
•  Suggest best practices for metrics to include

They will also share how GRC teams can leverage reporting to improve internal processes and increase managerial buy-in for security and GRC.

 Bring your questions for our panel! Attendees are eligible to receive 1 CPE credit.

Generously supported by:

supported by logo
Speakers
speaker photo
Christopher Doyle
Security-GRC (US and Int'l), Head of GRC Platform

Christopher Doyle is an information security professional and advocate for empowering others through technology, with over a decade of experience in compliance and IT assurance. As the first dedicated IT/IS hire for Grafana Labs in 2020, he scaled the Compliance Platform efforts and led initiatives in IT governance and risk management, focusing on compliance with standards such as SOC 2, ISO 27001, ISO 22301, and continues with various others including HIPAA and FedRAMP.

In addition to his professional endeavors, He is an investor in innovative startups that emphasize open-source solutions and generative AI technologies, reflecting his passion for driving technological advancements. He also gives back to the community as Deputy Director for the National Cyber Team with the USAFA-CAP (Captain) and mentoring the next generation of cybersecurity professionals. This role provides unique opportunities to collaborate with exceptional public-private cyber partnerships, including Enforcement (DHS-HSIN, FBI InfraGard), Military (USMC Cyber Aux), and international interests (OSAC, EUROPOL).

With advanced degrees and PhD research in Complex Systems Science, along with multiple DoD 8570 certifications, he remains dedicated to advancing cybersecurity. With a strong commitment to knowledge sharing and innovation, he welcomes collaborations to continue making valuable contributions to the field.

speaker photo
Joshua E. Spring
Senior Product Security & Compliance Analyst , Snowflake

Joshua began his professional career in the US Army, first with the B Co. 1-21 Infantry, 25th ID (L), then with B Co. 2-508 PIR, 82nd Airborne and he has two combat deployments, first to Iraq, then later, to Afghanistan. After the Army, Joshua studied Cyber Security while working as a Nuclear Security Officer at the Columbia Generating Station, where he served as Reaction Team Leader and Adversary Team Member/Leader in addition to the day to day security posting.

In 2015, he transitioned to the Technology industry, starting as a SDET before becoming an assessor in 2017, where he performed Security Control Assessments (SCAs) as well as provided consulting for firms seeking to undergo assessment for FedRAMP. After a brief stint as a the Director of Federal Services for a consulting firm, Joshua found his place at Snowflake, where he currently works on solving complex compliance issues, including architecting and maintaining the Snowflake Common Control Framework, develop compliance automations, and innovate usage of the Snowflake Service to increase visibility, scalability, and usability of compliance initiatives, metrics and data.

speaker photo
Casey Wood
Security & Compliance Lead, Healthcare & Life Sciences, Google Cloud

Casey is an experienced security and compliance product leader with a demonstrated history of solving complex go-to-market issues. He is an expert cloud architect with a product driven mindset that incorporates deep security, privacy and compliance knowledge across industries. Casey is heavily involved in the standards space and has been an active contributor to various ISO working groups and standard publications. Casey is deeply passionate about enterprise risk management and scaling compliance operations–if you ask him, he will tell you that risk is his binary skill set. Casey is a “Boogler” which is short for Boomerang Googler. He started on the legal & policy team in 2015 and made his way into security and compliance engineering on the infrastructure team (now known as Google Cloud). In 2021, Casey left Google cloud to lead privacy compliance for public cloud at Meta.

 

After a two year stint, Casey returned to Google to focus on customer and consumer facing work. This time, he was tasked with leading field security and compliance efforts as part of the “GCAT” -  Google Cybersecurity Action Team team for Healthcare and Life Sciences vertical. Casey is deeply passionate about access and improvement to the healthcare system and will nerd about anything and every AI/ML related. He is a proud girl-dad to the best kiddos in the world, Rylan (5) and Hayden (3), a frenchie dad and vinyl lover. Fun fact, Casey is an identical twin and prior to his tenure in big tech, he was an on-air news anchor and reporter for CBS and ABC. 

Moderator
speaker photo
Tom Bechtold
Digital Events Director, SecureWorld
Tom has been part of the SecureWorld team for over 14 years. He has launched several of the regional conferences we hold today. Tom is currently responsible for SecureWorld Digital, which provides educational content to the SecureWorld audience. He produces, executes, and moderates the majority of the Remote Sessions webcasts while also working closely with the SecureWorld event directors to build relevant agendas at the regional conferences.