A 5-part series is helping managers become better managers - starting with learning the basis of the CGEIT certification. (Certified in the Governance of Enterprise IT®)  

Whether you’re looking for a new career opportunity or want to advance within your existing company, becoming Certified in the Governance of Enterprise IT® proves your expertise in enterprise IT governance, resources, benefits and risk optimization.

Led by Karina Klever and Kelly Gilmore, with assistance from YouAttest CEO Garret Grajek, CEH, CISSP, the sessions will cover Governance of Enterprise, Strategic Management, IT Resources, Benefits Realization and Risk Optimization, just like the exam. Great topic, great hosts, great value - let’s learn together!

Session schedule:

https://youattest.com/live-cgeit-prep-certified-in-the-governance-of-enterprise-it/

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Breaches happen - especially for enterprises who hold sensitive data: PHI for healthcare, PII for financial institutions and CUI for defense contractors.

But what should be our strategy BEFORE the breach?   Especially around the reason and most often, the source of the attack -  enterprise identities

This YouAttest  #AuditTuesday podcast will focus on breach prevention with a  focus on policy, practices and procedures.

  To help explain proper cyber and governance strategy, YouAttest is featuring Rob Yates and Ted Alben , Partners at “Get Smart Cyber Defense” to talk about strategy “before the breach”.

YouAttest will discuss and feature its world-unique identity attestation tool - and how it could and should be used to secure identities BEFORE the breach occurs - to minimize track surface and lessen the damage once a breach occurs..

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

This YouAttest Educational  #AuditTuesday podcast highlights YouAttest in healthcare. Healthcare is under attack by ransomware groups  and other hackers. In response, healthcare enterprises are under new regulations for the holding of identities and other personal healthcare information (PHI).

To help explain the value and the functionality of identity Governance, we are lucky to have Steve Taccogna - Cyber expert and founder and principal of Syntacc.  

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

This YouAttest Educational  #AuditTuesday podcast discussed the updates known about the biggest hack in the history of U.S. healthcare-  the Change Healthcare ransomware attack.

It appears the hackers were in the environment for over a week.

What does this mean, how does the effect security - and how can this type of attack be mitigated. 

To help explain the update, we have Carrie Jabs, - Cyber/GRC expert.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Breaches are not new - they affect every industry from A to Z - Advertising to Zoos. What’s new? Now the hacks of the services that manage the IT infrastructure and services are being compromised. 

These organizations are called MSP (Managed Service Providers) and MSSP (Managed Security Service Providers). Consider these firms as part of the Supply Chain for Technology Services.  What are some of the implications when these enterprises get hacked? 

This is not theoretical - recently a MSP was slapped w/a Lawsuit from a high-dollar law firm which states the service has been negligent in their security, which makes them liable for damages over a recent breach. This looks like this could / will become the new reality.

To help take on this pressing topic we have esteemed attorney and author:, Cynthia Stamer an expert on cyber law and employment.  Also, we have  John Allen, President of Community Insurance Advisors and expert on cyber liability and insurance.    In addition, Peter Gailey, cyber, risk and compliance expert and CEO of Gailey Solutions, will address technical and risk components on the topic. Lastly, Garret Grajek, 13 U.S. patented identity inventor, will address identity, governance and cyber solutions and how they are helping and hurting the balance of power against the hackers.  

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Cases like the SEC claims against SolarWinds and Tim Brown have made the general public aware that IT has governance and a legal responsibility to identify data. But SolarWinds isn’t the only case in the news - there were 246 class action lawsuits on data breaches in 2023 - and the SEC ruling on 4 day notification is predicted to make this number skyrocket.

What are the lawsuits about? What are “due care” and “negligence” legally and how does this relate to the cyber world?   To help answer this question - we have corporate cyber defense lawyer, Shawn Tuma. And to help understand what enterprises can do to increase their cyber posture so they do not get breached, we have cyber consultant Justin McCorkle of Crucial Cyber.

Rounding out the cast we have 13 U.S. patented identity expert, Garret Grajek talking on what can be done on identity security. 

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Everyone loves the start-up - but no one loves the ego of the start-up entrepreneurs. It’s not a myth, it’s real and it hurts the endeavor.

To explore this real world problem - is start-up expert and author: David Carleson. A seasoned veteran in the problem and author of, “Death By Ego: Lessons From Entrepreneurs Who Successfully Killed Their Companies”.  

David has researched and is an expert on areas of ego and the start-up, including:

• Dysfunctional ego traits that investors can recognize in the entrepreneur
• True stories how ego killed good start-ups
• Reminders how entrepreneurs can check their own egos.

Rounding off the cast is David McConnell, 30-year veteran of start-ups and experience working w/ entrepreneurs - of all types.

The discussion will also include 13 U.S. patented Garret Grajek who can relate his own tales from the start-up journey, his and others.

To learn more about YouAttest and how we can help secure your identities, contact us at [email protected]

Who: Greg Kutzbach, Digital Forensic Expert, Exhibit A Cyber

            Garret Grajek, CEH, CISSP, CEO of YouAttest

Microsoft just suffered a major attack on their internal email systems.  The culprits were deemed to be Russian state actors.

It appears the attackers overtook “legacy”  accounts and created malicious OAUTH access. Cyber forensic expert Greg Kutzbach, an expert on digital discovery, will spell out the hack, and more importantly, how organizations can defend themselves.

The start of the solution to this problem is review of the permissions - especially the permissions on service accounts.   YouAttest will show how enterprises can both review their current accounts and be triggered on changes in permission on service and other key accounts.

Need to automate your identity audits?  Contact us at YouAttest - we will show you how -  https://youattest.com/contact/

IGA has been seen as a failure in many enterprises.  Why is this? 

Why are companies getting hacked for faulty governance?   

• Why are companies being sued for faulting governance?
• Why are governance improvements in the future?
• And why do GRC projects never seem to meet expectations?

We discuss this w/ Mel Reyes, Stacey Cameron and Tom Sabbe. 

Mel has execution expertise in delivering Business & Product Development, eCommerce, Agile, DevOps, interactive, and mobile solutions deployed across varying markets for companies like PayPal, eBay, T-Mobile, Mercedes-Benz, Sharp, Lowe’s, Pepsi, Priceline, Bank of America, Kraft, AT&T, eMusic, MiMedia, and Thomson Reuters.

Stacy has been Information Systems Security Officer at the US Dept of Homeland Security and is an expert on GRC and cyber especially in the federal space.   Tom Sabbe has been in Cyber and governance compliance for over 25 years.   The crew is rounded out by Garret Grajek, a 13 U.S. patented identity security innovator.

Need to automate your identity audits?  Contact us at YouAttest - we will show you how -  https://youattest.com/contact/

Cybersecurity is on everyone’s mind - but did you know cybersecurity starts w/ change control?

Hackers love sloppy IT and sloppy identity practices? IT cowboys like to slap in changes w/ the rapid process and procedures - this makes the IT practices inviting to hackers who only need a single vulnerability to import their malware and exploit any weakness we give them.

To discuss change control and the importance is cyber security expert John Young, IT professional, hacker, author and writer of “Why Cybersecurity and Change Control Go Together Like Peanut Butter and Jelly”  

Bringing real world experience is security practitioner, Kelly Gilmore, VP of Information Security at Change Lending, LLC.

Rounding out the panel is Garret Grajek, 13 U.S. patented identity inventor and CEO of YouAttest.

Need to automate your identity audits?  Contact us at YouAttest - we will show you how -  https://youattest.com/contact/