In this episode of Culture of Compliance, Shelby Nelson sits down with John Ray, Director of Enterprise Risk Management at Norfolk Southern, to discuss how one of the nation's largest freight rail networks manages risk across safety, operations, supply chain and cybersecurity. John shares insights into building a culture of compliance in a highly regulated industry and lessons organizations of any size can apply to strengthen resilience.

About our Speakers:

Shelby Nelson, Partner, Frazier & Deeter, LLC Partner, Frazier & Deeter Advisory, LLC

John Ray, Director Enterprise Risk Management, Norfolk Southern

In this episode of Culture of Compliance, host Shelby Nelson talks with Cyrus Rattler of Qualla Enterprises about the operational and regulatory realities of working in the cannabis industry. They discuss traceability, internal controls, product testing, physical security and the importance of strong compliance practices in an industry where accountability is built into every step of the process.

In this episode of Culture of Compliance, host Shelby Nelson sits down with Ashley Holmes, a seasoned GRC executive and current J.D. candidate at Elon University School of Law, to discuss the evolving role of compliance in today's risk environment.

Together, they explore how compliance has shifted from a checklist-driven function to a more strategic discipline focused on risk management, operational resilience and organizational accountability. The conversation also examines why many organizations continue to struggle with foundational security and control practices, drawing on lessons learned from navigating SOC challenges, strengthening control environments and translating risk into more meaningful conversations with leadership teams.

They also discuss Ashley's transition to law school and the growing importance of bridging cybersecurity, compliance and legal expertise in an increasingly complex regulatory landscape.

The Culture of Compliance podcast is back!

As compliance continues to evolve, the conversation must evolve with it. Culture of Compliance focuses on what matters most: practical insight, real-world decision-making, and the role culture plays across compliance, cybersecurity, IT, risk management and audit.

Hosted by Frazier & Deeter's Shelby Nelson, who brings more than 25 years of experience in IT compliance, risk management and SOC reporting.

New episodes released monthly.

What's new in the compliance industry and how can compliance leaders keep up with their peers? Sabrina Serafin interviews Carrie Penman, Chief Risk & Compliance at NAVEX Global, a worldwide leader in integrated risk and compliance management software services. Carrie presents the most interesting findings for NAVEX Global's annual risk & compliance benchmark report as well as additional advice for compliance leaders.

As financial criminals get smarter, so does the technology. Sabrina Serafin interviews Valerie Bannert-Thurner, Head of Anti-Financial Crime Technology at NASDAQ to discuss the NASDAQ's annual compliance survey as well as their anti-financial crime efforts.

ESG or Environmental, Social and Governance is becoming a major part of the corporate vocabulary, but what does it mean? Sabrina Serafin interviews Laura Wanlass, Senior Client Partner and the Global Corporate Governance & ESG Advisory Practice Leader at AON. Laura defines ESG and explains why it is important to companies.

"Denial is never a good strategy." How do you understand and try to address risk across an organization? Sabrina Serafin interviews Kristi Atwater, SVP of Internal Audit of Everi Holdings, about Enterprise Risk Management including advice for starting up the ERM function.

As startups, entrepreneurs may find it difficult to set aside business development to focus on security.

In this episode, Sabrina Serafin interviews Christina Cacioppo, Founder and CEO of Vanta, a SaaS solution that recently raised $50 Million in Series A funding. With her experience in early-stage venture capital and technology startups, Christina discusses the importance of establishing a security and compliance mindset and how it can fuel business growth.