In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Jason Sechrist of AuditBoard to explore how the company has transformed from an audit tool into one of the most intelligent platforms in the GRC cosmos. They discuss what makes AuditBoard distinctly improbable—a platform that’s as beautiful as it is powerful, blending a clean, intuitive UX with the analytical depth needed to quantify, automate, and orchestrate assurance at scale. Jason dives into how AuditBoard unites Monte Carlo and bow-tie analysis for next-generation risk quantification, delivers a no-code environment built for flexibility, and uses AI not as a shortcut but as an amplifier, powering smarter assurance and accelerating insight across the enterprise. The conversation also explores who AuditBoard is built for, where it’s growing next, and how its people and culture fuel the platform’s evolution. Three years from now, AuditBoard envisions a connected GRC universe where usability, intelligence, and human ingenuity work together, proving that even in an improbable galaxy, assurance can be both art and science.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen connects with the Riskonnect CEO, Jim Wetekamp, to explore how the company is helping organizations see through the code of risk, from insurable exposures and geopolitical volatility to AI-driven analysis and quantified decision-making. The discussion dives into what Riskonnect delivers across the GRC universe today, what it’s building for tomorrow, and how agentic AI is accelerating the maturity of the entire field. From risk quantification and scenario analysis to integrated insights across enterprise, compliance, and continuity, Riskonnect’s approach helps organizations understand not just individual risks, but how they interconnect and evolve in real time. The team also shares a glimpse into Konnect 2025, Riskonnect’s annual conference, and its Matrix-inspired theme: learning to see beyond the surface and decode what’s really happening in the world of risk. In an era defined by complexity and uncertainty, this episode shows why clarity may be the most improbable superpower of all.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Alex Hollis of SureCloud to discuss how the company is rewriting the rules of digital risk and resilience. SureCloud’s event-sourced architecture captures everything that ever happens in the system (every change, every control, every decision) allowing organizations to recreate their compliance universe at any point in time. The conversation explores what SureCloud does best, what problems it solves most effectively, and where it fits across enterprise risk, IT, compliance, and legal functions. Alex shares how this architecture enables true evidence-based compliance, what’s next for the platform, and how SureCloud is leveraging AI to enhance intelligence and automation without losing the human partnership that defines its culture. As most GRC platforms orbit predictably around static frameworks, SureCloud’s event-driven approach represents something rarer—a living, evolving system built for resilience, context, and confidence in an improbable universe.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Comply to explore what sets the firm apart in the sprawling universe of financial services compliance. Serving clients across the US, UK, and more than 60 countries, Comply supports firms of every size, from global institutions to boutique shops, with solutions tailored to private funds, broker-dealers, investment banks, and wealth managers. The conversation dives into Comply’s strengths, including policy management, culture, and a model built on partnership rather than just software. We also chart how Comply is embracing AI, not as a buzzword but as a practical tool to enhance compliance efficiency and effectiveness. Looking ahead three years, the discussion explores where Comply sees its product, solutions, and organization evolving and how it plans to keep its clients future-proofed in an industry where change is the only constant. From differentiation and culture to AI and long-range vision, this episode shows why Comply aims to be more than just another tool in the kit, but a partner in navigating the improbable galaxy of regulatory compliance.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Steve Scharlman of Archer to chart the platform’s evolution from its early days to its role today as a cornerstone of enterprise risk and compliance. Once a household name for CISOs, Archer has become just as essential for chief risk officers, ethics leaders, and compliance officers navigating an ever more complex universe. The conversation explores how Archer has grown and changed over the years, what sets it apart in the crowded GRC cosmos, and the innovations that should have organizations most excited about its future. At the heart of it all is risk quantification, the shift from gut feelings to data-driven insights that inform smarter, faster decisions. From its pioneering roots to its renewed leadership in the GRC galaxy, this episode maps Archer’s improbable journey and the new frontiers it is set to explore.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Renee Murphy, analyst, advisor, and master storyteller, to look back at the origins of the term “GRC” and trace how the technology space has evolved since its early days. Together they reflect on their parallel paths as analysts shaping the field, sharing what has worked, what hasn’t, and what needs to change. The conversation explores the good, the bad, and the ugly of GRC technology and implementation, from ambitious vendor promises to the realities of deployment. They also discuss what the next generation of buyers (millennials and Gen Z) expect from GRC solutions, and what providers must do to earn their trust. Part history lesson, part candid roadmap, this episode offers practical best practices, unfiltered insights, and a reminder that the GRC galaxy is still expanding and those who adapt will chart the course forward.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Workiva to explore what happens when GRC, ESG, and finance finally converge on a single platform. The conversation digs into what Workiva brings to the GRC landscape, where it’s best of breed, and why the interconnectedness of governance, risk, and compliance is critical to making ESG real rather than rhetorical. We also look at the role of AI, including the rise of agentic AI, and what new capabilities may soon reshape how organizations manage reporting, controls, and disclosures. The discussion ranges from the practical (how interconnected workflows replace silos) to the forward-looking (how AI could transform assurance, accuracy, and speed). This episode charts Workiva’s place in the galaxy as a platform tackling today’s compliance and reporting complexity, while pointing toward a future where GRC and ESG operate as one interconnected system.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen navigates with Corlytics through the ever-expanding cosmos of regulatory change. With 30 million pages of regulatory text published each year, Corlytics combines the precision of AI with the insight of top-tier subject matter experts and data scientists to make sense of the noise and turn regulation into risk intelligence. The discussion dives into Corlytics’ most complex and fascinating use cases, exploring what sets them apart from the crowded constellation of regulatory change management providers. From efficiency and effectiveness to resilience and agility, the conversation highlights how these values shape Corlytics’ approach, and how their acquisition of Clausematch extends policy management deeper into the compliance orbit. Looking ahead, Corlytics offers a glimpse into its trajectory two years into the future: a platform where AI, expert oversight, and integrated solutions continue to transform the way firms across financial services and life sciences stay ahead of change. Don’t panic: this is regulatory intelligence at warp speed.

In this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen explores with Corporater why risk cannot exist in isolation from objectives and performance, despite how many organizations and technology providers treat it. Drawing on ISO 31000’s definition of risk as “the effect of uncertainty on objectives,” the conversation dives into why so many platforms reduce objectives to a simple mapping field, missing the point that performance management must sit at the center of GRC. Corporater demonstrates how its platform takes a truly integrated approach, with dedicated modules to manage strategy, performance, and objectives alongside risk and compliance. The discussion also ventures into the depths of digital twins, what it really means to create a forward-looking reflection of the organization, and how twins can be used for scenario analysis, “what ifs,” and simulations that go beyond checkbox GRC. From connecting risk to performance to building a digital twin of your enterprise, this episode charts a course through the universe of GPRC where objectives take their rightful place at the center of gravity.

Strap in, interstellar travelers, our first stop in the GRC Technology Galaxy is with CoreStream, a platform that proves configurability doesn’t have to feel like Vogon poetry. Michael Rasmussen chats with the CoreStream crew about how they’ve built a system that adapts to you, delivering value faster than a hyperspace jump. From rapid implementations that go live in weeks, to deployments both in the cloud and on-premise (making it fit even for critical infrastructure planets), CoreStream shows how portability, scalability, and flexibility can turn improbable business realities into manageable ones. With real-world use cases as our star maps, we explore how CoreStream defines value, not just in compliance checkboxes, but in creating efficiency, resilience, and trust. Consider this your towel for navigating GRC without limits.