Tom Garrubba, CIPP/IT
Senior Manager, Technical Assessments Group, Information Governance & Privacy
Thomas Garrubba (CISA, CRISC, CIPP/IT), Senior Privacy Manager, oversees all assessments of CVS Caremark’s Vendor Assessment Program for existing and potential vendors that collect, destroy, store, process, transport, or use proprietary PII, PHI, PCI, and strategic data. He was instrumental in establishing the current policies and work procedures governing the current assessment program, designing the risk methodology used to assess vendors, and the methodology for re-performing vendor assessments. A respected subject matter expert on vendor risk, he represents CVS Caremark on the Executive Committee for the BITS/Shared Assessment Program; the founding organization for standardized and objective vendor management assessment methodologies.