About
I'm an application governance manager working across application portfolio management and access controls, and I work with AI governance members.
What I do
I run the day-to-day discipline that keeps a software estate honest: an inventory that matches what's actually deployed, ownership that's assigned rather than assumed, and a rationalization process that catches duplicate and underused applications before they become permanent cost. On access, I run the periodic reviews that catch orphaned accounts and excessive privilege, and I hold privileged access to a shorter cycle than everyone else's. The same discipline extends to AI systems — intake for new use cases, risk scoring, and the same inventory instead of a separate shadow list — typically owned by a risk or AI-governance function rather than application governance directly.
This kit is the toolset I built to do that work consistently: seven methods, each mapped to ISO/IEC 19770, COBIT 2019, ISO/IEC 27001, and ISO/IEC 42001, each shipped so it runs the same way in Claude, Codex, or Microsoft Copilot.
Certifications
- IAITAM Certified Software Asset Manager (CSAM), exam November 2026
- Post Graduate Program in Cloud Computing Leveraging Gen AI, Great Learning, 2024–2025