Andrew Pattison is the Global Head of GRC and PCI Consultancy at IT Governance, a GRC Solutions company. With a career stretching back to the mid-1990s, Andrew has worked extensively in information security, risk management and business continuity. He is currently supporting several major international organisations implement robust governance and risk approaches for the use and development of AI. He holds an MSc in Information Systems Management, is a certified auditor, and is accredited with both CISM® and CRISC® certifications. Alongside his consultancy work, Andrew has delivered comprehensive training across multiple GRC disciplines, including DORA, NIS, NIST, ISO/IEC 27001, business continuity, CRISC and CISM.