Gruntworks Technology is a one-person practice for one part of a security program: the exception queue.

Background
17 years in IT, the last 6 in issues and exceptions management at large financial-services and SaaS companies. I’ve managed queues with hundreds of exception cases and reported to C-suite officers at publicly traded companies. CISSP, CISM, CISA.

The same failures kept recurring across queues: one issue opened three times, the same risks accepted ninety days apart, and action plans without an owner. I wrote The GRC Exception Handbook to put the fixes in one place, and I use Gruntworks to apply them for clients.

What that means for you

• You work with me directly, not a handoff.

• You keep the documents, the findings, and the process.

• No specific tool is required.