I am specialized in requirements analysis for Governance, Risk and Compliance (GRC) / Integrated Risk Management (IRM) tools as well as for interfaces between systems. Within the GRC domain I am experienced in defining requirements for tools to support:
- IT Risk Management
- Information Security Management System
- Enterprise Risk Management
- Internal Control System
- Business Continuity Management
- Operational Loss Events (Asset Management)
- Risk Bearing Capacity