Robin Basham, M.Ed, M.IT, CISA, ITSM, CGEIT, CRISC, ACC, VRP, CRP, HISP

Bay Area, California

Managing Parnter, founder and CEO of EnterpriseGRC Solutions, creator of Facilitated Compliance Management Software and founder of Phoenix Business and Systems Process, Inc. Robin Basham, M.ED, M.IT, CISA, CGEIT, CRISC, ACC, CRP, VRP, HISP, leads Cloud and Virtualization training in the San Francisco and Bay Area. As EnterpriseGRC Solutions lead architect, Robin brings team experience leveraging platforms such as Oracle, Archer, SAP, Web Applications like Joomla, Visual Studio, Access and SharePoint. As an Archer Certified Consultant and SharePoint architect, she’s known for successful GRC implementations, supplying overall design, development and training to companies ranging from start up to fortune five hundred. Over the last decade Robin has architect more than 70 GRC programs, delivering end to end solutions with full knowledge transfer to program owners and users. Corporate leadership includes acting as technical liaison for ISACA in development of the OCEG Redbook V1, TC Co-Chair for OMG’s Open Regulatory Compliance Architecture (ORCA) project. Robin’s companies remain active in emerging standards with participation on recent releases from ISACA® for both Oracle R12 and SAP ECC 6.0 controls, and upcoming Holistic Information Security alignment of CobiT Five with ISO27000, NIST and ENISA standards. Ms. Basham served as a director and president for the Association for Certified Green Technology Auditors, ACGTA, is a frequent committee contributor to the ISACA Silicon Valley Chapter and liaison to the ITSMF SV chapter, as well as participant in Cloud Security Alliance. EntepriseGRC Solutions is a member of the Cloud Credential Council and is named to the certification committee of The Holistic Information Security Practitioner Institute (HISPI). EnterpriseGRC Solutions is an active sponsor to Information Systems Audit and Control Association, ISACA, listed as corporate sponsor and many time CobiT trainer for the ITGI.

EnterpriseGRC Solutions Inc. promises business transformation, achieving market targets while operating within legal and security boundaries, by transforming enterprise risk to enterprise routine. EnterpriseGRC Solutions professionals focus on providing strategic guidance and training, delivering pragmatic tools designed to help clients’ achieve their enterprise governance, operational and control objectives. EnterpriseGRC Solutions excels in providing technical, business and application assessments, enterprise integration services, controls automation, GRC platform design optimization, policy and program services, business continuity, and most recently, cloud and virtualization governance services.

Common Threads in Experience

• 2002 to Present, all jobs included Responsibilities for Regulatory and Compliance Services, Training and Knowledge Transfer of Programs and Curriculum
• CobiT, ITIL, GRC, Security, SAP ECC 5.0 and 6.0, Oracle GRC, Policy and Procedure Programs
• IT Security and Network services support for IT Remediation
• Enterprise Technology Operations / Data Center Operations specialization
• GRC Platforms – CA, SAP, Oracle, FCM, Symantec, Brabeion, Founding Contributor to OCEG and Oracle GRC
• Conducting Operational Risk Assessments and Compliance Reviews
• Conducting ERM assessments and risk universe identification, frequent ERP SCM problems solved: Manual Forecasting Process; Lack of Visibility in Supply Chain; Need for Integrated SCM Planning; Over Complex Bill of Material (BOM) and Multiple Part IDs; Controls and Assignment Tracking WIP Completion; Job Costing; PO and WO linkage; Management and Sign off on all reports, forms, flex fields, workflows
• Conducting business unit self assessments and reporting package development
• Providing strategy and consulting for NAIC, FDIC, FSA, and other regulatory compliance, US, EMEA and Asia Information Systems Compliance Testing and Reporting
• Enterprise Risk Management - emphasis towards ongoing technology programs and IT Security, assisting with emerging risks, supply chain risks, collaboration risks, financial risks, outsourcing risks, etc.
• Identifying risks through a practical but comprehensive evaluation process
• Improving the content, quality and timing of governance, risk and compliance analysis and reporting
• Implementing a proactive approach to risk management
• Controlling the growth of governance, risk and compliance-related expenses
• Establishing a timely and consistent approach to assess and improve compliance programs across business units
• Establishing an enterprise-wide view of gaps and improve risk response strategies
• Streamlining compliance programs across the enterprise to gain efficiency and improve effectiveness