michael werneburg
 

case studies.

Over the past decade I have helped a number of clients and employers with complex undertakings in information risk. Here are some simple case studies.

balancing projects with operations

2021.08.21

Following fifteen years of high management turnover, the IT operations division of a financial institution faced multiple urgent matters. Normalizing change in a sustainable way became a priority.

writing a risk manual for a non-profit

2019.07.21

I wrote a manual on risk management for non-profits that makes optimal use of common organization structures and avoids common risk management mistakes.

evaluating vendor cyber security readiness

2019.07.02

The Investment Industry Association of Canada needed guidance for their member broker-dealers on evaluating vendor cyber security readiness. I co-authored that work.

agile in a regulated environment

2018.09.29

Agile software delivery is about quick increments of software, while regulated environments like checks and controls. Reconciling them is the trick.

SDLC in a regulated environment

2018.08.24

Regulated industries cannot tolerate failed software releases. For a software vendor in a regulated industry, the challenge is to deliver new software with assurance.

implementing PHI de-identification

2018.08.23

US-based multinational specializing in health information required a data anonymization process to replace a legacy system.

IT compliance at a Japanese bank

2018.08.22

Instituting the ITIL functions of incident management and change management at a Japanese bank.