Deepa Rajagopalan is a Senior Consultant at EY within the Consulting practice. She received her Master’s in Management Information Systems from the University at Buffalo, The State University of New York. During her time at graduate school, she was involved in co-authoring two research papers “Second Line of Defense and its importance” and “Meeting privacy expectations using cybersecurity controls”. She has over 6 years of experience in assessing cybersecurity controls, programs and strategies, developing and executing cybersecurity strategy and performing cyber risk assessments and evaluating and assessing cyber risks. She holds credibility in Cyber Strategy and Governance , Information Assurance, Information Security, Cybersecurity, Data Protection and Data Privacy, Third- party risk management (TPRM), Vendor Risk Management (VRM), Change Management, ISO 9001:2015, ISO/IEC 27001:2013, COBIT 2019, NIST CSF, NIST SP 800-53, COSO, CIS Controls and ITIL frameworks and CMMI Dev 1.3 and Dev 2.0 process models and GDPR, HIPPA and CCPA privacy regulations.