Effective IT Governance requires proper Information Security practices to ensure that the organization's data is secure. On the other hand, Information Security policies and procedures must be aligned with the organization's overall IT Governance framework to ensure that security measures do not negatively impact business operations. Amongst others, the webinar covers: ▪ Bring Governance and InfoSec Together ▪ Answering WIIFM ▪ Business Terms Presenters: Dr. Edward Marchewka Dr. Edward Marchewka is a seasoned executive that has come up through the ranks in the IT vertical, expanding into information security, quality management, and strategic planning. Edward founded and serves as the Principal for 3LC Solutions, enabling YOU to Tell a Better Story in business, with our vCIO, vCISO, quality, and strategy consulting services, through metrics and relating risk to the business with our CHICAGO Metrics® SaaS solution. He has also held several roles leading information technology, most recently with Gift of Hope Organ and Tissue Donor Network, leading the Information and Technology Services department as the Director of IT, Data, and Security Services. Prior to Gift of Hope, he ran information security for Chicago Public Schools. Edward has earned a Doctorate of Business Administration from California Southern University and Masters’ degrees in Business Administration and Mathematics from Northern Illinois University. He earned Bachelors’ degrees in Liberal Studies and Nuclear Engineering Technologies from Thomas Edison State College, N.J. Edward maintains several active IT, security, and professional certifications from (ISC)2, ASQ, ITIL, PCI, PMI, ISACA, Microsoft, and CompTIA. He has held legacy IT certifications from Cisco and HP, and a designation from the National Security Agency. Date: February 22, 2023 ------------------------------------------------------------------------------- Find out more about ISO training and certification services Training: https://pecb.com/en/education-and-certification-for-individuals/iso-iec-38500 https://pecb.com/en/education-and-certification-for-individuals/iso-iec-27001 Webinars: https://pecb.com/webinars Article: https://pecb.com/article Whitepaper: https://pecb.com/whitepaper ------------------------------------------------------------------------------- For more information about PECB: Website: https://pecb.com/ LinkedIn: https://www.linkedin.com/company/pecb/ Facebook: https://www.facebook.com/PECBInternational/ Slideshare: http://www.slideshare.net/PECBCERTIFICATION YouTube video: https://youtu.be/2bSbAdL5Idg

2. Agenda
▪ Introductions
▪ Definitions
▪ Bring Governance and InfoSec
Together
▪ Answering WIIFM
▪ Business Terms
▪ End of the Day

3. Dr. Edward Marchewka
20+ Years IT and InfoSec
DBA, MBA, MS, BS, BA
4x certificates
CISSP, PMP, PCIP, CDPSE,
CMQ/OE, MTA: Security, ITIL:
F, SS, SD, CompTIA 9x
CIO - Pryor Health
Founder - 3LC Solutions

4. Dr. Fred Kwong
20+ Years IT and InfoSec
PhD, MBA, BA
CISSP, CISA, CISM, CDPSE,
PMP, PCIP, ITIL: F
CISO – DeVry University

5. ● IT Governance -
○ The processes that ensure the effective and efficient use of IT in
enabling an organization to achieve its goals.
■ Gartner
● Information Security -
○ The state of being protected against the criminal or unauthorized
use of electronic data, or the measures taken to achieve this.
■ Oxford Dictionary
Definitions

6. ● IAM Example
● Lowering Cyber Insurance
● Reducing Risk and Contingent Liabilities
Bringing IT Governance and InfoSec Together

7. Answering WIIFM

8. Answering WIIFM

9. WHAT DOES BUSINESS TERMS MEAN?
Business Terms

10. ● Know what type of business you are in?
● Decided on the type of program…
● Align the program to support the business you are in!
End of the Day

11. THANK YOU
Q&A
emarchewka@3lcsolutions.com /in/emarchewka
fred.kwong@gmail.com /in/fredkwong/