Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Discover why third-party relationships carry inherent risks and the importance of ongoing due diligence. Learn how companies often fall short by only conducting initial checks and the impact if a vendor suddenly goes out of business.​

Every vendor you trust and every employee you hire could be your next security crisis—explore the realities of third party risk and insider threats on this episode of Razorwire! Join us for a discussion on the multifaceted challenges of third party risk and how they can destabilise your organisation. From the growing complexities of cloud providers like AWS and Azure to detecting and dealing with insider threats, our conversation covers it all.

Despite the potential, Jack Jones argues that most GRC tools fail to understand risk and end up being repositories of irrelevant data. Hear why they don’t hit the mark and what needs to change.

Jack Jones points out that many CISOs know security but not risk. Learn why a lack of understanding of true risks versus security control issues leads to ineffective GRC implementations.

Jack Jones highlights the noise problem in GRC tools, where organizations mistakenly label control deficiencies as risks. Find out how this misclassification leads to wasted efforts and a junkyard of irrelevant data.

Learn how Jack Jones frames discussions with executives by focusing on loss event scenarios that matter to them. Discover how to report risks in terms of probability and impact using data from GRC tools.

In a perfect world, what should a GRC tool do? Jack Jones outlines how a GRC tool should help organisations manage the frequency and magnitude of loss events and how risk should be the core foundation of such tools.​

In this episode of Razorwire, we're joined by Jack Jones, creator of the FAIR risk model, to explore the complexities of Governance, Risk and Compliance (GRC) tools. We cut through the noise to deliver actionable insights on how to truly manage risk and improve the value and efficiency of your GRC solutions.

Jack Jones explains how GRC tools are often more focused on compliance than true risk management. Discover why most tools miss the mark when it comes to managing the frequency and impact of loss events.​

Lisa Ventura highlights the increasing cybersecurity threats, including attacks on nation states and the rise of deep fakes. She also critiques how AI is often used as a marketing buzzword rather than real technological advancement.​