Tanner

GRC Consulting Services

Governance, Risk, and Compliance (GRC)

Tanner’s Salt Lake City, Utah-based consulting team understands the importance of effective governance, risk management, and IT compliance (GRC) practices. Our consultants have decades of experience working with some of the largest companies in the region. Tanner’s GRC consulting services help organizations navigate complex regulatory landscapes, mitigate risks, and optimize operational efficiency.

Our Approach

Successful Governance, Risk, and Compliance initiatives require a holistic approach integrating people, processes, and technology. Our seasoned consultants work closely with your organization to develop tailored strategies that align with your business objectives while ensuring compliance with regulatory requirements.

Services Offered

Tanner offers a wide range of GRC consulting services, including:

  • Policy Review Services

  • Policy Development Services

  • Industry Framework Alignment Reviews (CIS, NIST, ISO, etc.)

  • Risk Management Program Development

  • Risk Assessment

  • Compliance Consulting (CIS, CMMC, HIPAA, NCUA, NIST, PCI, Privacy)

  • Compliance Review and Gap Assessment (CMMC, ISO, HIPAA, PCI)

  • Organizational Effectiveness and Communication Reviews

IT Governance Consulting:

Our governance consulting services focus on enhancing accountability, transparency, and decision-making processes within your organization. We work with senior leadership to review polices, develop governance frameworks, and author IT policies that promote ethical conduct, risk awareness, and strategic alignment.

IT Risk Management:

Effective risk management is essential for protecting your organization from potential threats and vulnerabilities. Our risk management services, which include framework-based risk assessments following industry standards such as CIS, NIST, and ISO, help identify, assess, and mitigate risks across your enterprise. By leveraging these frameworks, we ensure comprehensive coverage and alignment with industry best practices, enabling you to make informed decisions and safeguard your assets.

Compliance Advisory:

Staying compliant with HIPAA, PCI, and Privacy regulations can take a lot of time and effort. Our compliance advisory services provide expert guidance on navigating regulatory requirements, implementing best practices, and maintaining compliance across various industries and jurisdictions.

Internal IT Controls Assessment:

Strong internal IT controls are essential for preventing fraud, ensuring data integrity, and promoting operational efficiency. Our internal controls assessment services help identify weaknesses in your control environment and implement remediation strategies to strengthen your organization’s internal controls.

Why Choose Tanner?

  • Industry Expertise: Our team of experienced consultants brings deep industry knowledge and expertise to every engagement, allowing us to provide tailored solutions that address your unique challenges and opportunities.

  • Collaborative Approach: We believe in working closely with our clients as trusted partners, fostering open communication and collaboration to achieve shared goals and objectives.

  • Pragmatic Solutions: We understand that every organization is different. Our approach focuses on delivering practical, sustainable solutions that drive measurable results and create long-term value.

  • Commitment to Excellence: At Tanner, we deliver exceptional service and exceed our clients’ expectations. Our dedication to excellence ensures that we consistently deliver high-quality solutions that meet the highest standards of professionalism and integrity.

  • Independence: We maintain strict vendor independence, ensuring that your team will not receive recommendations for products or services that may not directly benefit your IT environment. Our team is knowledgeable across various technologies, allowing us to suggest solutions that best suit your organization’s specific needs and objectives.

John Pohlman Headshot

John Pohlman

Director of Information Security Services

Contact Us