Managing Risk and Automation with Policy as Code

Fall 2022

Policy as code is the formalization of business intent and codification into software that can evaluate across multiple cloud providers and on-prem equipment. The code enforces policies within the infrastructure, with appropriate guardrails and within compliance guidelines and is foundational to the design and delivery of an automated continuous control framework Given the growing strategic importance of policy as code, to our members, the ONUG Collaborative established a Policy as Code Working Group during the summer. In this session, IT leaders who provided input to scope the working group discuss their current thinking on how to best approach Policy as Code projects and develop successful Policy as Code programs.


Don is an accomplished leader in successfully developing and executing business and technology strategy.

Don is CEO and Co-Founder of Concourse, an emerging leader in public cloud management and governance services, as well as a Senior Advisor at McKinsey Corporation.

Don spent 28 years at Goldman Sachs, during which time he held senior leadership roles in Technology in New York, London, Hong Kong and Tokyo. Don led the global technology division for Goldman from 2012 to 2016 and was named a partner of the firm in 2006 and Managing Director in 2000. Don was the CIO for Asia Pacific from 2001 to 2006 and served on the Asia management committee. Since relocating to the US in 2006, Don co-chaired the IBD Technology Investment Committee and was a member of the firm’s Firmwide Risk, Market Risk and Business Standards committee.

Don played an integral role in creating Goldman’s business systems architecture, algorithmic trading and risk management platform as well as leading strategic firm wide investments in VDI, Data architecture, AI and Cloud / Software Defined Infrastructure. He also created and led the teams responsible for the development of Symphony and Orbit which were subsequently spun out of the firm as broader industry platforms.

Within the technology industry, Don has been an active and vocal proponent of Open Source and Open Standards communities including acting as a founding board member of the Open Compute Project.

Don and his family reside in New York City where he is actively engaged in education and arts, serving on the board of the New York Foundation for the Arts, Columbia University School of Professional Studies, Marist College board of trustees and Teaching Matters.

Ruoh-Yann Huang is the Network Services Architecture Executive for Core Technology Infrastructure at Bank of America.  Ruoh-Yann is responsible for standards creation, architecting and engineering of ZERO TOUCH Network Services, Network Management, Telemetry and Data Analytics.   Ruoh-Yann provides technical vision and direction to the team in delivering intent-driven automation, tools, and analytics services to reduce effort, improve business agility, customer experience and operational excellence.

She is a technology leader with extensive infrastructure and cybersecurity experiences working in the financial industry firms. Named 1 of the first 2 women Tech Fellow at Goldman Sachs and granted a patent in Synthetic Cyber-Risk Model for Vulnerability Determination.

Ruoh-Yann earned a BS in Computer Science from the Rutgers University.  She lives in Princeton, New Jersey. A passionate technologist and with knack in building and developing team. When she has spare time, she likes to do traveling, cooking, and gardening.

James Walker, is an ONUG Board Member, VP of Strategy & Transformation at IBM Cloud, and has previously held senior executive roles in technology at Bank of America, Morgan Stanley and Credit Suisse.

Yesim Akdeniz is a senior Managing Director in Citi technology organization and has been responsible to driving significant transformation across the technology infrastructure landscape over the last 5 years. She has been part of the core leadership team that has driven 30%+ savings across the operating expense, while significantly modernizing Citigroup’s technology capabilities, enhancing customer experience, business agility and managing risk.

Citi technology organization supports business operations in 100+ countries that Citi operates in, across multiple lines of business spanning both Institutional and Retail businesses. The technology engineering organization is designing and deploying industry leading solutions across the Citi footprint as the bank continues to leverage product and business model innovation to maintain and increase Citi’s competitive edge in the market place. Yesim is at the forefront of the innovative thinking that CATE (Citigroup Architecture and Technology Engineering) is delivering.

She has held several senior management positions across Citigroup technology, Yesim has a Masters in Business Administration, Wilmington College and a Bachelors of Art in Computer Science, East Carolina University. As one of the senior most women in technology and co-chair of Enterprise O&T Women Leadership Council at Citigroup, Yesim is actively involved with various ‘Women in Technology’ initiatives, including the Women’s Bond Club and Citigroup sponsorship programs. Additionally, Yesim was awarded the top 100 CIOs award by the CIO magazine in 2010,, and she was inducted into the 42nd Annual YWCA Academy of Women Leaders on in 2016.

Xiaobo leads a team to deliver leading edge technology solutions in support of Citi IT strategy. She drives critical solutions to secure Citi’s hybrid cloud environments to enable Citi to reduce risks and stay compliant while allowing Citi’s businesses to benefit from the opportunities that cloud services provide. Xiaobo started her career as a Network Engineer at Goldman Sachs in 2009 after she got her Ph.D. in Electrical Engineering from Rensselaer Polytechnic Institute. She has been selected for “Rising Star Award” to represent Citi at the Women’s Bond Club in the financial industry in 2017. She is also on Palo Alto Network Vendor’s Cloud Customer Advisory Board.

As EY Americas Cloud Cybersecurity Leader, Alex focuses on engineering; architectural controls and processes; and security solutions for public cloud, and container platforms.

She holds a PhD, MSc and BSc in Computer Science from Tel Aviv University, has multiple patents and is cited in over 30 scientific publications.

Related events