A recording of my talk at ISSA in 2008. "The Motor City Chapter of the Information Systems Security Association (ISSA) will be hosting their September meeting with a presentation on Practical Risk Management. Their speaker, J. Wolfgang Goerlich, CISSP, CISA, is an information security professional with over a decade of experience in IT. Currently Mr. Goerlich is the Network Operations and Security Manager for a large financial institution in Michigan. In this presentation, Mr. Goerlich will describe some of the challenges he faced while developing an enterprise risk management program and explain how he ultimately solved them with a leading governance risk and compliance (GRC) technology. This presentation will discuss the practical implementation of GRC technology, discuss its uses, and review lessons learned." Less