Karen Worstell

Principal, W Risk Group

Karen Worstell is a principal of W Risk Group. W Risk Group provides Information Security Management System (ISMS) Pre-certification services, Information Assurance and Security Program Design, Financial Risk Management, and Litigation Readiness Services. They assist clients with all elements of the ISO 27001 requirements, including business continuity and disaster readiness, incident handling, records management, secure data management, IT Operations, governance, integrated policy development and security architecture.

Karen's twenty years of information security and IT Risk Management experience spans multiple sectors, most recently in the last 3 years as CISO of Microsoft and the VP of IT Risk Management/CISO for AT&T Wireless/Cingular. At both Microsoft and AT&T Wireless, Karen played a key role in the successful implementation of general computer controls for Sarbanes-Oxley in their respective IT organizations.