Show Notes
The U.S. Department of Defense (DoD) on October 15th, 2024 published its long-anticipating first part of the final rule (32 CFR) for the Cybersecurity Maturity Model Certification (CMMC) program. The program will require third-party verification for contractors working with controlled unclassified information (CUI) confirming that contractors are meeting existing DoD cybersecurity standards and a self-assessment by contractors that have Federal Contract Information (FCI) showing that t...
More from #AuditTuesday GRC Podcast
Worried About Rogue AI? Start with Identity Governance Enterprises are increasingly worried about rogue AI agents operating inside their environments. But one of the biggest risks may not be an unauthorized AI agent breaking in. It may be an authorized AI agent using the legitimate identity and access of an employee who is already inside. AI coding assistants and autonomous agents such as Claude Code and similar tools can operate directly from an employee's workstation. Depending on how they'...
Everybody is talking about governing AI agents. But before you can govern agents, you have to find the non-human identities already hiding in your environment. Join Dave Ackley and Andrew Berkuta of the Goliath Cyber Security Group, for a practical discussion on the growing Shadow NHI problem. Service accounts, workload identities, automation accounts, applications, and AI agents are accessing enterprise systems and data—often without the same visibility and governance applied to human users....
What separates a world-class Governance, Risk, and Compliance (GRC) program from one that simply checks compliance boxes? Join Jennifer Felix-Shannon, Director of IT Security GRC & Privacy, as she shares practical lessons learned from more than two decades leading enterprise GRC, cybersecurity governance, privacy, and audit programs. We'll explore what it takes to build and mature a successful GRC organization, align security with business objectives, work effectively with auditors and ...
The CFO's Role in Cybersecurity & Compliance Cybersecurity and compliance are no longer just IT responsibilities—they're business priorities that increasingly land on the CFO's desk. From financial audits and regulatory compliance to cybersecurity investments, board reporting, AI governance, and mergers & acquisitions, today's finance leaders play a critical role in managing organizational risk. Join Steve Shaw, Founder of Shaw Financial Growth and experienced Fractional CFO, to...
Join #AuditTuesday hosts and experts from EdgeRealm.ai and YouAttest for an executive-level discussion on how modern infrastructure teams are rethinking data center security from the ground up. What’s on the Agenda? Identity-First Infrastructure Security: Learn why Identity Governance is becoming a core design requirement for modern data centers, hybrid cloud environments, and AI-driven infrastructure. Zero Trust by Design: Discover how Zero Trust principles help reduce risk, limi...