GRCP-03
A living GRC workbook for the HIPAA Security Rule
A risk register with inherent and residual scoring, cross-walked to the HIPAA Security Rule and the evidence behind each control, maintained alongside a cloud migration rather than after it.
Risk managementP-05
Implementing a risk management information system
Leading a full RMIS implementation from requirements to launch, then administering the platform for more than five years.