In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Renee Murphy, analyst, advisor, and master storyteller, to look back at the origins of the term “GRC” and trace how the technology space has evolved since its early days.

Together they reflect on their parallel paths as analysts shaping the field, sharing what has worked, what hasn’t, and what needs to change. The conversation explores the good, the bad, and the ugly of GRC technology and implementation, from ambitious vendor promises to the realities of deployment. They also discuss what the next generation of buyers (millennials and Gen Z) expect from GRC solutions, and what providers must do to earn their trust.

Part history lesson, part candid roadmap, this episode offers practical best practices, unfiltered insights, and a reminder that the GRC galaxy is still expanding and those who adapt will chart the course forward.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Workiva to explore what happens when GRC, ESG, and finance finally converge on a single platform. The conversation digs into what Workiva brings to the GRC landscape, where it’s best of breed, and why the interconnectedness of governance, risk, and compliance is critical to making ESG real rather than rhetorical.

We also look at the role of AI, including the rise of agentic AI, and what new capabilities may soon reshape how organizations manage reporting, controls, and disclosures. The discussion ranges from the practical (how interconnected workflows replace silos) to the forward-looking (how AI could transform assurance, accuracy, and speed).

This episode charts Workiva’s place in the galaxy as a platform tackling today’s compliance and reporting complexity, while pointing toward a future where GRC and ESG operate as one interconnected system.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen navigates with Corlytics through the ever-expanding cosmos of regulatory change. With 30 million pages of regulatory text published each year, Corlytics combines the precision of AI with the insight of top-tier subject matter experts and data scientists to make sense of the noise and turn regulation into risk intelligence.

The discussion dives into Corlytics’ most complex and fascinating use cases, exploring what sets them apart from the crowded constellation of regulatory change management providers. From efficiency and effectiveness to resilience and agility, the conversation highlights how these values shape Corlytics’ approach, and how their acquisition of Clausematch extends policy management deeper into the compliance orbit.

Looking ahead, Corlytics offers a glimpse into its trajectory two years into the future: a platform where AI, expert oversight, and integrated solutions continue to transform the way firms across financial services and life sciences stay ahead of change. Don’t panic: this is regulatory intelligence at warp speed.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen explores with Corporater why risk cannot exist in isolation from objectives and performance, despite how many organizations and technology providers treat it. Drawing on ISO 31000’s definition of risk as “the effect of uncertainty on objectives,” the conversation dives into why so many platforms reduce objectives to a simple mapping field, missing the point that performance management must sit at the center of GRC.

Corporater demonstrates how its platform takes a truly integrated approach, with dedicated modules to manage strategy, performance, and objectives alongside risk and compliance. The discussion also ventures into the depths of digital twins, what it really means to create a forward-looking reflection of the organization, and how twins can be used for scenario analysis, “what ifs,” and simulations that go beyond checkbox GRC.

From connecting risk to performance to building a digital twin of your enterprise, this episode charts a course through the universe of GPRC where objectives take their rightful place at the center of gravity.

Strap in, interstellar travelers, our first stop in the GRC Technology Galaxy is with CoreStream, a platform that proves configurability doesn’t have to feel like Vogon poetry. Michael Rasmussen chats with the CoreStream crew about how they’ve built a system that adapts to you, delivering value faster than a hyperspace jump.

From rapid implementations that go live in weeks, to deployments both in the cloud and on-premise (making it fit even for critical infrastructure planets), CoreStream shows how portability, scalability, and flexibility can turn improbable business realities into manageable ones.

With real-world use cases as our star maps, we explore how CoreStream defines value, not just in compliance checkboxes, but in creating efficiency, resilience, and trust. Consider this your towel for navigating GRC without limits.