Read about my talent for being in the wrong place at the right time.
Free chapter from CRM at the Speed of Light 4th ed: Available for download hereKarl Wabst
Los Angeles, CA
karlwabst@gmail.com
What I Do and Why You Should Care
Organization Change Readiness – Organization Development
Management Consulting – Specialties:
- Organizational Change Management – OCM – Change Readiness – ADKAR, Kotter
- Organizational Development – OD – Innovation – New Capabilities
- Social Business – Customer Trust – Communications
- Continuous Improvement – Program Creation – Conflict Resolution– Negotiation
- Risk Management – Governance – Security – Compliance – Audit
Greatest Hope for – and Biggest Barrier to Success – People Factors
- 58% Mindsets & Attitudes • 49% Corporate Culture • 32% Lack of Senior Management Support • Best Organizations 10X More Successful than Worst • Only 40% of Initiatives Meet Schedule, Budget & Quality Goals – Source: IBM – Making Change Work
Transformational Change: Radical Shift in Strategy, Structure, Culture, Processes, Technology • Social Business • Social Media • Inbound vs. Outbound Marketing • Customer Trust • Market / Product Growth M&A, JV, IPO, Outsource, Downsizing • Market Crash, Terrorism, Military, Natural Disasters • Geopolitics
Transitional Change: Replacement • Reorganization, Consolidation • International Compliance, Legal Requirements • New Technology
Human Capital Readiness – ADKAR
- Collaborate with Consumers, Investors, Regulators and Employees • Drive Sense of Urgency • Increase Desire to Participate • “Why is Change Necessary?” • “What Is In It for ME?” • Overcome Silo Mentality Resistance • Coach Individuals on How to Change • Personal Accountability • Reward Systems • Share Knowledge to Implement New Skills or Behavior • Celebrate Success • Reinforce Short-Term Wins • Sustain Long-Term Commitment
COMMUNICATIONS PLAN
- Awareness / Reinforcement, Audience, Message, Senders, Channels, Timing
COACHING PLAN
- Supervisor Interventions & Training, Awareness, Desire, Knowledge, Ability, Reinforcement
RESISTANCE MANAGEMENT
- Create Desire to Participate in Change o Employee, Consumer, Vendor Education, Knowledge and Ability to Change
REINFORCEMENT, FEEDBACK & ASSESSMENT OF CHANGE COMPLIANCE
- Surveys, Metrics, Reporting Mechanisms o Plan for Corrective Actions
INFORMATION CAPITAL READINESS
- Promote Consumer Responsibility / Corporate Accountability o Legitimate Sharing of Sensitive Data o Prevent Missed Opportunity o Manage Risk Appetite o International Business and Legal Interactions o Customized Products / Services o International Standards o Transparency
EXECUTIVE POSITION SUMMARY
ORGANIZATIONAL CHANGE / PRIVACY & SECURITY OFFICER 2007 – Present
INFO SECURITY OFFICER / ORGANIZATIONAL CHANGE EXPERT 2006 – 2007
SR. MANAGER INFO SEC/ ORGANIZATIONAL CHANGE EXPERT 2005 – 2006
IT RISK MANAGEMENT / ORGANIZATIONAL CHANGE EXPERT 2004 – 2005
CEO / ORGANIZATIONAL CHANGE EXPERT 2001 – 2004
CEO / ENGAGEMENT MANAGEMENT / ARCHITECT 1997 – 2001
SALES ENGINEER / PRODUCT DEVELOPMENT / ARCHITECT 1994 – 1997
WALL ST CORP CREDIT ACCOUNT MGMT.| OPERATIONS PM 1986 – 1994
- Clients / Employers include: Health Care and Collaborative Product Development: IBM, AT&T, Bell Labs, ACS; JV: Boeing, Lockheed; M&A: Ernst & Young; IPO: MasterCard; IT Governance: DIRECTV, Nokia, TXU, BNSF, Kyocera, Hyundai; Finance: ADP, REUTERS, Exchanges, (e.g. NYSE, NASDAQ), Banks, (e.g. Citi, Chase)
DEGREES
- MBA Organizational Leadership; Norwich University; Graduated With Honors
- BA Social Sciences / Behavioral Psychology Research; SUNY at Stony Brook
UNIVERSITY AND CORPORATE TRAINING
- Industrial Psychology, Motivation, Personality, handled highly sensitive data during 2 years as a Psychology Research Assistant in studies with human subjects, (Undergraduate University)
- Organizational Leadership, Strategic Resource Management, Managerial Finance, Operations Management, Marketing Management, Strategic Management (Graduate University)
- Accelerated Value Method: Process Innovation, Collaborative Development, Enterprise Deployment, Transformation Management, and Engagement Management (IBM /Lotus)
- Financial Markets, Sales Administration, Customer Relations (Corporate Training Courses)
GOVERNANCE TRAINING
- (AHIMA): HIPAA Privacy Rule Practices; HIPAA Security Rule Practices; Managing Access, Amendment, and Disclosure; Organization’s Responsibilities for Privacy and Security
- (IAPP): Corporate Privacy Boot Camp; Government Privacy Boot Camp; Integrating Security Into Privacy & Compliance Programs; Enterprise Data Flows and Classifications; Building and Auditing Privacy Programs; Sustaining and Managing Privacy Programs; Third Party Assessments; Breach Notice Laws; Global Perspective on Data Security Breaches and Enforcement; Repercussions of a Breach; Risk Mitigation and Crisis Management
- (SANS): ISO 17799, (ISACA) CobiT for SOX
CERTIFICATIONS
- CIPP Certified Information Privacy Professional (IAPP)
- CISSP Certified Information Systems Security Professional (ISC2)
- CISM Certified Information Security Manager (ISACA)
- CISA Certified Information Systems Auditor (ISACA)
PUBLICATIONS
- Contributor – CRM at the Speed of Light, (4th edition, 2009)
- Contributor – CRM at the Speed of Light, (3rd edition, 2004)
- Author – Public Officials Guide to eGovernment, (Thompson Publishing 2001)
TRAINING PUBLICATIONS
Author – CLP Fast Track: Lotus Notes/Domino 5 System Administration, (New Riders, 2000)
Author – Administering Domino for Lotus Notes & The Internet, (New Riders, 1999)
Author – Special Edition: Using Lotus Notes 4, (Que, 1995)
TRAINING ADDENDUM
IT GOVERNANCE – SECURITY GOVERNANCE – AUDIT
Facilitate communication between all parties with a stake in use of confidential, private, personal, customer data types. Begin by understanding corporate culture to evolve consensus on ways to customize Organizational Change Methodology with Privacy and Security Governance frameworks. Develop training to educate targeted groups. Raise awareness about customer and investor concerns, and organizational responsibilities when collecting and using real-time data to personalize customer experience.
MARKETING, SALES, LEGAL, PRIVACY, AND AUDIT, DEPARTMENTS
By adopting a Social CRM strategy, the company accepts certain amounts of liability. Counsel organizations on Transparency and Authenticity – be honest and straightforward with the customer about the handling of their data, so they have the information necessary to make intelligent decisions on how interacting with the company.
Introduce clients to the discipline of information privacy
- Fundamental concepts – Privacy, Trust & Transparency
- Privacy law and compliance – International & US
- Workplace privacy
- Information security
- Online privacy
- Data sharing, disclosure and transfer
- Contract and vendor management
- Program governance
Proactively engage organization employees, consultants, vendors, partners and the customer about their responsibilities, and regulatory change. Raise legal awareness e.g. FCRA, GLBA, PCI, HIPAA, HITECH, GINA, COPPA, OECD, / FTC Fair Info Practices; International Privacy Laws e.g. EU Directives, APEC, PIPEDA and effects on Cross-Border Data Transfers; evolving regulations e.g. Online Behavioral Advertising (OBA), Smart Grid, and ARRA funding, EHR, EMR, or PHR.
Introduce tools including:
- Generally Accepted Privacy Principles (GAPP)
- Business impact assessment (BIA), privacy impact assessment (PIA), and Risk Assessment (RA)
- Privacy Policy
- Human Resources – changes to job descriptions to enhance accountability, punishment and reward
- Contract Analysis – outsourcing, consultants roles & responsibilities
- SDLC Privacy & Security processes
- Sensitive Data Inventory
- Breach Response
INFORMATION SECURITY, PRIVACY, AUDIT, AND COMPLIANCE DEPARTMENTS
Stop threats to Privacy and Compliance programs by integrating IT and Security Governance frameworks. Optimize IT Security for Privacy.
Introduce tools including:
- Generally Accepted Privacy Principles (GAPP)
- Data Classification
- Business impact assessment (BIA), privacy impact assessment (PIA), and Risk Assessment (RA)
- ISO 27000 (ISMS)
- CobiT
- NIST Risk Management Framework: FIPS 199 / SP800-60, FIPS 200 / SP800-53, SP800-39 (Organizational Risk), SP800-18 (Security Plan), SP800-37 (Apply RMF), SP800-50 (Awareness), SP800-64 (SDLC), SP800-65 (Budget), SP800-66 (HIPAA), SP800-34 (Contingency), SP800-61 (Incident), SP800-122 (PII), SP800-137; Industrial security (SP800-82, NISPOM); International Traffic in Arms Regulations (ITAR)