Random but Memorable

Inside a cybersecurity audit: what companies really have to prove with Brad Thies from BARR Advisory

Random but Memorable

Show Notes

Is your business truly audit-ready, or are you just hoping for the best? 📋🔐

In this episode of Random but Memorable, we’re joined by Brad Thies, Founder and CEO of BARR Advisory, to unpack why compliance shouldn’t be something your team dreads once per year.

Brad explains how the conversation has shifted from “do you have a policy?” to “can you prove your controls are actually working?” We also dig into how AI is changing the compliance landscape. If your organization is adopting AI, this conversation will help you understand what evidence, controls, and access management you may need to prove you’re doing it safely.

Whether you’re working toward SOC 2, ISO, HIPAA, HITRUST, or just trying to build a stronger security program, this episode is packed with practical advice to help you move from checkbox compliance to controls that actually work.

More from Random but Memorable

Oct 1, 2026

Is shadow AI quietly creating risk inside your business? 🤖🔐 In this episode of Random but Memorable, you’ll learn what happens when employees adopt AI tools faster than teams can track them.

Sep 10, 2026

We all know AI models are getting better at finding software vulnerabilities. But can they fix them without creating new problems? In this episode, Wade sits down with Keith Hoodlet, 1Password’s Director of Security Research, to discuss new findings from Off-by-1 Labs.

Aug 20, 2026

We’re back for a brand-new season! 🎉 And we're kicking things off with an evolving security risk in the AI space: prompt injection attacks. 🤖⚠️

Aug 6, 2026

Always-on access might sound convenient, but it can quietly become a serious security risk. 🔐⚠️ In this bonus episode of Random but Memorable, we’re joined by Rom Carmel, VP of Product Management at 1Password, to introduce 1Password Privileged Access.

Jul 7, 2026

Fact or fiction? 🕵️‍♀️ In this bonus episode, Wade puts Sara and Jayden to the test with a series of cybersecurity myths, urban legends, and viral social media claims.

See all episodes →