GRC Uncensored

The Pentagon just slammed the brakes on CMMC Phase II

Phase II was supposed to begin November 10, 2026 and would have required many contractors handling CUI to obtain third-party CMMC assessments before contract award. Inste

AMA: GRC, SOC 2, and the State of Audits

It’s the last day of 2025, which means it’s time to wrap season one. When Troy and I piloted this series, we didn’t expect thousands of you to tune in, and certainly didn

Do Ethical GRC auditors really exist?

In this episode, the crew digs into a messy but necessary topic: what does ethical auditing even mean in a market overrun with automation shortcuts, low-effort SOC 2 audi

SOC 2, Vibes, and the Audit Arms Race

This episode dives deep into the messy, absurd, and sometimes hilarious world of SOC 2 audits and compliance frameworks. Wiz CISO Expert Zlatko Unger joins the crew to ta

Clean Reports, Flawed Systems, and the Future of GRC

TJ, Kendra, and Elliot are back, and welcomed Evan Millman, GRC Manager at Abnormal Security, for what started as a casual chat and evolved into a sharp look at complianc

AI Guardrails, Foot Guns, and the Ostrich Problem

This week on GRC Uncensored, hosts Troy Fine and Elliot Volkman sat down with Merritt Baer, Chief Security Officer at Enkrypt AI, for a candid conversation about the coll

The Softer (and Sometimes Spicier) Side of GRC

In the latest episode of GRC Uncensored, hosts Kendra Cooley and Troy Fine sat down with Jake Bernardes, CISO of Anecdotes and host of Risking It All, to talk about the p

The TPRM Tug-of-War: Trust, Tools, and the AI Tradeoff

This week, the crew sits down with Henry Stanley—founder of Fabrik and engineer-turned-GRC troublemaker-to dig into the messy reality of third-party risk management (TPRM

Will FedRAMP 20x Repeat SOC 2’s Mistakes?

This week on GRC Uncensored, the crew welcomes John Santore, a longtime FedRAMP and SOC 2 practitioner who has seen firsthand how compliance frameworks evolve, and someti

Why the "Why" Matters in GRC

In this episode of GRC Uncensored, Richa, founder and CEO of Complyance, joins the hosts to unpack the growing tension between scalable compliance tooling and the real ne

From Engineering to GRC: A first-hand account of the GRC talent gap

As organizations contend with growing threats and shrinking GRC teams, this episode explores the widening talent gap in governance, risk, and compliance. Guest Shruti Muk

What It Really Takes to Get Hired in GRC

Guest: Pete Strouse, Cybersecurity Talent Advisor & Host of The Talent Gap Fireside Chat This episode explores how governance, risk, and compliance (GRC) roles are fille

The Unfiltered Truth About CPAs and Audits

This episode of GRC Uncensored goes full behind-the-scenes as Troy Fine, Kendra Cooley, and producer Elliot Volkman sit down for an unscripted discussion. From the challe

Going Beyond Compliance: The Intersection of Security and Risk Management

In this episode of GRC Uncensored, hosts Troy Fine and Kendra Cooley, along with producer Elliot Volkman chat with Rob Wood, founder and CEO of Sidekick Security, to expl

Oversight Over Auditors and Peer Reviews

In this episode of GRC Uncensored, hosts Troy Fine and Elliot Volkman invite Jeff Cook, a compliance expert with over 20 years of experience, to discuss the intricacies o

Third-Party Risk Management: When to Accept or Reject Vendor Documentation

On a recent episode of GRC Uncensored, host Troy Fine and producer Elliot Volkman were joined by guest Stanley Krochik, a now seasoned GRC professional and former city se

AI Governance: Insights on ISO 42001 from GRC Two Experts

The latest episode of GRC Uncensored dove deep into the magical world of AI governance, specifically on ISO 42001. This week, our guests are Chris Honda, Whistic’s Manage

The Good, The Bad, and The Underrated of Compliance Audits

In this episode of GRC Uncensored, hosts Troy Fine, Kendra Cooley, and producer Elliot Volkman dive into an unfiltered discussion with Joseph Kirkpatrick, founder and pre

Drata Talks Navigating Audit Integrity and Independence

In this episode, host Troy Fine and producer Elliot Volkman welcome guest Kevin Kriebel, VP of Business Development at Drata. The conversation focuses on the challenges a

Episode Zero: Behind the Concept of GRC Uncensored

In the pilot episode of GRC Uncensored, hosts Troy Fine and Elliot Volkman introduce the podcast aimed at having unfiltered discussions about Governance, Risk, and Compli