In this special episode of GRC & Me, Megan sits down with LogicGate CEO Matt Kunkel and CMO Gina Hortatsos to discuss how a risk management company is handling the COVID-19 pandemic. Matt and Gina walk us through their reactions when the news broke about the pandemic, the free Business Continuity Plan offer for LogicGate customers, and the challenges of leading a company during the statewide shelter-in-place order.
Apr 13, 2020•24 min
Top 3 Quotes “Trust really is ‘security, compliance, and privacy’—it's the three-legged stool.” “The ‘compliance’ is a byproduct [of risk], ‘governance’ is the way you operate, but how you truly define ‘risk’ is where the focus is.” “Sensitive data being pushed around an organization through e-mails and spreadsheets—that kind of model is not sustainable.” Show Highlights [01:43] From a detective in England to Chief Trust & Security Officer at DocuSign [03:17] Duties and responsibilities of a...
Dec 04, 2019•12 min•Season 1Ep. 16
Top 3 Quotes There's a number of players providing solutions, but only a small number of true winners that will emerge to set this new standard for usability and effectiveness combined with affordability. Risk and compliance needs change so fast that the technology has to be flexible enough to keep up. The market is wide open for a company to set the pace for the rest of the pack and for the industry. Show Highlights [01:26] Karry's humble start [03:44] What lead Karry to the GRC space [04:50] T...
Nov 20, 2019•10 min•Season 1Ep. 15
Top 3 Quotes Risk assessment is not the same thing as conducting an assessment of your compliance program. The risk assessment is not designed to be an audit of every activity your company is doing; it’s designed to scan across the breadth of what your company is doing The skill-set needs are changing. Show Highlights [01:41] Jack shares what led him to risk and compliance as a career path. [03:51] How Jack crossed paths with LogicGate founders. [04:34] Jack explains what is RAMP and how it bene...
Nov 06, 2019•17 min•Season 1Ep. 14
Top 3 Quotes “I'm a firm believer that cyber security is very much a journey.” “Do the basics and do them well—that's a strong foundation.” “Doing security from a sustainable point of view is trying to develop the right people, the right processes and technologies, which would allow for cyber resilience against whatever the threat landscape might be.” Show Highlights [01:12] How Dominic got into his current position [02:35] The answer to Megan's million dollar question [03:16] Dominic shares his...
Oct 23, 2019•14 min•Season 1Ep. 13
Top 3 Quotes “The more that you can show your customers that you're being a good steward with their data, the more they're likely to trust you. And from a reputational standpoint and a branding standpoint, that's always one of the best benefits and one of the reasons that consumers will choose one product or service over the other.” “And I think if you look carefully, the CCPA is quite a blessing. It helps reduce expenses and monetize the information life cycle because you have a better understa...
Oct 09, 2019•27 min•Season 1Ep. 12
Top 3 Quotes “Ultimately, you wouldn't go through any of these assessments unless it's driving business.” “You don't want to be more secure just so you can be more secure, it's got to be a part of your overall business plan.” “You have to start looking at this as a positive business driver instead of something that is just a line item that costs money at the end of the year.” Show Highlights [01:15] How Bryan got to where he is now [01:54] SAS 70 Solutions was born [03:18] Bryan starts with Abac...
Sep 25, 2019•20 min•Season 1Ep. 11
Top 3 Takeaways Transparency is very important to consumers right now. You want to make sure that you're clear about what's happening to personal information. Have a full and complete understanding of who you share information with. You don't want to be held liable for a vendor who misused data. Show Highlights [00:50] Sharing Donata’s background [02:12] The nitty-gritty of regulations [03:30] The CCPA Bill exodus [05:49] Who does the CCPA Bill apply to? [06:50] How does the CCPA affect consumer...
Sep 12, 2019•26 min•Season 1Ep. 10
Top 3 Takeaways Defensibility is the ultimate concept that everybody drives to—whether they say it out loud or not. In the security landscape we see today, there are many opportunities for improvement. Even when I employ all of my resources, even when I put my best foot forward out there, failures can occur in my ability to protect data. Show Highlights [00:47] Neil introduces Asureti. [01:23] What is SRCP? [02:45] Do organizations have solid strategy around GRC principles today? [04:50] The fun...
Aug 28, 2019•14 min•Season 1Ep. 9
Show Highlights: [00:22] A new taste of the podcast [00:26] Meet your new host [00:55] What to expect moving forward Resources: Connect with Megan on LinkedIn Connect with Megan on Twitter Connect with Megan on LogicGate...
Aug 14, 2019•2 min•Season 1Ep. 8
Top 3 Quotes Risk Management is not really a profession. It's a competency that should be part of most degrees, if not all the degrees, at universities. Most organizations have been disillusioned with the astrology version of risk management. Sometimes, even a little quantification improves the quality of decision-making significantly. Show Highlights [01:17] Alex shares what the Risk Academy provides [03:02] How Alex got into risk [05:13] Alex's "controversial" blog [08:04] Methodologies, strat...
Jul 31, 2019•35 min•Season 1Ep. 7
Top 3 Takeaways It's tough to keep up without good technology The transparency between parties is tough with financial institutions A single point of failure can also be a single point of fraud Show Highlights: [02:50] Challenges that the smaller financial institutions have in their risk management programs [07:13] The significant irony in financial institutions [09:01] What Terri brings to the table [10:50] Creating a culture of risk-awareness [12:24] Reactive planning versus strategy planning ...
Jul 17, 2019•31 min•Season 1Ep. 6
Top 3 Takeaways: There's a big need in the marketplace for a technology that’s flexible and dynamic, yet easy to use from an end-business-user perspective. “I took an educated bet that the market was right for a disruptive perspective.” “Everyone is somewhere between ought-to-buy and needs-to-buy a GRC platform.” Show Highlights: [01:08] How the committee got started. [2:53] Matt's handling of projects related to the Lehman Brothers’ fallout and the Madoff scandal [3:11] Starting a custom app de...
Jul 03, 2019•20 min•Season 1Ep. 5
Top 3 Takeaways: Focus on critical items first and make sure you have people and processes in place beforehand. If technology is flexible, you can continue to scale and grow and change your processes over time. Start simple, drive value in one place, and then build that over time. Show Highlights [1:35] Szuyin’s consulting background and why she got certed [2:33] Finding out about LogicGate [03:34] The common challenges getting started [4:46] The number one thing Szuyin recommends [6:23] Keep it...
Jun 19, 2019•25 min•Season 1Ep. 4
Top 3 Takeaways It’s important to first establish what your company is trying to accomplish with its GRC program. Frameworks are like the human body; you've got multiple systems involved. All those come together to help form a GRC program. In light of data breaches, consumers are picking up on privacy. They're demanding better practices with their personal data. Show Highlights [01:09] How Michael got involved in GRC [02:35] What frustrates Michael [04:39] The GRC moves, changes, and challenges ...
May 22, 2019•25 min•Season 1Ep. 3
Top 3 Takeaways A data model is the underlying architecture that underpins any GRC program. We live in a world that is constantly moving, changing, and evolving. That’s why flexibility in business systems is key. Flexibility means being able to put a program in place on day one, without a final vision of where it’s going—it can change and adapt to changing requirements along the way. Show Highlights [01:07] Matt’s background [03:50] Why data models are important to an effective GRC program [05:1...
May 22, 2019•18 min•Season 1Ep. 2
Just like the billion-dollar GRC industry it covers, GRC & Me helps companies achieve their revenue goals while managing risk and compliance issues with integrity. This podcast is perfect for you if: You’re in a role concerned with corporate governance, risk management, or compliance (GRC) You want to protect your company and your brand You simply love GRC like Kelley does! Tune in every month to learn from GRC experts and thought leaders, catch up on industry-shaping news, and better unders...
May 22, 2019•3 min•Season 1Ep. 1