My great-grandmother made the best marinara sauce. The recipe has been handed down through multiple generations but was never written down. This recipe was effective and useful but after her passing, it has changed and has been difficult to replicate. Many organizations security compliance programs suffer from the same circumstance.

Several security standards like CMMC, NIST 800-171 and HITRUST continue to impact multiple market verticals such as education, healthcare, and defense. It is vitally important that the effort we spend on compliance be directly relevant to securing our institutions. This presentation will attempt to describe the different flavors of standards, show where they are similar, and how you can develop a recipe for compliance with all of them. Compliance is only the first step in this journey though as this presentation will also touch on what is necessary to do immediately and how you can begin to make lasting changes to your security program for your organization. The presentation uses the metaphor of inter-generational recipes to show how to begin the journey to a secure and compliant future for your organization now and perhaps even for generations.