“If I couldn't find a risk to align it to, I automatically told the team, get rid of it… It's not reducing any risk that I care about.”

The GRC Engineering Club's AntiCheckBox Podcast · GRC Is Broken. The Buyer Is The Bigger Problem | Guest: Jake Bernardes

Play from 22:23
22:23

Audio streams from the publisher’s own feed. Verbatim does not host or copy it.

What was described

Map every SaaS application and security tool to a specific risk; if no risk can be assigned, schedule contract termination when it expires

Said nearby on the same subject

“We give each trader the maximum risk points he can risk per a cycle… when the trader is at base, like at zero, he starts slow… as he's going into some winning streaks… he can increase the risk… we go to a certain point of risk points, and then we reset the cycle”
SM
Simon Mach MyCryptoParadise
Risk Management Show ·
How they work Share this moment
“We have to have an annual independent risk assessment, validating the security.”
MP
Melanie Pedrone
Tell Me Everything | Logistics Freight Podcast ·
How they work Share this moment
“Policy talks to controls. Controls are mapped to risks… silos come down.”
CU
Craig Unger
The AI in Business Podcast ·
How they work Share this moment
“I don't have a very bright… way of seeing how SaaS tools can compete long term with AI… these are the last few years where these SaaS tools will be useful”
RP
Riccardo Pisano
Practical Founders Podcast ·
Contrarian take Share this moment

Moments like this, every Monday

The strongest new moments on your topics, in the speakers' own words. Free for three topics.

No card. No password. One-click unsubscribe.

Track a competitor?

Pro watches up to 25 names or phrases and emails you the morning after they are said.

See Pro, $29 a month

Verbatim quotes a short extract and links to the episode; the episode belongs to its publisher. Remove a show.