Security & GRC Decoded

How today’s top organizations navigate the complex world of governance, risk, and compliance (GRC). Security & GRC Decoded brings you actionable strategies, expert insights, and real-world stories that help professionals elevate their security and compliance programs. Hosted by Raj Krishnamurthy. It’s for security professionals, compliance teams, and business leaders responsible security GRC and ensuring their organizations’ are safe, secure and adhere to regulatory mandates. Security & GRC Decoded brings you: Actionable strategies, expert insights, and real-world stories to elevate your Security GRC programs. Each episode explores frameworks, risk management strategies, and innovations shaping the future of GRC – from practitioners in the trenches. Subscribe now to unlock the tools and knowledge you need to succeed!

Security & GRC Decoded is a business podcast hosted by Unknown Host, with 0 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

Unknown Host hosts Security & GRC Decoded, a business show with 0 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #38

  The Evolution of Modern GRC ft. James Huang, Head of GRC @ Gong

  Aug 4, 202647 minS1

  In this episode of Security & GRC Decoded , Raj Krishnamurthy sits down with James Huang , Head of GRC at Gong , to explore how Governance, Risk, and Compliance has evolved from a traditional audit function into a strategic engineering discipline. Drawing on experience building GRC programs at Ernst & Young, Cisco, Salesforce, and Gong, James explains why modern GRC leaders must think beyond compliance checklists and focus instead on understanding risk, partnering with engineering, and building scalable security programs. The conversation covers common control frameworks, continuous controls monitoring, third-party risk, AI's impact on GRC, Mythos, automation, and why future GRC professionals need to become business translators rather than framework experts. Key Takeaways: Modern GRC should focus on understanding and reducing risk—not simply satisfying compliance frameworks. A Common Controls Framework only succeeds when engineering and business teams understand the risks behind each control. Continuous controls monitoring should improve security posture, not just make audits easier. AI is transforming GRC by increasing both operational efficiency and third-party risk complexity. Successful GRC leaders act as translators between business, engineering, security, and compliance teams. What You’ll Learn: Why compliance frameworks should always be interpreted through the lens of risk How to build scalable Common Control Frameworks across complex organizations What continuous controls monitoring should actually accomplish How AI is changing vendor risk management and security governance Why the future of GRC belongs to technically-minded business partners This podcast is brought to you by ComplianceCow — the smarter way to manage compliance. Automate evidence collection, eliminate screenshots, and scale your program with confidence. Learn more: https://www.compliancecow.com Watch more episodes: https://www.compliancecow.com/podcast Connect With Our Guests : James Huang | Head of GRC | Gong Connect on LinkedIn : https://www.linkedin.com/in/james-k-huang/ Rate, review, and share if you enjoyed the show! Subscribe to Security & GRC Decoded wherever you get your podcasts: Spotify: https://open.spotify.com/show/5pigcMwOrYIA6d9OOOsxqr?si=416b82ab5c474683 Apple Podcasts: https://podcasts.apple.com/us/podcast/security-grc-decoded/id1795144450

  ListenShow Notes
• 

  Episode #37

  The Trust Gap in AI: Why Agents Need a New Certification Model ft Rajiv Dattani & David Meyer @ AIUC

  Jun 25, 202638 minS1

  In this episode of Security & GRC Decoded, Raj Krishnamurthy sits down with Rajiv Dattani and David Meyer from Artificial Intelligence Underwriting Company (AIUC) to explore one of the biggest unanswered questions in AI security: Can organizations actually trust AI agents? As enterprises rapidly deploy AI-powered products, copilots, and autonomous agents, traditional security assessments, compliance frameworks, and cyber insurance models are struggling to keep pace. Rajiv and David explain why insurers are beginning to exclude AI-related risks, why historical loss data no longer works in the age of AI, and how AIUC-1 was designed to become a trust and assurance framework for AI systems. The conversation explores AI certification, AI insurance, agent security testing, reliability, safety, accountability, statistical risk modeling, and the growing challenge of securing increasingly autonomous systems. Key Takeaways: Traditional cyber insurance models are struggling to underwrite AI risk because historical loss data becomes obsolete as models rapidly evolve. AIUC-1 combines governance controls, technical evaluations, and large-scale simulation testing to assess AI agent security and trustworthiness. AI assurance requires more than security controls—it must also evaluate reliability, safety, accountability, privacy, and societal impact. Statistical testing and large-scale simulations may become the foundation for measuring AI risk in probabilistic systems. The AI security community will play a critical role in shaping standards, liability models, and best practices for future AI deployments. What You’ll Learn: Why many insurance carriers are beginning to exclude AI-generated risks from cyber policies How AIUC-1 differs from frameworks like NIST AI RMF, OWASP LLM Top 10, and MITRE ATLAS How AI agents are tested through both black-box and white-box security evaluations Why reliability and hallucination risks become more important in multi-agent environments How AI certification may influence future insurance pricing, risk management, and enterprise adoption This podcast is brought to you by ComplianceCow — the smarter way to manage compliance. Automate evidence collection, eliminate screenshots, and scale your program with confidence. Learn more: https://www.compliancecow.com Watch more episodes: https://www.compliancecow.com/podcast Connect With Our Guests: Rajiv Dattani | Cofounder | AIUC David Meyer | GTM | AIUC Connect on LinkedIn: https://www.linkedin.com/in/rajiv-dattani/ https://www.linkedin.com/in/david-meyer-8586b17b/ Rate, review, and share if you enjoyed the show! Subscribe to Security & GRC Decoded wherever you get your podcasts: Spotify: https://open.spotify.com/show/5pigcMwOrYIA6d9OOOsxqr?si=416b82ab5c474683 Apple Podcasts: https://podcasts.apple.com/us/podcast/security-grc-decoded/id1795144450

  ListenShow Notes
• 

  Episode #36

  Beyond Checkbox Compliance: Why GRC Must Become an Engineering Discipline ft Sheron Chakalakal, Head of GRC @ UiPath

  Jun 2, 202654 minS1

  <p>In this episode of Security & GRC Decoded, Raj Krishnamurthy sits down with Sheron Chakalakal, Head of GRC at UiPath, to explore why the future of GRC looks far more like systems engineering than traditional audit management.</p><p>Drawing from his experience at Salesforce, Deloitte, and UiPath, Sheron explains why point-in-time audits and checkbox compliance are failing modern engineering organizations — and why risk-driven, continuously monitored GRC programs are becoming essential. The conversation dives into AI governance, continuous risk monitoring, customer assurance, GRC engineering, AIUC-1, and how security, compliance, and engineering teams must evolve together.</p><p>This episode reframes GR...

  ListenShow Notes
• 

  Episode #35

  From Compliance Theater to GRC Infrastructure: Why AI Breaks Traditional GRC ft Jasmine Kaur, Principal of Security & Assurance Engineering @ CoreWeave

  May 5, 202654 minS1

  <p>In this episode of Security & GRC Decoded, Raj Krishnamurthy sits down with Jasmine Kaur, Principal of Security & Assurance Engineering at CoreWeave, to explore how AI-native infrastructure is fundamentally reshaping GRC.</p><p>Drawing from her experience at companies like SAP, Google, and now an AI hyperscaler, Jasmine explains why traditional GRC models are failing in high-velocity, ephemeral environments—and what needs to replace them. From “GRC as infrastructure” to the rise of agentic GRC, this conversation dives into how compliance must evolve from a reactive audit function into a real-time assurance capability embedded directly into systems.</p><p>Key Takeaw...

  ListenShow Notes
• 

  Episode #34

  The GRC Illusion: Why Third-Party Risk Is Still Broken ft Val Dobrushkin, Director of GRC @ Tricentis

  Apr 21, 202655 minS1

  <p>In this episode of <b>Security & GRC Decoded</b>, Raj Krishnamurthy sits down with Val Dobrushkin, Director of GRC at Tricentis, to challenge one of the most overlooked failures in modern security programs: third-party risk management. Drawing from his experience building GRC programs at ForgeRock, NoName Security, and beyond, Val explains why most organizations are still stuck in compliance theater and how GRC teams can evolve into true business enablers.</p><p>This conversation dives into the disconnect between frameworks and reality, the limits of SOC 2, the role of GRC in revenue and M&A outcomes, and why solving...

  ListenShow Notes

Recent guests on Security & GRC Decoded. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.