Principal
CurrentResponsible for all service and training development and strategy, marketing, branding, pricing, and execution/delivery for a broad spectrum of governance, risk and compliance (GRC) management offerings. Ultimately responsible for business growth and success, Allen also actively communicates and negotiates with clients to establish and determine business drivers and buy-in for leveraging mature management system frameworks and policies to solve complex and diverse governance, risk, and compliance (GRC) issues including today's pressing CCPA and GDPR information privacy requirements.Provide advanced consulting and team development for GRC business management system strategy, program design, policy development, management competence development, and program deployment throughout the United States, Europe, Asia, and the Caribbean for:✅ ISO 31000 Enterprise Risk Management (ERM) System development; performing risk assessments✅ ISO 37301 Compliance Management system development and auditing✅ ISO 37001 Ant-Bribery Management System development and auditing✅ ISO 27001 Information Security Management System development; internal controls development and auditing✅ NIST Cybersecurity Framework✅ ISO 27701 Privacy Information Management System development and auditing✅ ISO 22301 Business Continuity Management System development; performing Business Impact Assessments (BIA’s)✅ Fraud Control Management System development; fraud prevention, detection, and investigationAs a result of my consultation and program development, our clients have been able to successfully establish and integrate critical new business management systems to fulfil organizational strategic goals and regulatory compliance requirements.