From CIS to Compliance

Wednesday, May 21, 2025 | 9:45AM–10:30AM ET | Grand Ballroom Foyer, 3rd Floor
Session Type: Poster
Delivery Format: Poster Session
This presentation will show you how Virginia Tech uses in-house and vendor tools to do a GRC analysis of all of its IT assets. You'll see how we approached the difficult IT inventory problems and classifying these assets. We'll show you some of the open source tools we developed to help us complete IT risk assessments and measure their results.

Presenters

  • Randy Marchany

    Adjunct Professor, Virginia Tech

Resources & Downloads

  • Presentation Slides with notes

    Updated on 5/16/2025

  • A poster describing new GRC dashboards we created to track our CIS IG2 Implementation

    Updated on 5/16/2025