The Risk Is Our Business Podcast explores the principles of Governance,
Risk, and Compliance—to reliably achieving objectives, navigating uncertainty, and acting with integrity. Here, we follow the Prime Directive of Risk Management: No decision or strategy moves forward without understanding its impact on our goals, our resilience, and our values. Because risk isn’t the enemy, it’s the mission. After all, risk is our business.
All content for Risk is Our Business is the property of Michael Rasmussen and is served directly from their servers
with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.
The Risk Is Our Business Podcast explores the principles of Governance,
Risk, and Compliance—to reliably achieving objectives, navigating uncertainty, and acting with integrity. Here, we follow the Prime Directive of Risk Management: No decision or strategy moves forward without understanding its impact on our goals, our resilience, and our values. Because risk isn’t the enemy, it’s the mission. After all, risk is our business.
Warp Cores and GRC Engineering: Designing the Future with Ayoub Fandi
Risk is Our Business
19 minutes
2 months ago
Warp Cores and GRC Engineering: Designing the Future with Ayoub Fandi
In this transmission of Risk Is Our Business, Captain Michael Rasmussen connects across the comms with Ayoub Fandi, Security Assurance Automation Team Lead at GitLab and founder of the GRC Engineer Podcast and Newsletter, for a deep dive into what might be the next frontier of governance, risk, and compliance: GRC engineering.
Ayoub explains what GRC engineering is, what it does, and the value it provides, moving GRC away from after-the-fact verification and closer to the design phase, where software engineering problem-solving can be applied to solve long-standing compliance and assurance challenges. Together, they map out the core elements of GRC engineering, explore where it should be applied, and ask whether its cyber-heavy focus today limits its potential, or whether it’s destined for broader adoption across the enterprise galaxy.
The conversation also scans the role of agentic AI in this evolving discipline, from automating repetitive assurance checks to embedding risk intelligence directly into systems that power organizational strategy. Along the way, they highlight how GRC engineering can transform perception, from compliance burden to strategic enabler, much like replacing impulse drives with warp cores.
GRC engineering is a structural shift. For GRC leaders, engineers, and innovators, this is a star chart to the future of assurance and resilience.
Risk is Our Business
The Risk Is Our Business Podcast explores the principles of Governance,
Risk, and Compliance—to reliably achieving objectives, navigating uncertainty, and acting with integrity. Here, we follow the Prime Directive of Risk Management: No decision or strategy moves forward without understanding its impact on our goals, our resilience, and our values. Because risk isn’t the enemy, it’s the mission. After all, risk is our business.
