Senior Director Security & Risk Management, McKesson Corporation
The McKesson Sessions: McKesson’s Information Risk & Security Program
Attend this session for an in-depth look at McKesson Corporation’s Information Risk & Security Program. First, learn about Information Protection at McKesson (IPAM), a strategic initiative designed to improve the maturity of cybersecurity defensive, preventative, and resiliency controls as well as instill clear lines of governance over information security risks. IPAM’s roadmap ensures accountability, transparency, robust governance, and a strong advocacy model with staff. A discussion of IPAM will include driving necessary improvements over a three-year, accelerated timeframe.
Next, attendees will be introduced to McKesson’s iSecurity Operations Center (iSOC) process which addresses growing cyber threats across the globe. Rounding out this presentation is a discussion of McKesson’s Trust, Risk, Assurance, and Compliance program, which provides a level of confidence that software and systems are free from conditions, either intentionally designed or accidentally inserted at any point during its lifecycle, and customer solutions and internal business platforms function in the intended manner. This program ensures that capabilities and prescriptive consults are designed to embed security throughout the development lifecycle, address risks and vulnerabilities early, and reduce cost with unplanned R&D spend.
FORTUNE 500 TRACK