ISACA San Diego March Meeting:

“We turned tribal knowledge into a repeatable, auditable playbook — think blue‑team discipline with rogue‑hacker swagger.

What we did:

• Recon: Interviewed engineers, architects, analysts, and leaders to expose undocumented ops and inconsistent controls.
• Exploit the gaps: Mapped policies, SOPs, and GRC to reveal missing/ineffective controls and untracked risks.
• Score & Prioritize: Work with second line of defense to standardized risk scoring (likelihood × impact) aligned to NIST/ISO.
• Deploy the framework: Process → Risk → Controls with owners, templates, review cadences, and preventive/detective/corrective controls.
• Ship culture: Accessible docs, continuous monitoring, and training to make resilience repeatable.

Result: From chaotic scripts to a hardened playbook — proactive risk management that works.

SPEAKER: Curtis Jones - Technology Analyst II at LPL Financial

Know what’s Happening Next — before everyone else does.

Get App

Host or Publisher ISACA San Diego Chapter