Build a resilient organization by integrating governance, risk management, and compliance into your daily operations.
This course provides a comprehensive framework for understanding and implementing Governance, Risk, and Compliance (GRC) within an information security context. It covers the core pillars of effective governance, the risk management life cycle, and strategies for maintaining regulatory compliance across various global standards. The content details how to align security efforts with business objectives, perform risk assessments, and conduct effective audits to ensure organizational resilience. Participants will learn how to integrate these functions to eliminate silos, improve decision-making, and foster a security-first culture.
Topics Covered:
Cybersecurity Leader & Educator | Higher Education Professor and Director | Author & Speaker | Mentoring the Next Generation
Nearly 30 years in engineering and cybersecurity has taught me one thing: the best security happens when you build it into everything from the ground up. I'm a cybersecurity strategist who believes in lifting up the next generation of cyber professionals while solving today's most complex security challenges. What I do: Currently serving as Director of Temple University's Cyber Defense and Information Assurance Program, where I'm building the curriculum that prepares cybersecurity professionals for real-world threats. I also teach secure software development because developers who understand security from day one build better products. Previously worked in product security at JPMorgan Chase and built the product security program at Envestnet, where I transformed how global organizations integrate security into their product lifecycles. From vulnerability management programs to cloud transformations, I've helped companies reduce risk while accelerating innovation. What drives me: Writing books about cybersecurity (Alicia Connected series, The Application Security Program Handbook) because security awareness should start early. Contributing to the community through my SubStack, YouTube channel, and speaking at conferences because knowledge shared is knowledge multiplied. My approach: Security isn't about saying no but about finding the right way to say yes. Whether I'm working with C-suite executives or entry-level developers, I focus on practical solutions that actually work in the real world. I've worked across finance, healthcare, defense, and commercial industries. Every sector faces unique challenges, but the fundamentals remain the same: good security enables business, it doesn't hinder it.
