Suggestions
Tom Cowles
Vice President Governance, Risk, and Compliance at Box
Tom Cowles is a seasoned professional known for his expertise in leading high-performing teams specializing in Security Compliance certifications at Box, with a focus on cloud computing and enterprise adoption.
Tom holds a Bachelor of Science degree in Management Information Systems/Finance from Salisbury University and has a diverse educational background from institutions like The Bullis School, American International School of Budapest, and The British International School, Cairo.
With a rich organizational history, Tom has held key roles at Box including Vice President Governance, Risk, and Compliance, Sr. Director Governance, Risk, and Compliance, Sr. Director Compliance, Quality and Enablement, and Director Of Compliance. He also has prior experience as a Senior Compliance Manager at Box, Manager - Risk, Continuity, and Security at Fannie Mae, and Manager - Federal IT Advisory Services at KPMG LLP.
Highlights
I’m excited to announce that Box Sign now complies with FDA 21 CFR Part 11 regulations for Electronic Signatures (https://lnkd.in/gaHBFRyd). At Box, we are dedicated to providing our customers in highly regulated industries with access to innovative technology and features that empower them to excel in their work. More to come from the team soon!
The Governance, Risk and Compliance organization is continuing to hire at Box:
- Senior Compliance Manager - https://lnkd.in/g2qyNQ4M
- Senior Manager, Policies and Standards - https://lnkd.in/gCqmMXiu
- IT Disaster Recovery Manager - https://lnkd.in/g_GduV8g
It was a cold and rainy weekend here so what better to do than dive into the most recent FedRAMP Draft Memo issued on Friday (https://lnkd.in/ghvRsRqH).
Lots to enjoy here but when you give a fist bump of joy when reading a Federal Memo it deserves a call out - On Page 4:
“Leverage shared infrastructure between the Federal Government and private sector. FedRAMP should not incentivize or require commercial cloud providers to create separate, dedicated infrastructure for Federal use, whether through its application of Federal security frameworks or other program operations. The Federal Government benefits most from the investment, security maintenance, and rapid feature development that commercial cloud providers must give to their core products to succeed in the marketplace.”
This is a drum I've personally been beating for a number of years and glad to see it recognized and acknowledged very early in this memo.
A high security and compliance bar is not driven off of physically or logically separating out environments - when you create separation you dilute and diminish your capabilities. At Box we’ve always believed that all of our customers deserve a High security bar by default and we’re proud to run a public SaaS model that supports all of our customers strict compliance needs on a global scale.
More to come but impressed by what I’ve read so far and public comment period ends November 27 (https://lnkd.in/gX6z65UN).
#fedramp
