The podcast episode explores the evolution of GRC roles, the impact of automation on GRC tasks, and the strategic shift in GRC expectations. It also delves into the measurement of the value of GRC beyond passing audits. The conversation highlights the expanding nature of GRC roles and the significant impact of automation on GRC tasks.

Takeaways

• GRC roles are expanding
• Automation has significantly impacted GRC tasks

Chapters

• 00:00 Evolution of GRC Roles
• 05:31 Impact of Automation on GRC Tasks
• 21:31 Measuring the Value of GRC

In this episode, the CISO Setup podcast features a discussion on the evolving role of GRC teams, the impact of automation, and the changing expectations in the industry. The conversation highlights the shift from manual tasks to automation, the strategic focus of GRC teams, and the measurement of GRC value beyond passing audits.

Takeaways

• GRC roles are expanding and now involve advising leadership, understanding technology risk, and guiding business decisions.
• Automation has significantly reduced manual tasks, allowing GRC teams to focus on strategic activities and continuous improvement.

AI is no longer experimental—it’s embedded in enterprise systems, security operations, and everyday business tools. In this episode of The Seiso Side-Up Podcast, host Lauren Shaffer joins Seiso COO Eric Lansbery and co-host Heidi Patrick to discuss why AI security, AI governance, and risk management are now critical priorities. The conversation covers the evolution of AI adoption and the real risks organizations face, including model poisoning, data leakage, hallucinations, and unmanaged GenAI use. Eric shares practical guidance on applying NIST AI Risk Management Framework, ISO/IEC standards, ethical AI, and GRC best practices to build secure, compliant, and resilient AI programs. This episode delivers key 2026 AI governance takeaways for security leaders, GRC professionals, and executives looking to manage AI risk, meet regulatory expectations, and strengthen enterprise trust.

In this episode, Joe Wynn and Taylor Lee join Lauren to discuss How to Win Friends and Influence People and Crucial Conversations books. They discuss how to correctly communication phishing attacks, how to listen with empathy and how to lead by example. 

In this episode, we take you behind the scenes of how our team helped a client successfully achieve CMMC Level 2 certification. From assessing gaps and aligning controls to overcoming legacy system challenges and navigating the audit process, we break down each step of the journey. You’ll hear how collaboration, governance, and a clear security roadmap turned a complex compliance goal into a milestone achievement. Whether you’re preparing for your own certification or just curious about how CMMC impacts business resilience, this episode offers practical insights and lessons learned straight from the field.

On this episode, we have a special guest, Sourabh Moharil, Managing Director and Co-Founder of the Global Capability Center (GCC) company Agilite. Seiso CEO Joe Wynn joins our co-hosts, Lauren Shaffer and Eric Lansbery, to navigate the value behind establishing a GCC while integrating with a vGRC model to develop, maintain, and continuously improve compliance at that scale of business growth operations.

Listen in on this very special episode and learn more about how GCC and vGRC can help to simplify security while upscaling your company strategically - for start-ups and well-established businesses alike.

In this episode, we'll review the proposed updates to the HIPAA Security Rule and discuss the challenges that organizations encounter when becoming HIPAA compliant or maintaining HIPAA compliance through these changes.

We also dive into the complexities and differences between HIPAA compliance in the cloud, versus on-prem, and how compliance automation can be a game changer in keeping up with these changes.

#vGRC #HIPAA #cybersecurity #riskmanagement

Listen in as we discuss the Seiso vGRC model with CEO Joe Wynn and COO Eric Lansbery. We'll cover topics from various angles of the Governance, Risk, and Compliance needs of Seiso customers, tell some real-life stories about how the vGRC model can benefit your organization, and even have a friendly debate about the efficacy of what we all come to know as vCISO, in the modern information security services industry.

Listen in as our podcast host, Lauren Shaffer, our special guest Travis Buckinham, along with Seiso Co-Founder Jon Zeolla discuss the advancements in AI and the security concerns related to AI in healthcare, finance, and other industries. 

What is the industry doing to address these concerns?

What can the world expect from AI in healthcare now, and in the near future?

How helpful is AI when introduced into the supply-chain?

Referenced article: https://www.techspot.com/news/106289-medical-misinformation-ai-training-data-poses-significant-risks.html

During this episode, we're joined by Seiso engineers and consultants to discuss their individual paths to breaking into the cybersecurity industry and how they lay out their ongoing knowledge growth. We also discuss our recommendations for new and upcoming cybersecurity engineers in developing their skills. Finally, we round out the episode with a conversation on the ins and outs of being master of one or jack of all trades (or somewhere in between).