January
CONTROL TESTED
Evidence captured.
COMPLYANCE ORIGINALS
THE
LEADERS
WHO BUILT
GRC
A DOCUSERIES
EPISODE ONE
Mike D'Arezzo
Executive Director of Security and GRC
Wellstar Health System
COMPLYANCE ORIGINALS
THE
LEADERS
WHO BUILT
GRC
A DOCUSERIES
EPISODE ONE
Mike D'Arezzo
Executive Director of Security and GRC
Wellstar Health System
The Leaders Who Built GRC
CONCEPT PORTRAIT · NOT MIKE D’AREZZOSCROLL TO BEGINCHAPTER ONE / WHEN MANUAL WAS THE ONLY OPTION
“I learned how to write Visual Basic so that I could transfer data out of an Excel spreadsheet into an XML file and then into a database.”
Mike D'Arezzo
Executive Director of Security and GRC
Wellstar Health System
“Crazy stuff we had to do.”
Mike D'Arezzo
Executive Director of Security and GRC
Wellstar Health System
When information couldn’t move where it needed to go, he learned Visual Basic.
EXCEL → XML → DATABASE
It wasn’t elegant. It worked.
THE WORK KEPT
GETTING BIGGER.
THE TOOLS DIDN’T.
CHAPTER TWO / THE WORK BETWEEN THE CHECKPOINTS
THE BUSINESS
NEVER STOOD STILL.
Evidence was chased.
Controls were tested once a year.
THE SPACE BETWEEN TESTS
THE CONTROL WAS TESTED.
BUT IS IT
STILL WORKING?
“We don’t want
check-the-box compliance.”
“We want to be actually
living and breathing...”
Mike D'Arezzo
Executive Director of Security and GRC
Wellstar Health System
THE QUESTION THAT CHANGES EVERYTHING
“ARE WE DOING
WHAT WE SHOULD
BE DOING
EVERY DAY?”
Mike D'Arezzo
Executive Director of Security and GRC
Wellstar Health System
CHAPTER THREE / EVERY DAY CHANGES EVERYTHING
WHAT SUPPORTS
NIST CSF HERE?
Trusted evidence.
Ready when asked.
“ARE WE DOING WHAT WE SHOULD BE DOING EVERY DAY?”
NOW,
WE CAN KNOW.
From a snapshot.
To a living picture.
CHAPTER FOUR / THE WORK PEOPLE WERE MEANT TO DO
More time for the work
only people can do.
RISK.
JUDGMENT.
MITIGATION.
DECISIONS.
SECURITY.
Automation handles repetition.
People bring judgment.
FINAL CHAPTER / WE’RE NOT THERE ANYMORE
“Crazy stuff we had to do.”
“WE’RE NOT
THERE ANYMORE.”
Mike D'ArezzoExecutive Director of Security and GRCWellstar Health System