“If I couldn't find a risk to align it to, I automatically told the team, get rid of it… It's not reducing any risk that I care about.”
The GRC Engineering Club's AntiCheckBox Podcast · GRC Is Broken. The Buyer Is The Bigger Problem | Guest: Jake Bernardes
Play from 22:23
22:23
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
What was described
Map every SaaS application and security tool to a specific risk; if no risk can be assigned, schedule contract termination when it expires
Said nearby on the same subject
“We give each trader the maximum risk points he can risk per a cycle… when the trader is at base, like at zero, he starts slow… as he's going into some winning streaks… he can increase the risk… we go to a certain point of risk points, and then we reset the cycle”
“I don't have a very bright… way of seeing how SaaS tools can compete long term with AI… these are the last few years where these SaaS tools will be useful”