What platform are you using for GRC?

Security Strategy & Roadmap Security Frameworks (NIST, CIS, CSF)

Drata5%

Vanta22%

Secureframe16%

KnowBe415%

Ostendio6%

AuditBoard4%

Something else -- I'll tell you in the comments6%

We’re not using a GRC platform22%

385 PARTICIPANTS

4.1k views3 Comments

Sort by:

Director of IT10 hours ago

Sprinto

Director of IT in Software2 years ago

Vanta

Director of Engineering2 years ago

SAP

Content you might like

Vulnerability patching is now a full-time job.

Strongly agree7%

Agree60%

Neutral22%

Disagree5%

Strongly disagree3%

Unsure (please comment)

View Results

Do you expect your cybersecurity program budget to increase or decrease in the next year?

Significantly increase8%

Moderately increase68%

Neither (no change)18%

Moderately decrease3%

Significantly decrease1%

Unsure

View Results

‘AI’ Business Model – With many components flowing into the AI domain (cost, data, E&C, people, value, strategy, duplication of everything, etc.), I’ve started to think about splitting out ‘AI’ from the operating model and putting it into a separate legal entity. This way, I could manage a) risk and compliance, b) cost, c) resource allocation, d) governance, e) IP, f) revenue generation, etc.

Of course, this isn’t new in general, but I’m especially interested in how this approach could help with the ongoing challenge of ensuring compliance with data privacy and regulations related to LLMs and data access/usage over time.

My question: Is anyone else thinking about this, or has anyone already done it? I know there are examples in the literature, but I wanted to float this here for general comments and discussion.

What models are in place for risk partners based in Line 2? What are the jobs to be done? How do they operate? What does the structure/operating rythms look like?

Read More Comments

How are you currently managing SIEM costs? Have you found effective ways to actually reduce storage costs for your SIEM?

Read More Comments