About the IAPP

Shelby Sexton is a manager in EY’s Cybersecurity Consulting practice and is Certified in Risk and Information Systems Control (CRISC). Shelby brings a significant amount of experience advising clients on the intersection of their cybersecurity and privacy programs, specifically focusing on aligning cybersecurity controls and programs with privacy compliance requirements. Shelby regularly counsels clients on the privacy implications associated with topics such as customer identity and access management, encryption and encryption key management, information discovery and classification, secure data lifecycles, and compliance-driven requirements (e.g., GDPR, CPRA, PCI). She has served clients across many sectors, including financial services, healthcare, insurance, technology, hospitality, and media & entertainment sectors to identify, prioritize, and align cybersecurity and privacy risks with business risks in order to protect their highest value data.