IT GRC and Data Protection
-
Building a GRC Program the Business Follows
William Chandra on what actually makes a GRC program stick: top-down authority, controls built into system design, and why documentation alone isn’t either.
-
Zero Findings Audit – How IT GRC Gets There
Findings aren’t a failure. They’re what an audit system exists to catch, and in a maturing control environment, some will surface, that’s the system doing its job, not failing at it. What actually matters isn’t the number on the final report. It’s whether you have a management system that catches gaps, tracks them, and closes…
-
CISA, CISM, CRISC: What These 3 IT GRC Certifications Taught Me
William Chandra compares CISA, CISM, and CRISC, three IT GRC certifications, and the mindset shift each one demanded on his path from auditor to risk manager.
-
From The Beginning: An IT GRC and Data Protection Career
I grew up thinking technology was about building things. Today, that same systems-thinking shapes how I approach IT GRC and data protection across Indonesia’s regulated markets. I studied Computer Science at Universitas Indonesia, then went to Taiwan for a Master of Information Management at National Taiwan University of Science and Technology. Those years gave me…
Keep in touch