We'll present our journey of rolling out an ITGRC tool to improve the security posture around Mason’s IT resources. We introduced workflows to ITS and distributed IT partners in phases, which include inventory and classification of University servers (CIS Control #1), and formalizing a risk management process via vulnerability and control information.
