Andrea Craig is a Partner/Principal in the Cybersecurity and Privacy – Technology Consulting practice at Ernst & Young LLP. She has spent over 15 years advising clients on cybersecurity and privacy program strategy, risk management, governance, and capabilities / controls design and evaluation. Ms. Craig specializes in the convergence of cybersecurity and compliance. She regularly leads large-scale programs and projects focused on transforming cybersecurity and privacy capabilities, enhancing maturity, and managing risk while achieving compliance as a by-product.