JOHN B. KRAMER is the Information Security Manager and Security Architect for UPMC Health System, a leading health care system with more than 25,000 employees. Mr. Kramer holds both CISA and CISSP certifications. He spent eight years in information systems auditing in large banking, investment, and health care environments, responsible for all phases of the IS audit programs, and has developed audit staff and conducted CISA exam prep training. He is a former vice president of the Pittsburgh ISACA chapter.