GRC & Me

Jason Wang, Chief Risk Officer at Synergy Credit Union, joined the financial institution  to build out and enhance its  enterprise risk management functions, including a disaster recovery and pandemic response framework — all just before the start of the pandemic. Jason’s forethought and preparation positioned Synergy to successfully navigate COVID-19. In this episode of GRC & Me, Ja...

Dustin Owens’ extensive background in GRC began with an undergraduate degree in computer information systems.  When he realized programming wasn’t his professional calling, he transitioned to the security and cybersecurity space — now, he’s accrued 25 years of experience in the field.  After being introduced to risk quantification in 2003 as part of the National Security Agency’s INFOSEC...

LogicGate’s Chief Marketing Officer Gina Hortatsos joins the podcast to discuss the findings. One of the surprising results is that while the vast majority (91%) acknowledged the importance of GRC programs to their organization, but only 45% of survey respondents said their current programs are extremely effective.

How can you best articulate the value of your security program to non-security professionals in your organization? Or even to board members? It starts with asking questions. Five of them, to be exact. Emily Heath, DocuSign’s Chief Trust & Security Officer, covers five questions or pillars to ensure you’re able to confidently speak about your company’s security program. In this episode of GRC &...

Brian Clark has had a front-row seat to both sides of the regulatory compliance coin: He was a regulator during the post-financial crisis in 2008. Years later, he transitioned to being a chief compliance officer and general counsel. With such varied experience, the president and founder knew exactly what he set out to solve when he founded Ascent in 2015: simplifying the knowledge work required to...

Peter Berger and David Ngu both work for global consulting firm Protiviti in the Netherlands, helping clients figure out how to integrate governance, risk management, and compliance technology into their workplace.   In this episode of GRC & Me, Peter and David provide some of their valuable insights about how to incorporate agile GRC technology to make sure it’s actually doing its job to...

Just what is Risk Cloud Exchange (RCX) and what benefits could it offer your organization? These questions are explored on this episode of GRC & Me with LogicGate’s Amrutha Sivakumar and Emily Affinito. 

After nearly two decades in tech, including stints at the Big Four security firms, Scott Jordan is on his 148th governance, risk, and compliance (GRC) implementation. Now the principal and partner at Agile GRC Solutions, Scott puts it simply on this episode of GRC & Me: “I’ve seen a few things in the market.” Specifically, he’s watched as companies large and small have become more vulnerable to ra...

Legacy technology’s grasp on GRC processes is slowly loosening. As LogicGate’s Director of Customer Success Szuyin Leow explains, it appears the future is here, thanks to flexible data models. A former cybersecurity consultant, Szuyin now helps LogicGate’s customers leverage the flexible data model that powers the risk cloud platform the company is recognized for. Adaptability is key across any in...

When the effects of COVID-19 began to tear across industries, GRC Technology Manager Priyam Shah didn’t hesitate to pivot PwC’s services to support their customers. Because PwC resolves complex GRC issues across various industries, Priyam says its collaboration with LogicGate was natural to support the facilitation of the “return to work” program PwC created as a part of its pandemic response. In...

Asureti co-founder and Practice Director, Melissa Ryan, has been fascinated with language for as long as she can remember — and she has the spelling bee record to prove it. Since she’s worked with people across business operations, the multi-faceted data protection expert has seen firsthand how a common language can bridge gaps between departments, allowing for truly valuable and meaningful conver...

In the age of COVID-19, virtual conferences reign supreme — without the handshaking, warm hugs and mingling breaks, are they as compelling and worthwhile to attend? When the content is as relevant and valuable as it was at Agility 2020, LogicGate’s first-ever virtual user conference, the answer is an easy yes. Couldn’t make it? Tune in to this special episode of GRC & Me with host Megan Phee for h...

David Ponder, a partner at Cential, has used COVID-19 to teach his five-year-old daughter about the interconnectedness of the world: “To change the world, you've got to start with yourself first and your closest circle second,” he advises. This lesson parallels the interconnectivity of risk management ecosystems — organizations should never stop reevaluating the principles that determine their act...

What do you get when you cross innovation and pioneering? CEO Matt Kunkel and Chief Product Officer Jon Siegler — AKA two of the three founders of LogicGate. Historically, the old-school GRC software space aimed to operationalize regulatory risk and compliance and security programs in two ways: 1) Using technology platforms with rigid data models and 2) Using point solutions — that don’t integrate...

A simple question — “why?” — jumpstarted Heath Anderson’s journey with governance, risk and compliance (GRC). Today, he’s LogicGate’s Information Security Manager. Before that, he worked with development teams in the United States Air Force designing tests to ensure compliance, and the rest is security — err, history. For his first-ever podcast appearance, Heath joined an episode of GRC & Me to di...

In the Season 2 premiere of GRC & Me, Megan is talking to John Mumford, Chief Risk Officer at Fellsway Group, a Boston-based consulting firm. Listen in as John discusses why GRC professionals today are hungry for a new way of thinking about risk compliance, how to tackle cyber risk as a business risk, and his passion for risk-taking - not just in business but on the ice rink, too.

In this special episode of GRC & Me, Megan sits down with LogicGate CEO Matt Kunkel and CMO Gina Hortatsos to discuss how a risk management company is handling the COVID-19 pandemic. Matt and Gina walk us through their reactions when the news broke about the pandemic, the free Business Continuity Plan offer for LogicGate customers, and the challenges of leading a company during the statewide shelt...

Top 3 Quotes “Trust really is ‘security, compliance, and privacy’—it's the three-legged stool.” “The ‘compliance’ is a byproduct [of risk], ‘governance’ is the way you operate, but how you truly define ‘risk’ is where the focus is.” “Sensitive data being pushed around an organization through e-mails and spreadsheets—that kind of model is not sustainable.” Show Highlights [01:43] From a detective i...

Top 3 Quotes There's a number of players providing solutions, but only a small number of true winners that will emerge to set this new standard for usability and effectiveness combined with affordability. Risk and compliance needs change so fast that the technology has to be flexible enough to keep up. The market is wide open for a company to set the pace for the rest of the pack and for the indus...

Top 3 Quotes Risk assessment is not the same thing as conducting an assessment of your compliance program. The risk assessment is not designed to be an audit of every activity your company is doing; it’s designed to scan across the breadth of what your company is doing The skill-set needs are changing. Show Highlights [01:41] Jack shares what led him to risk and compliance as a career path. [03:51...

Top 3 Quotes “I'm a firm believer that cyber security is very much a journey.” “Do the basics and do them well—that's a strong foundation.” “Doing security from a sustainable point of view is trying to develop the right people, the right processes and technologies, which would allow for cyber resilience against whatever the threat landscape might be.” Show Highlights [01:12] How Dominic got into h...

Top 3 Quotes “The more that you can show your customers that you're being a good steward with their data, the more they're likely to trust you. And from a reputational standpoint and a branding standpoint, that's always one of the best benefits and one of the reasons that consumers will choose one product or service over the other.” “And I think if you look carefully, the CCPA is quite a blessing....

Top 3 Quotes “Ultimately, you wouldn't go through any of these assessments unless it's driving business.” “You don't want to be more secure just so you can be more secure, it's got to be a part of your overall business plan.” “You have to start looking at this as a positive business driver instead of something that is just a line item that costs money at the end of the year.” Show Highlights [01:1...

Top 3 Takeaways Transparency is very important to consumers right now. You want to make sure that you're clear about what's happening to personal information. Have a full and complete understanding of who you share information with. You don't want to be held liable for a vendor who misused data. Show Highlights [00:50] Sharing Donata’s background [02:12] The nitty-gritty of regulations [03:30] The...

Top 3 Takeaways Defensibility is the ultimate concept that everybody drives to—whether they say it out loud or not. In the security landscape we see today, there are many opportunities for improvement. Even when I employ all of my resources, even when I put my best foot forward out there, failures can occur in my ability to protect data. Show Highlights [00:47] Neil introduces Asureti. [01:23] Wha...