x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

GRC Uncensored

GRC Uncensored is an experimental podcast designed to elevate real conversations with GRC professionals, auditors, regulators, and those building programs around it. Your hosts are Troy Fine and Elliot Volkman. Hosted on Acast. See acast.com/privacy for more information.

news tech news

All Episodes

44:17

Do Ethical GRC auditors really exist?

GRC Uncensored ·

2025/11/20

In this episode, the crew digs into a messy but necessary topic: what does ethical auditing even mean in a market overrun with automation shortcuts, low-effort SOC 2 audits, and firms that self-declare “quality” without proving it?With Troy actively auditing today and Kendra working with auditors in real time, the team breaks down where rigor actually shows up, where the system is broken, and why SOC 2’s value is slipping as fast as demand for speed is rising.03:00 – “Quality theater” and firms

en

46:59

SOC 2, Vibes, and the Audit Arms Race

GRC Uncensored ·

2025/10/22

This episode dives deep into the messy, absurd, and sometimes hilarious world of SOC 2 audits and compliance frameworks. Wiz CISO Expert Zlatko Unger joins the crew to talk about the expanding “acronym soup” of frameworks, the blurred lines between automation and assurance, and why finding an auditor who vibes with your team might matter more than the name on the certificate.The crew also debates the future of SOC 2 — from fast-track “15-hour audits” to the rise of AI-generated reports — and whether

en

46:29

Clean Reports, Flawed Systems, and the Future of GRC

GRC Uncensored ·

2025/10/09

TJ, Kendra, and Elliot are back, and welcomed Evan Millman, GRC Manager at Abnormal Security, for what started as a casual chat and evolved into a sharp look at compliance blind spots, the role of AI in GRC, and how professionals can shape their careers in a changing field.[00:02:00] Evan shares how he used ChatGPT to analyze a risk assessment report.[00:05:00] What GRC leadership looks like at Abnormal Security (ISO 27001, 27701, 42001, SOC 2).[00:07:00] The complicated relationship between

en

43:19

AI Guardrails, Foot Guns, and the Ostrich Problem

GRC Uncensored ·

2025/09/25

This week on GRC Uncensored, hosts Troy Fine and Elliot Volkman sat down with Merritt Baer, Chief Security Officer at Enkrypt AI, for a candid conversation about the collision between AI, governance, and security. Merritt brought decades of CISO experience — from AWS to the intelligence community — and didn’t hold back, fully embracing our podcast name, on what’s hype, what’s real, and what CISOs should be doing today.Key Moments[00:03:00] – How Merritt uses ChatGPT to re-voice her own drafts — and

en

48:36

The Softer (and Sometimes Spicier) Side of GRC

GRC Uncensored ·

2025/08/28

In the latest episode of GRC Uncensored, hosts Kendra Cooley and Troy Fine sat down with Jake Bernardes, CISO of Anecdotes and host of Risking It All, to talk about the positive side of GRC. What unfolded was less about sugar-coating and more about the tensions shaping our industry from AI disruption to the shaky future of SOC 2 reports. More specifically, is there a world where we see a consolidation of regulations and frameworks in response to the sprawl we see now?[00:02:00] AI and Auditing –

en

50:22

Burn the PDFs: Shipping Security Without Slowing Teams

GRC Uncensored ·

2025/07/31

Engineer-turned-GRC-builder Henry Stanley (Founder and CPO of Fabrik) joins the pod to talk about building security programs developers actually want to use. From the death of PDF policies to developer-first controls, Henry shares lessons from his time in fintech, crypto, and consulting, and why startups are better at spotting compliance theater than most enterprises. Plus, the crew goes off script (again) to debate whether AI will help or harm modern GRC.[00:04:00] – Why traditional policy

en

58:27

Will FedRAMP 20x Repeat SOC 2’s Mistakes?

GRC Uncensored ·

2025/07/17

This week on GRC Uncensored, the crew welcomes John Santore, a longtime FedRAMP and SOC 2 practitioner who has seen firsthand how compliance frameworks evolve, and sometimes unravel. Now serving as Director of Cyber Acceleration at Constellation GovCloud, John joins Troy and Elliot to unpack FedRAMP 20x, a new pilot program designed to streamline the U.S. government’s cloud authorization process dramatically.The promise? Fewer controls, faster approvals, and greater automation.The concern? That all

en

48:43

Why the "Why" Matters in GRC

GRC Uncensored ·

2025/07/01

In this episode of GRC Uncensored, Richa, founder and CEO of Complyance, joins the hosts to unpack the growing tension between scalable compliance tooling and the real needs of maturing GRC teams. The conversation examines why SOC 2 in a box solutions fall short for mid-market organizations and what it truly means to integrate AI without compromising privacy. Along the way, the group debates the future of entry-level roles, the role of trust in automation, and whether AI is truly replacing, or

en

55:00

From Engineering to GRC: A first-hand account of the...

GRC Uncensored ·

2025/06/19

As organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Mukherjee, a former software engineer turned GRC practitioner, shares her journey, her insights on the evolving nature of the field, and her call to action for both professionals and organizations to rethink what GRC careers can look like.Guests: Shruti (GRC Professional)Hosts: Troy Fine, Kendra CooleyProducer: Elliot VolkmanRuntime:

en

44:53

What It Really Takes to Get Hired in GRC

GRC Uncensored ·

2025/06/05

Guest: Pete Strouse, Cybersecurity Talent Advisor & Host of The Talent Gap Fireside ChatThis episode explores how governance, risk, and compliance (GRC) roles are filled, and why it's getting harder to land one. Pete Strouse unpacks the current job market, share recruiter insights, and offer advice to job seekers and hiring managers navigating a GRC landscape shaped by automation, offshoring, and unrealistic expectations.[02:30] – GRC Careers Usually Start in Consulting[09:45] – Are Candidates

en

40:08

The Unfiltered Truth About CPAs and Audits

GRC Uncensored ·

2025/05/20

This episode of GRC Uncensored goes full behind-the-scenes as Troy Fine, Kendra Cooley, and producer Elliot Volkman sit down for an unscripted discussion. From the challenges CPAs face in the security world to the ethics of auditing, the team explores what happens when trust, risk, and reputation collide. Plus, a big reveal: Troy is starting his own CPA firm—Fine Assurance.[00:10:00] The CPA Debate Troy breaks down the CPA backlash in cybersecurity, explaining why the criticism isn’t always fair—and

en

57:09

Going Beyond Compliance: The Intersection of Security...

GRC Uncensored ·

2025/04/24

In this episode of GRC Uncensored, hosts Troy Fine and Kendra Cooley, along with producer Elliot Volkman chat with Rob Wood, founder and CEO of Sidekick Security, to explore the relationship between compliance and security. They dig into topics such as the limitations of compliance as a security measure, the role of compliance tools and platforms, and the importance of effective communication and leadership in fostering robust security programs. Various perspectives on compliance as a foundational

en

34:16

Oversight Over Auditors and Peer Reviews

GRC Uncensored ·

2025/04/10

In this episode of GRC Uncensored, hosts Troy Fine and Elliot Volkman invite Jeff Cook, a compliance expert with over 20 years of experience, to discuss the intricacies of auditor oversight and peer reviews. Jeff shares insights into the complexities of the peer review process, including the role of State Boards of Accountancy, AICPA, and the challenges of maintaining quality in SOC reports. The conversation also addresses potential improvements in the peer review system, market education, and the

en

53:43

Third-Party Risk Management: When to Accept or Reject...

GRC Uncensored ·

2025/03/27

On a recent episode of GRC Uncensored, host Troy Fine and producer Elliot Volkman were joined by guest Stanley Krochik, a now seasoned GRC professional and former city security program manager, to discuss the realities of third-party risk Management (TPRM). The conversation focused on the growing issue of low-quality audits, the challenge of assessing vendor security postures, and the dilemma risk managers face when reviewing third-party documentation.04:43 The Importance of Third Party Risk

en

52:56

AI Governance: Insights on ISO 42001 from GRC Two...

GRC Uncensored ·

2025/03/13

The latest episode of GRC Uncensored dove deep into the magical world of AI governance, specifically on ISO 42001. This week, our guests are Chris Honda, Whistic’s Manager of Security, Risk, and Compliance; and Jonathan LeBaron, MasterControl Senior GRC Engineer with the golden voice. Our due shared their firsthand experiences navigating compliance, business adoption, and the broader implications of AI risk management.Key TakeawaysISO 42001 is becoming essential for companies adopting AI, not just

en

1:05:54

The Good, The Bad, and The Underrated of Compliance...

GRC Uncensored ·

2025/02/27

In this episode of GRC Uncensored, hosts Troy Fine, Kendra Cooley, and producer Elliot Volkman dive into an unfiltered discussion with Joseph Kirkpatrick, founder and president of KirkpatrickPrice. The focus is on the implications of private equity and compliance automation tools in GRC. Joseph shares his insights on how the influx of private equity funding and the rise of 'SOC in a box' platforms have transformed the GRC landscape, often negatively impacting audit quality and independence. Key

en

45:13

Drata Talks Navigating Audit Integrity and Independence

GRC Uncensored ·

2024/12/12

In this episode, host Troy Fine and producer Elliot Volkman welcome guest Kevin Kriebel, VP of Business Development at Drata. The conversation focuses on the challenges and intricacies of maintaining auditor independence and integrity in the compliance automation landscape. Key topics include the impact of bundling and price fixing on audit quality, the need for improved TPRM functionality, and the role of enterprises in ensuring higher standards. The discussion also addresses the importance of

en

23:17

Episode Zero: Behind the Concept of GRC Uncensored

GRC Uncensored ·

2024/11/26

In the pilot episode of GRC Uncensored, hosts Troy Fine and Elliot Volkman introduce the podcast aimed at having unfiltered discussions about Governance, Risk, and Compliance (GRC). This episode was recorded before any interviews and offers some retrospectives of what became reality or not. They detail their professional backgrounds, especially highlighting Troy's unexpected journey into auditing and meme culture on LinkedIn. The hosts share the focus of future episodes (which have already been

en

49:18

Unpacking audit quality (or lack thereof)

GRC Uncensored ·

2024/11/14

In this episode of GRC Uncensored, hosts Troy Fine and Kendra Cooley, along with producer Elliot Volkman, continue their pursuit of trying to understand what is explicitly holding the GRC world back. Joined by ISO expert David Foreman, the discussion tackles the roles of auditors, tech vendors, and market forces in shaping audit quality. They explore the significance of audit integrity, the staying power of governance programs, and the varying expectations of companies undergoing audits. Amidst an

en

42:42

Should you invest in a GRC tool for compliance?

GRC Uncensored ·

2024/10/24

GRC Uncensored is back, and your hosts Troy Fine and Elliot Volkman are joined by Martin Cozzi, CEO of Pima, to discuss when, if at all, it makes sense to invest in a GRC tool to support a company's compliance efforts. The discussion spans the necessity and use of various compliance tools, the challenges of scaling compliance, and the importance of having well-defined processes and dedicated personnel. They highlight the actual costs and benefits of compliance, questioning superficial practices and

en

22 results

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS News

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci