All About Risk

Chip Block joins Lily Yeoh and explains how AI is forcing organizations to rethink governance, security, and traditional control frameworks. From AI-generated software to data validation and trust, this episode explores why checklists and static controls are no longer enough for modern risk management. 00:00 - Chip Block’s Background and Why Risk Is Changing 03:12 - Why Cybersecurity Is a Business...

In this episode of All About Risk , Lily Yeoh sits down with Shayne Adler, co-founder of Aetos Data Consulting, to talk about defensible evidence, the gap between policy and reality, and why perfect compliance is a myth. They unpack compliance debt, right-sizing controls, AI overpromises, data theater, and what it really means to say what you do and do what you say. To learn more about Shayne Adle...

AI is moving fast, but in legal-tech, accuracy and trust are non-negotiable. In this episode of All About Risk , Lily Yeoh speaks with Dean Sapp, CISO and DPO at Filevine, about what happens when AI is introduced into environments where bad data and false outputs carry real consequences. Dean breaks down why enterprise AI is different from consumer tools, the risks of hallucinations, deepfakes, an...

In this final episode of this three part bonus series, Lily Yeoh shares clear, practical insight on what it really takes to break into a career in GRC. She talks about where people often start, how different backgrounds can translate into the field, and what helps you stand out early on. She also touches on common missteps, the importance of staying curious, and what to focus on in your first mont...

Lily Yeoh breaks down what you really need to enter GRC, from choosing between a degree or certifications to knowing which starter certs are worth your time. She explains how to get hands-on experience before your first role, the soft skills that actually help you stand out, and the one practical skill that’s shaped her own career. This episode gives you a clear, grounded starting point for buildi...

In this bonus episode (1 of 3), we zoom out and unpack what a career in GRC actually looks like. Lily Yeoh explains the field in simple terms, talks through the types of challenges GRC professionals help organizations navigate, and highlights the mix of backgrounds that thrive here. We touch on what early roles focus on, how government and commercial paths differ, and what someone should understan...

Dr. David Mussington, former member of the White House National Security Council and Professor at the University of Maryland, joins Lily Yeoh on All About Risk to challenge how we think about cybersecurity. He argues that the biggest threat isn’t just in the network, it’s in how we communicate, govern, and make decisions. From national policy to AI’s growing role in cyber defense, this episode exp...

In this final installment of our bonus series Understanding GRC , we explore the practical side of adopting GRC tools. From the limits of spreadsheets to the advantages of integrated platforms, this episode highlights what to look for in a solution, how ROI is measured, and why phasing in processes with a “crawl, walk, run” approach sets organizations up for long-term success.

In our second bonus episode, we dig into the first steps of building a GRC program with our expert Lily Yeoh. We cover why it starts with people, process, and technology, and the importance of documenting what you’re protecting. You’ll hear how to make policies meaningful instead of just templates, when to bring in expert guidance, and how to get leadership buy-in. We also touch on the real risks...

Bonus Episodes : Understanding GRC is a special bonus series designed for anyone who’s new to governance, risk, and compliance. Each episode breaks down core concepts into simple, practical insights, helping you understand not just what GRC is, but why it matters and how it impacts everyday business decisions. Whether you’re starting your career, leading a small team, or just curious about the fie...

Yiping Sun is a leader within Plante Moran’s cybersecurity compliance group. Her expertise includes SOC, ISO 27001, STAR, DPR, and more. She’s a CPA, a CISA, and one of the most trusted voices in cyber audit. In this episode, Yiping takes us inside the real world of audit. She speaks with Lily Yeoh about her career path in cybersecurity, breaking down what an effective audit truly looks like—and w...

In this episode, guest host John Paul Tran sits down with Lily Yeoh , CEO of C1Risk, to hear her hot takes on recent GRC events. They dive into insider threats such as the Coinbase hacking, public sector risks, and why faster, smarter governance is more critical than ever.

Lily Yeoh is joined by Terry Roberts, Founder, President & CEO of WhiteHawk. Terry served as a senior leader in the US government; her career in public service includes Director at the Secretary of Defense for Intelligence (USDI) and Deputy Director of Naval Intelligence. She’s led Military Intelligence Programs and the global defense, information-warfare, and technology strategies. In additio...

Today, Lily Yeoh is joined by Patrick Sullivan who brings over 25 years of experience in IT security and compliance, making him a trusted voice on AI governance and the new standard ISO 42001. He also provides insights into the work of ISO’s SC 42 subcommittee, which is shaping global standards for AI, including governance, ethics, and trustworthiness—making this essential knowledge for anyone eng...

Join C1Risk's CEO, Lily Yeoh and Joe Sullivan as they delve into the confluence of GenAI and Cybersecurity at Ilta Evolve 2024 Joe Sullivan Ex Uber, Cloudflare & Facebook CSO, brings unmatched cybersecurity insights from his extensive career in the private sector. His contributions are further distinguished by his public service, including his appointment by President Obama to the Cybersec...