Podcasts by GRC & Me

Shifting Gears To Quantify Risk with Netflix’s Tony Martin-Vegue from 2023-11-08T15:00:01

Switching from traditional risk analysis methods like ordinal lists or red-yellow-and-green charts to more modern approaches like risk quantification requires a paradigm shift in how you think a...

Please Hack Me: Hacking Companies for Good from 2023-10-18T05:00

They say it takes a thief to catch a thief, so why not a hacker to catch a hacker? 

That was the premise behind Ted Harrington’s Independent Security Evaluators, a company dedicated t...

Rockets, Radios, and Risk: How NASA Manages Uncertainty in Orbit from 2023-10-04T05:00

Few careers involve managing as much risk as one where you’re responsible for launching humans riding gigantic rockets into outer space. That’s exactly what Barrios Technology Chief Strategy Off...

Managing Risk on the Frontlines of the Financial Sector from 2023-09-20T14:09:33

One of the most high-profile risk events of the last year was the swift collapse of Silicon Valley Bank and other regional banks amid spiking interest rates. Part of the problem? The lack of a c...

Staying in the Fed’s Favor: Navigating Government Contracts with Intel Federal’s John Griffin from 2023-08-22T21:04:35

When doing business with the federal government and its myriad agencies, organizations are bound to run into plenty of mandates, regulations, and other requirements. Navigating them all can caus...

Building Robust Risk Cultures Through Collaborative Cyber Risk Management from 2023-08-08T15:57:31

Oftentimes, cyber risk teams are viewed as reactive “audit police,” swooping into projects to flag risks and forcing changes at key points. This approach can generate a resentful — even toxic — ...

Using Cyber Risk Quantification to Make the Right Risk Decisions from 2023-07-26T05:00

Cybersecurity programs involve lots of moving parts, and they only grow more complex over time as technology becomes more advanced and cyber threats become more numerous and sophisticated. Cyber...

Preparing for DORA, NIS2, and the new European push for cybersecurity from 2023-06-28T15:06:43

With information and cybersecurity incidents growing in frequency and severity, regulators in the European Union are hard at work devising new rules designed to incentivize organizations to hard...

The Risks and Rewards of AI in Business Automation from 2023-05-31T19:02:26

In just a few months, artificial intelligence went from a fringe technology to full-speed ahead with the public release of ChatGPT. This fascinating technology has the potential to revolutionize...

Positioning GRC as an Enabler with Integrated Data from 2023-02-02T06:00

On this episode of GRC & Me, Andy Ruse and Mike Curl, former Regulatory Data Manager at Honeywell, discuss the benefits of building dashboards from the bottom up, how to get organizational b...

Breaking Down Organizational Silos With a Common Risk Language from 2023-01-19T06:00

Getting everyone on the same page about the risks your organization is facing is a crucial part of effectively managing organizational risk. Unfortunately, it’s also one of the hardest ...

The Five Layers of a Mature GRC Program from 2023-01-04T06:00

On this episode of GRC & Me, Andy Ruse, LogicGate’s President of Field Operations, sits down with Cooley’s Mike Santos, Director of Security and Information Governance, to discuss his five-l...

Measurement as a Foundation for Communicating Risk from 2022-12-21T06:00

Properly measuring risk is the most important ingredient in effectively communicating risk, and communicating risk leads to a richer risk culture at your organization. On this episode of GRC &am...

Building the Business Case for Getting the Right GRC Technology from 2022-12-07T06:00

This episode takes a deep dive into creating a business case for investing in GRC technology by proving its cost-saving impact. LogicGate CEO Matt Kunkel spoke with Michael Rasmussen, a renowned...

The Risks We Cannot See from 2022-11-23T06:00

On this episode of GRC & Me, we explore business resilience and the differences between proactive, reactive, and preemptive approaches to crisis management with Howard Mannella, Senior Staff...

How to Build a Risk Practice from 2022-11-09T06:00

This episode tackles the essential topic of how to build and mature a risk program aligned with business objectives. Andy Ruse, LogicGate’s president of field operations, recently caught up with...

Enhancing Your Business Continuity Framework in a Volatile Environment from 2022-10-26T05:00

LogicGate’s Megan Phee sat down with Jason Wang, Chief Risk Officer at Synergy Credit Union, to explore the importance of creating or refining business continuity plans in the face of volatility...

Going Paperless & Improving GRC Processes from 2022-07-27T05:00

Making things easier and less paper-bound through digital technology is a top priority for many organizations, especially when it comes to their GRC initiatives. In this episode, LogicGate’s Meg...

Prices Are Rising. How to Prepare for Inflation Now & Later. from 2022-07-13T05:00

With prices increasing across the board, it is getting harder to avoid inflation's risk and a potential recession. In this episode, LogicGate CEO Host Matt Kunkel sits down with John Hotchkiss, ...

GRC & Chill: Kickstarting Your Risk Management with Quantification from 2022-06-29T05:00

When people think of GRC, generally, they tend to categorize it within the framework of financial or regulated sectors. Even the entertainment business needs GRC. In this episode, Megan Phee is ...

Teaming Up to Solve Third-Party Risk from 2022-06-28T05:00

Welcome to a special edition of GRC & Me featuring the audio version of LogicGate's newest eBook on Third-Party Risk Management.

This audio eBook reveals:

• How to effectively...
  Listen

Quick Wins for Your GRC & InfoSec Journey from 2022-06-01T05:00

Great conversations leave you wanting more and that is exactly what happened when LogicGate's own Megan Phee appeared with James (Jim) Rees onListen

Go Big and Go Global! How Global Standards Can Benefit the GRC Community from 2022-05-04T05:00

At GRC & Me, we like to go big or go home. In this episode, we do just that and take on the topic of global standards. We brought in the perfect person for the task, Rob Fulcher, Head of Sal...

Has the ‘Great Resignation’ Created the ‘Great Reflection’ for Organizations? from 2022-04-20T05:00

It seems like everywhere you look there’s a new article about the “Great Resignation” and the challenges with keeping talent. Businesses, regardless of industry, are being impacted. So where do ...

Vendor Risk Management Programs Demystified from 2022-04-06T05:00

Our customers' success means a lot to us at LogicGate. That is why we decided to have no other than Szuyin Leow, VP of Customer Success, as a guest host. Szuyin sits down with one of our rocksta...

Navigating Internal Audit Personalities and Challenges from 2022-03-23T05:00

We decided it was time for some inner reflection here at GRC & Me. Or, in GRC terms, an Internal Audit. Guest host Heath Anderson, LogicGate's Information Security Leader, does just that as ...

Why Your Board Cares About Resiliency and Agility from 2022-03-09T06:00

At the end of last season, we learned how resilience, agility, and integrity are perfect additions to GRC practices that merit more focus. In this episode, we kick off season five of GRC & M...

GRC Trends in 2022 (Part 2): Integrity & Environmental Social Governance from 2022-01-19T14:10:04

For centuries philosophers have given us the four cardinal virtues: prudence, justice, fortitude, and temperance. For the GRC community at large, there is more than enough room to add to these t...

GRC Trends in 2022 (Part 1): Resilience & Agility from 2022-01-05T06:00

It's a new year, and that means new resolutions. Move over pushups and pilates; we're kicking off the new year with a two-part podcast meant to get your 2022 off to a great start. If you are loo...

What "Holistic GRC" Actually Means and Why it Matters from 2021-12-22T06:00

Have you ever wondered what exactly holistic GRC is? What does it look like, and do people really mean when they say a “holistic GRC program”?

In this episode of GRC & Me, returning gu...

How to Effectively Communicate Risk Stories from 2021-12-08T06:00

Have you ever worried about how you should communicate risks to the board? How much data can they handle?

In this episode of GRC & Me, we are joined by Richard Seiersen, who has previo...

Take The Guesswork Out of Your Threat Landscape Assessments from 2021-11-17T06:00

Do you see cybersecurity troubled waters coming your way but don’t know how to navigate the storm? With a good course charted, a strong and united crew, and a savvy captain you can navigate even...

Reduce Uncertainty Around Risk with Quantification from 2021-11-03T05:01

What does a “high” risk mean to you? What does it mean to your colleague? Does your organization have multiple risks marked as “high” but it’s hard to figure out which one to focus on first? If ...

The Secret Sauce for a Successful GRC Implementation from 2021-09-15T04:00

Charlie Meyer is LogicGate’s Implementation Services Manager. In his role, he has served at the helm of countless implementation strategies for GRC solutions.

Charlie provides...

Why Everyone At Your Company is a Risk Manager from 2021-08-04T04:00

Jason Wang, Chief Risk Officer at Synergy Credit Union, joined the financial institution  to build out and enhance its  enterprise risk management functions, including a disaster recov...

Why Everyone At Your Company is a Risk Manager from 2021-08-04T04:00

Jason Wang, Chief Risk Officer at Synergy Credit Union, joined the financial institution  to build out and enhance its  enterprise risk management functions, including a disaster recov...

A Conversation on Risk Quantification from 2021-06-16T07:00

Dustin Owens’ extensive background in GRC began with an undergraduate degree in computer information systems. 

The Results Are In! 2021 Risk Manager Insights from 2021-06-02T04:00

LogicGate’s Chief Marketing Officer Gina Hortatsos joins the podcast to discuss the findings. One of the surprising results is t...

Resilience Beyond Business Continuity Planning from 2021-05-19T04:00

How can you best articulate the value of your security program to non-security professionals in your organization? Or even to board members?

It starts with asking questions. Five of them, ...

Why Artificial Intelligence is Relevant to Regulatory Compliance from 2021-05-05T07:00

Brian Clark has had a front-row seat to both sides of the regulatory compliance coin: He was a regulator during the post-financi...

Aligned and Agile GRC from 2021-04-21T16:05:26

Peter Berger and David Ngu both work for global consulting firm Protiviti in the Netherlands, helping clients figure out how to integrate governance, risk management, and compliance technology i...

Exploring Risk Cloud Exchange from 2021-04-07T07:00

Just what is Risk Cloud Exchange (RCX) and what benefits could it offer your organization? These questions are explored on ...

Is GRC a Subset of Cybersecurity? from 2020-10-07T14:22:42

After nearly two decades in tech, including stints at the Big Four security firms, Scott Jordan is on his 148th governance, risk, and compliance (GRC) implementation. Now the principal and partner ...

Adapt to Change with Flexible Data Models from 2020-09-16T08:20

Legacy technology’s grasp on GRC processes is slowly loosening. As LogicGate’s Director of Customer Success Szuyin Leow explains, it appears the future is here, thanks to flexible data models. A f...

Return to Work with Confidence (and avoid GRC Pitfalls) from 2020-09-01T18:30:02

When the effects of COVID-19 began to tear across industries, GRC Technology Manager Priyam Shah didn’t hesitate to pivot PwC’s services to support their customers. Because PwC resolves complex GR...

A Conversation on Risk Language from 2020-08-18T20:28:32

Asureti co-founder and Practice Director, Melissa Ryan, has been fascinated with language for as long as she can remember — and she has the spelling bee record to prove it. Since she’s worked with ...

Agility 2020 Highlights from 2020-07-28T16:36:24

In the age of COVID-19, virtual conferences reign supreme — without the handshaking, warm hugs and mingling breaks, are they as compelling and worthwhile to attend? When the content is as relevant...

Transformative Risk Management from 2020-07-07T20:44:37

David Ponder, a partner at Cential, has used COVID-19 to teach his five-year-old daughter about the interconnectedness of the world: “To change the world, you've got to start with yourself first an...

What is The Risk Cloud™? from 2020-06-18T19:58

What do you get when you cross innovation and pioneering? CEO Matt Kunkel and Chief Product Officer Jon Siegler — AKA two of the three founders of LogicGate. Historically, the old-school GRC softw...

How LogicGate Uses The LogicGate Risk Cloud from 2020-06-09T20:48:30

A simple question — “why?” — jumpstarted Heath Anderson’s journey with governance, risk and compliance (GRC). Today, he’s LogicGate’s Information Security Manager. Before that, he worked with deve...

Cyber Risk as a Business Risk from 2020-05-27T05:00:01

In the Season 2 premiere of GRC & Me, Megan is talking to John Mumford, Chief Risk Officer at Fellsway Group, a Boston-based consulting firm. Listen in as John discusses why GRC professionals toda...

How Does a Risk Management Company Handle the COVID-19 Pandemic? from 2020-04-13T19:04:35

In this special episode of GRC & Me, Megan sits down with LogicGate CEO Matt Kunkel and CMO Gina Hortatsos to discuss how a risk management company is handling the COVID-19 pandemic. Matt and Gina ...

The GRC World Needs An Overhaul | Emily Heath from 2019-12-04T15:58:12

Top 3 Quotes

• “Trust really is ‘security, compliance, and privacy’—it's the three-legged stool.”
• “The ‘compliance’ is a byproduct [of risk], ‘governance’ is th...
  Listen

The GRC World Needs An Overhaul | Emily Heath from 2019-12-04T15:58:12

Top 3 Quotes

• “Trust really is ‘security, compliance, and privacy’—it's the three-legged stool.”
• “The ‘compliance’ is a byproduct [of risk], ‘governance’ is th...
  Listen

The Value of SaaS in GRC | Karry Kleeman from 2019-11-20T08:00:02

Top 3 Quotes

• There's a number of players providing solutions, but only a small number of true winners that will emerge to set this new standard for usability and effe...
  Listen

The Value of SaaS in GRC | Karry Kleeman from 2019-11-20T08:00:02

Top 3 Quotes

• There's a number of players providing solutions, but only a small number of true winners that will emerge to set this new standard for usability and effe...
  Listen

Pursuing Sustainable and Continually Improving Programs | Jack Tanselle from 2019-11-06T08:00:08

Top 3 Quotes

• Risk assessment is not the same thing as conducting an assessment of your compliance program.
• The risk assessment is not designed to be an audit ...
  Listen

Pursuing Sustainable and Continually Improving Programs | Jack Tanselle from 2019-11-06T08:00:08

Top 3 Quotes

• Risk assessment is not the same thing as conducting an assessment of your compliance program.
• The risk assessment is not designed to be an audit ...
  Listen

The Journey of Cyber Security | Dominic Vogel from 2019-10-23T07:00:05

Top 3 Quotes

• “I'm a firm believer that cyber security is very much a journey.”
• “Do the basics and do them well—that's a strong foundation.”
• “Doing sec...
  Listen

The Journey of Cyber Security | Dominic Vogel from 2019-10-23T07:00:05

Top 3 Quotes

• “I'm a firm believer that cyber security is very much a journey.”
• “Do the basics and do them well—that's a strong foundation.”
• “Doing sec...
  Listen

The Blessing of CCPA | Rafael Moscatel from 2019-10-09T07:00:10

Top 3 Quotes

• “The more that you can show your customers that you're being a good steward with their data, the more they're likely to trust you. And from a reputational standpoint an...
  Listen

The Blessing of CCPA | Rafael Moscatel from 2019-10-09T07:00:10

Top 3 Quotes

• “The more that you can show your customers that you're being a good steward with their data, the more they're likely to trust you. And from a reputational standpoint an...
  Listen

Cybersecurity as a Positive Business Driver | Bryan Graf from 2019-09-25T07:00:16

Top 3 Quotes

• “Ultimately, you wouldn't go through any of these assessments unless it's driving business.”
• “You don't want to be more secure just so you can be more secure, i...
  Listen

Cybersecurity as a Positive Business Driver | Bryan Graf from 2019-09-25T07:00:16

Top 3 Quotes

• “Ultimately, you wouldn't go through any of these assessments unless it's driving business.”
• “You don't want to be more secure just so you can be more secure, i...
  Listen

What To Know About CCPA | Donata Kalnenaite from 2019-09-12T08:00:10

Top 3 Takeaways

• Transparency is very important to consumers right now. You want to make sure that you're clear about what's happening to personal information.
<...
Listen

What To Know About CCPA | Donata Kalnenaite from 2019-09-12T08:00:10

Top 3 Takeaways

• Transparency is very important to consumers right now. You want to make sure that you're clear about what's happening to personal information.
<...
Listen

The Concept of Defensibility | Neil Watkins from 2019-08-28T06:00:05

Top 3 Takeaways

• Defensibility is the ultimate concept that everybody drives to—whether they say it out loud or not.


• In the security landscape w...
  Listen

The Concept of Defensibility | Neil Watkins from 2019-08-28T06:00:05

Top 3 Takeaways

• Defensibility is the ultimate concept that everybody drives to—whether they say it out loud or not.
• In the security landscape we see today,...
  Listen

Introducing Megan Phee from 2019-08-14T06:00:07

Show Highlights:
[00:22] A new taste of the podcast
[00:26] Meet your new host
[00:55] What to expect moving...

The Most Controversial Risk Thought Leader | Alexei Sidorenko from 2019-07-31T12:52:51

Top 3 Quotes

• Risk Management is not really a profession. It's a competency that should be part of most degrees, if not all the degrees, at universities. Listen

The Most Controversial Risk Thought Leader | Alexei Sidorenko from 2019-07-31T12:52:51

Top 3 Quotes

• Risk Management is not really a profession. It's a competency that should be part of most degrees, if not all the degrees, at universities.
• Mo...
  Listen

Risk and Compliance In Finance | Terri Sands from 2019-07-17T14:00:19

Top 3 Takeaways

• It's tough to keep up without good technology
• The transparency between parties is tough with financial institutions
• A single point...
  Listen

Risk and Compliance In Finance | Terri Sands from 2019-07-17T14:00:19

Top 3 Takeaways

• It's tough to keep up without good technology
• The transparency between parties is tough with financial institutions
• A single point...
  Listen

Starting LogicGate | Matt Kunkel from 2019-07-03T06:00:24

Top 3 Takeaways:

• There's a big need in the marketplace for a technology that’s flexible and dynamic, yet easy to use from an end-business-user perspective.<...
  Listen

Starting LogicGate | Matt Kunkel from 2019-07-03T06:00:24

Top 3 Takeaways:

• There's a big need in the marketplace for a technology that’s flexible and dynamic, yet easy to use from an end-business-user perspective.
Listen

All Things Implementation | Szuyin Leow from 2019-06-19T06:00:10

Top 3 Takeaways:

• Focus on critical items first and make sure you have people and processes in place beforehand.
• If technology is flexible, you can continue...
  Listen

All Things Implementation | Szuyin Leow from 2019-06-19T06:00:10

Top 3 Takeaways:

• Focus on critical items first and make sure you have people and processes in place beforehand.
• If technology is flexible, you can continue...
  Listen

The Father of GRC | Michael Rasmussen from 2019-05-22T06:10

Top 3 Takeaways

• It’s important to first establish what your company is trying to accomplish with its GRC program.


• Frameworks are like the human...
  Listen

The Father of GRC | Michael Rasmussen from 2019-05-22T06:10

Top 3 Takeaways

• It’s important to first establish what your company is trying to accomplish with its GRC program.
• Frameworks are like the human body; you'v...
  Listen

Key Benefits of Flexible Data Model | Matt Kunkel from 2019-05-22T06:05

Top 3 Takeaways

• A data model is the underlying architecture that underpins any GRC program.
• We live in a world that is constantly moving, changing, and evo...
  Listen

Key Benefits of Flexible Data Model | Matt Kunkel from 2019-05-22T06:05

Top 3 Takeaways

• A data model is the underlying architecture that underpins any GRC program.
• We live in a world that is constantly moving, changing, and evo...
  Listen

Welcome To GRC & Me from 2019-05-22T06:00:05

Just like the billion-dollar GRC industry it covers, GRC & Me helps companies achieve their revenue goals while managing risk and compliance issues with integrity.

This podca...