Joanna Lyn Grama, J.D., CISSP, CIPT, CRISC, directs the EDUCAUSE Cybersecurity Initiative and the IT GRC (governance, risk and compliance) program. With over 15 years experience in law, IT security policy, compliance and data privacy, Grama is a frequent speaker on a variety of IT security topics. She is also the Author of the textbook Legal Issues in Information Security (2ed, 2014).