At Intreis, our services, tools, and methods are based on the premise that a single, well-designed and well-integrated internal controls framework can transform your entire IT program. At the core, we believe service delivery & operations, and GRC are two sides of the same coin. There is a basic, inherent connection between well-designed, well-integrated internal controls, and improving your business. As such, our frameworks are designed to integrate directly with your existing ITSM platform so you can take full advantage of the automated workflow, rules engine, and ticketing processes you may already have in place, to enable and automate the controls required to achieve your objectives. By making use of your ITSM platform’s core capabilities, Intreis can create the perfect engine to not only power your internal controls framework, but vastly improve your IT operations.www.intreis.com

At Protiviti, Nathan works with clients to solve problems affecting IT Risk and Compliance. Nathan works with IT and internal audit departments to assess the governance structure to align IT's priorities with business strategies and objectives. He helps clients to identify, prioritize, and address risk that is inherent to their IT organizations. Nathan's focus areas include the following:IT Risk Management:Assessing and implementing processes to help organizations identify IT risks, quantify the impact of those risks, and continuously monitor the controls implemented to mitigate risk. IT Compliance: Helping organizations to achieve compliance with laws and regulations, including PCI-DSS, Sarbanes-Oxley, ISO 27001/2, Gramm-Leach-Bliley Act, and FFIEC requirements.IT Security:Assisting clients with the identification and classification of sensitive data and development of information security programs to identify internal and external threats and vulnerabilities. Implementing a layered information security control framework that reduces exposure to threats. Security expertise includes secure network design, system development and acquisition, identity and access management, encryption, and security monitoring. IT Internal Audit: Leading the planning and execution of various process audits, system audits, operational audits, integrated audits, and compliance audits.