Joanna Lyn Grama, JD, CISSP, CIPT, CRISC, directs the EDUCAUSE Cybersecurity Initiative and the IT GRC (governance, risk, and compliance) program. Joanna has expertise in law, IT security policy, compliance, and governance activities, as well as data privacy.