* CRISC Exam Prep, Group Tutoring Session * Live, Online *

Krag Brotby has trained thousands of CISM exam candidates over the past ten years.  He has more than twenty five years of experience in enterprise computer security architecture, governance, risk and metrics and is certified as a CISM and CGEIT. Experience includes intensive involvement in current and emerging security architectures and is a principle in the SABSA Institute. He holds a foundation patent for digital rights management and has published a variety of technical and IT security related articles and books. Mr. Brotby has served as principal author and editor of the ISACA Certified Information Security Manager Review Manual since 2005, and the researcher and author of the widely circulated Information Security Governance, A Guide for Directors and Executive Management, 2nd ed., and the Information Security Governance : Guidance for Information Security Managers. He is the author of Information Security Management Metrics; Auerbach ’09 and Information Security Governance; a practical development and implementation approach; Wiley ‘09, and he is the co-author of PRAGMATIC Security Metrics; Auerbach ’13.

Mr. Brotby has served on the ISACA Security Practice Development Committee, was appointed to the Test Enhancement Committee responsible for exam question development, and participated on a committee that developed a systems approach to information security called the Business Model for Information Security (BMIS).

Mr. Brotby is the recipient of the 2009 ISACA John W. Lainhart IV Common Body of Knowledge Award for noteworthy contributions to the information security body of knowledge for the benefit of the global security community.

Mr. Brotby has taught CISM courses globally during the past decade, including: the US Pentagon, US Marine Corp, Navy and Army. He is a member of the California High Tech Task Force Steering Committee, and an advisory board for law enforcement. Mr. Brotby is a frequent workshop presenter and speaker at conferences globally and lectures on information security governance, metrics, information security management, CRISC and CISM exam preparation throughout  Asia, Europe, the Middle East and North America.