GRC & Me

GRC & Me

By LogicGateBusiness
Download on the App Store

GRC & Me episodes

  • Risk and Compliance In Finance | Terri Sands

    Top 3 Takeaways

    • It's tough to keep up without good technology
    • The transparency between parties is tough with financial institutions
    • A single point of failure can also be a single point of fraud
    • Show Highlights:

      [02:50] Challenges that the smaller financial institutions have in their risk management programs
      [07:13] The significant irony in financial institutions
      [09:01] What Terri brings to the table
      [10:50] Creating a culture of risk-awareness
      [12:24] Reactive planning versus strategy planning
      [14:25] The shift Terri has seen
      [15:32] The unfortunate indicator
      [16:45] Terri's opinion on banks reducing their operational costs
      [19:43] One of the areas of challenge of heavily-regulated organizations
      [21:37] What works and what doesn't for acquired financial institutions
      [25:03] More tips for acquiring financial institutions
      [26:49] Guilty by association
      [27:59] Rounding up with the most shocking fraud story

      Resources:

      Secura Risk Management Website
      Connect with Terri on LinkedIn
      Connect with Terri on Twitter
      Ozark Show

      32 min
    • Starting LogicGate | Matt Kunkel

      Top 3 Takeaways:

      • There's a big need in the marketplace for a technology that’s flexible and dynamic, yet easy to use from an end-business-user perspective.
      • “I took an educated bet that the market was right for a disruptive perspective.”
      • “Everyone is somewhere between ought-to-buy and needs-to-buy a GRC platform.”
      • Show Highlights:

        [01:08] How the committee got started.
        [2:53] Matt's handling of projects related to the Lehman Brothers’ fallout and the Madoff scandal
        [3:11] Starting a custom app dev group at Navigant Consulting
        [3:41] How he helped JPMorgan Chase’s mortgage bank get out of consent order with OCC
        [4:11] What is the Dodd-Frank Ruling?
        [4:54] The platform technology built for JPMorgan Chase to get compliant
        [7:43] Why Chase ultimately went to Navigant
        [9:25] The ‘lightbulb moment’ for Matt
        [10:38] The search for different solutions
        [11:50] Matt shares why he started LogicGate
        [12:21] How did Matt pull the trigger and decide to leave his comfortable position and take that huge risk?
        [14:18] The most interesting part of the platform
        [15:36] How Matt views LogicGate
        [16:31] Insight on how the company’s mascot (The GOAT) came to be
        [18:05] What’s next for LogicGate?

        Resources:

        LogicGate's Website
        Connect with Matt on LinkedIn
        Connect with Matt on Twitter
        Navigant Group
        Dodd-Frank Ruling
        GDPR
        California Consumer Privacy Act

        20 min
      • All Things Implementation | Szuyin Leow

        Top 3 Takeaways:

        • Focus on critical items first and make sure you have people and processes in place beforehand.
        • If technology is flexible, you can continue to scale and grow and change your processes over time.
        • Start simple, drive value in one place, and then build that over time.
        • Show Highlights

          [1:35] Szuyin’s consulting background and why she got certed

          [2:33] Finding out about LogicGate
          [03:34] The common challenges getting started
          [4:46] The number one thing Szuyin recommends
          [6:23] Keep it simple and less is more
          [7:58] What holds small and mid-sized companies in a status quo?
          [12:36] Preparing and ensuring a successful launch and avoiding losing the momentum post-implementation
          [15:14] The other big thing
          [16:45] Processes involving high-level metrics and what to look for
          [18:02] A brief tangent on fair risk methodology
          [20:04] What trends and solutions are making the biggest impact?
          [22:32] The key priority right now
          [23:00] Using risk to inform business-making decisions

          Resources:

          LogicGate

          Connect with Szuyin on LinkedIn
          Read up on Szuyin’s Work on Medium

          25 min
        • The Father of GRC | Michael Rasmussen

          Top 3 Takeaways

          • It’s important to first establish what your company is trying to accomplish with its GRC program.
          • Frameworks are like the human body; you've got multiple systems involved. All those come together to help form a GRC program.
          • In light of data breaches, consumers are picking up on privacy. They're demanding better practices with their personal data.
          • Show Highlights

            [01:09] How Michael got involved in GRC
            [02:35] What frustrates Michael
            [04:39] The GRC moves, changes, and challenges
            [06:32] Why organizations need strategy around GRC
            [09:17] Deciding what framework is the best fit
            [13:37] The trends Michael sees and what it indicates
            [14:56] Success metrics for GRC teams
            [17:17] Defining agile and what’s behind the emergence
            [20:09] The differentiating factors among GRC solutions
            [21:26] Massive data breaches; how they will shape the future of GRC
            [22:45] Michael answers a “loaded” question

            Connect with Michael on LinkedIn

            Connect with Michael on Twitter
            GRC 20/20
            GDPR
            California Consumer Privacy Act
            Ten Thousand Commandments
            The Competitive Enterprise Institute

            26 min
          • Key Benefits of Flexible Data Model | Matt Kunkel

            Top 3 Takeaways

            • A data model is the underlying architecture that underpins any GRC program.
            • We live in a world that is constantly moving, changing, and evolving. That’s why flexibility in business systems is key.
            • Flexibility means being able to put a program in place on day one, without a final vision of where it’s going—it can change and adapt to changing requirements along the way.
            • Show Highlights

              [01:07] Matt’s background
              [03:50] Why data models are important to an effective GRC program
              [05:10] The problems with a traditional data model
              [07:55] How a flexible data model is really different
              [09:25] Why choose a flexible data model
              [12:24] How data model flexibility is innovating how we do business
              [13:48] What innovation is developing from a flexible data model
              [15:42] Matt's advice
              [16:18] How Matt helped companies overcome obstacles

              Resources:

              • LogicGate's Website
              • Connect with Matt on LinkedIn
              • Connect with Matt on Twitter
              • 18 min
              • Welcome To GRC & Me

                Just like the billion-dollar GRC industry it covers, GRC & Me helps companies achieve their revenue goals while managing risk and compliance issues with integrity.

                This podcast is perfect for you if:

                • You’re in a role concerned with corporate governance, risk management, or compliance (GRC)
                • You want to protect your company and your brand
                • You simply love GRC like Kelley does!
                • Tune in every month to learn from GRC experts and thought leaders, catch up on industry-shaping news, and better understand the decisions that drive results in your company.

                  Connect with Kelley on LinkedIn!

                  3 min

                About GRC & Me

                From the publisher's feed

                When Governance, Risk, and Compliance (GRC) issues are in the headlines, it’s usually a bad thing. It’s only when a major data breach happens, or a company runs afoul of some regulation, that these…

                More shows like GRC & Me

                Cybersecurity Today by David Shipley

                Cybersecurity Today

                177 Listeners