thamer-james-governance-risk-compliance