GRCISO: The Cyber GRC Podcast

Episode 3: Live from BlackHat: Cyber GRC Insights of a Fortune 500 CISO

In this episode, we’re joined by Tony Gonzalez, a former Fortune 500 #ciso and #cybergrc expert, to explore the intricacies of Cyber Governance, Risk, and Compliance (GRC) from a CISO's perspective. Tony shares his insights on the dynamic nature of policies and the necessity of frequent updates in response to evolving threats. We discuss the critical role of communication, with Tony providing tips on how CISOs can effectively tailor their messages to resonate with technical teams, managers, and senior leaders alike. Additionally, we take a holistic approach to security, starting from business goals and integrating them with strategic security practices to balance business agility and risk. Tune in to discover how to enhance your GRC program through expert insights, effective documentation, and a strategic mindset.

Episode 2: AI in GRC / Find out what you need to know about managing cyber risks, training for security, and preventing AI-driven threats.

This episode is packed with valuable insights on managing cyber risks, the necessity of robust rules and security training, and the challenges posed by emerging threats like AI-driven spearfishing. Discover how cutting-edge tools are enhancing email security and why breaches are an inevitable part of the cybersecurity landscape.

Episode 1: Cocktails and Controls / Monitoring security, adjusting to business risks, and reducing losses.

Join us as we explore Cyber GRC. We discuss the need for continuous security monitoring, adjusting to business risks, and reducing potential losses. We also cover the importance of a holistic view in cybersecurity to manage complex security stacks and meet demands for transparency. Additionally, we highlight the convergence of compliance with business functions, the importance of security budgets, and the role of boards and CEOs in supporting cybersecurity initiatives.