Show Notes
HR systems for many enterprises is the identity store of record (ISoR). This is where identities are created, roles are assigned, and privileges are entitled. But these HR systems (HRS) are NOT enforcement points – they are the container of entitlements. The enforcement of these entitlements usually falls to identity and access management (IAM) systems. Hence comes the identity variance between: What roles/entitlements are created/documented in the HR system?What roles/ent...
More from #AuditTuesday GRC Podcast
Worried About Rogue AI? Start with Identity Governance Enterprises are increasingly worried about rogue AI agents operating inside their environments. But one of the biggest risks may not be an unauthorized AI agent breaking in. It may be an authorized AI agent using the legitimate identity and access of an employee who is already inside. AI coding assistants and autonomous agents such as Claude Code and similar tools can operate directly from an employee's workstation. Depending on how they'...
Everybody is talking about governing AI agents. But before you can govern agents, you have to find the non-human identities already hiding in your environment. Join Dave Ackley and Andrew Berkuta of the Goliath Cyber Security Group, for a practical discussion on the growing Shadow NHI problem. Service accounts, workload identities, automation accounts, applications, and AI agents are accessing enterprise systems and data—often without the same visibility and governance applied to human users....
What separates a world-class Governance, Risk, and Compliance (GRC) program from one that simply checks compliance boxes? Join Jennifer Felix-Shannon, Director of IT Security GRC & Privacy, as she shares practical lessons learned from more than two decades leading enterprise GRC, cybersecurity governance, privacy, and audit programs. We'll explore what it takes to build and mature a successful GRC organization, align security with business objectives, work effectively with auditors and ...
The CFO's Role in Cybersecurity & Compliance Cybersecurity and compliance are no longer just IT responsibilities—they're business priorities that increasingly land on the CFO's desk. From financial audits and regulatory compliance to cybersecurity investments, board reporting, AI governance, and mergers & acquisitions, today's finance leaders play a critical role in managing organizational risk. Join Steve Shaw, Founder of Shaw Financial Growth and experienced Fractional CFO, to...
Join #AuditTuesday hosts and experts from EdgeRealm.ai and YouAttest for an executive-level discussion on how modern infrastructure teams are rethinking data center security from the ground up. What’s on the Agenda? Identity-First Infrastructure Security: Learn why Identity Governance is becoming a core design requirement for modern data centers, hybrid cloud environments, and AI-driven infrastructure. Zero Trust by Design: Discover how Zero Trust principles help reduce risk, limi...