And now for something completely different: GRC Uncensored
We're piloting a new podcast about GRC, but not the boring parts. Let us know what you think.
Catch this episode on YouTube, Apple or Spotify.
First, don’t worry, Neal and I are not going anywhere. In fact, because AZT is doing so well, we have decided to spinoff a new pilot series to cover an aspect that just doesn’t quite fit within our walls.
With that, it’s time to introduce you to GRC Uncensored, a new independent series where we dig into all things compliance, risk, governance, and regulations. Also…. tools, vendors, and all the fun things that are not adequately covered. We will not be talking about controls, implementations, and other boring aspects. So off we go to episode 1
The Commoditization of Compliance
In this first episode, the discussion starts by acknowledging the love-hate relationship many professionals have with GRC. Kendra Cooley, with over a decade of experience, opens the dialogue by highlighting its utility and challenges. While compliance frameworks like SOC 2 can facilitate organizational security direction, they often don't translate into best practices, leading to a strained relationship between security teams and compliance mandates. AKA people check the box and go on about their way, or worse, they feel they are now sufficiently secure.
To read the full reap, head over to our home for GRC Uncensored.