Secondly, I’ve always thought aligning security initiatives and goals with business objectives was a little weak. It feels like I need some good examples.

Thanks for your time.

Yes I appreciate those two insights.

I believe I’m tracking along nicely until I get to the Regulatory and Legal requirements. I will give it more attention as I mature the program.

Hi Eric. The company I work for does not have a medical device.

But if you are in the GRC or CISO / Cybersecurity Director role I’d love to hear what is working for you and what is not.

I’m looking to gain a better understanding on what I’m missing from my own program.

Thanks