YouAttest
95 episodes listed below
GRC risk, translated into operational reality.
#AuditTuesday GRC Podcast treats governance, risk, compliance, and identity security as operational work, not abstract policy language. Episodes move through hiring realities, access reviews, DORA preparation, AI governance, and Microsoft file exposure with guests.
PRESS PLAY
#AuditTuesday GRC Podcast is a practical GRC and identity-security show centered on risk as it appears in daily operations. It is less interested in polished theory than in the work of proving, reviewing, hiring, and correcting. Recent conversations move across GRC careers, identity risk assessments, DORA audits, AI governance, and Microsoft file sharing. The throughline is access. Who has it, who should have it, how evidence is produced, and what happens when policy outruns the tools available to enforce it. Episodes often begin with a timely board-level or audit-level concern, then bring it down to the level of stale accounts, admin reviews, external file links, segregation of duties, and hiring-manager expectations. The show is brisk, technical, and usually interview-driven. It gives guests room to explain their background, but keeps returning to the operational question. What does the company need to know, document, monitor, or fix? The GRC recruiting episode with Pete Strauss looks past certification lists and toward experience, communication skills, and the problem of training entry-level talent. The identity-risk discussion with Neil Chapman, Ph.D., focuses on privilege creep, access reviews, and the danger of writing policies that the organization cannot actually execute. The DORA episode with Ralf Menegatti treats digital resilience as a broad control environment, where access evidence and regulatory scrutiny reach beyond IT administration. The AI governance panel frames regulation, readiness, compute, and risk management as audit and leadership concerns rather than hype-cycle talking points. The Microsoft file-sharing conversation with Alan Sugano is especially concrete, zeroing in on external links, anonymous access, and missing expiration dates across OneDrive, Teams, and SharePoint. The show can sound like a live industry session, complete with product mentions and contact details. Its value is in the working examples. For compliance professionals, security leaders, auditors, and GRC job seekers, it provides a clear view of the questions that come up before audits, after incidents, and during hiring conversations. It is practical, specific, and more useful when the listener wants the operational consequences than when the listener wants a formal lecture.
Made for: Built for GRC professionals, security leaders, auditors, compliance teams, and job seekers trying to understand how controls work in practice. It also suits executives who need plain explanations of audit exposure, identity risk, and regulatory readiness.
What sets it apart: The show stands out by tying governance topics to specific operating problems: access reviews, evidence requests, policy gaps, shared files, and hiring constraints. It keeps returning to the practical question of whether an organization can prove what its policies claim.
Every Tuesday we're sharing valuable content for you with the leading authorities in GRC, Compliance and Identity Security.
Based on 4 episodes we listened to · September 2026
Detailed practitioner conversations reveal where identity controls, regulatory audits, and GRC hiring succeed or break down.
#AuditTuesday GRC Podcast keeps governance and compliance tied to decisions people have to make at work. In live, question-led conversations with practitioners, the host presses past broad requirements toward operational questions: who still has access, whether controls match…
A policy promises monthly access reviews. The auditor asks for proof. Sound familiar?
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical look at GRC hiring, where experience and communication carry the most weight.
This episode follows GRC careers and hiring through Pete Strauss, a GRC recruiter and founder of InfoSec Connect. It stays close to the practical side of the field, showing how people get in, how they move forward, and what hiring managers actually weigh when a role opens.
Identity risk comes down to whether access, policy, and daily controls line up.
Identity risk here is framed as a governance problem, not a slogan. The discussion keeps coming back to a simple test: who has access, and does that access still make sense?
DORA is presented as a practical test of access, monitoring, and proof.
Audit Tuesday treats DORA as a live test of operational resilience, not a slogan. Ralph Minigotti moves through the questions auditors and regulators are likely to ask now that the framework is in force, and the strongest moments stay grounded in ordinary controls: who has…
An auditor-minded look at Microsoft 365 sharing risk, from OneDrive and Teams to SharePoint.
This episode takes a clear-eyed look at a familiar Microsoft 365 exposure problem, with attention on shared files across OneDrive, Teams, and SharePoint and the way access can drift into risk.
Journalist Ashley Milne-Tyte interviews researchers and authors on women, money, bias, and burnout.
Isabel Berwick and FT colleagues dissect CEO loneliness, burnout and workplace power shifts.
Jerry Sasson hosts Robert Hilliker, Garrett Greyjack, and Kashif Mehmood on redesigning data centers for security, resilience, AI, and zero trust.
Pete Strauss joins from St.
Identity risk is the day-to-day problem.
Bill opens the discussion on DORA.
This episode features a panel discussion on AI governance, regulation, risk, and readiness in 2026, focusing on what leaders need to understand and implement.
Garrett and Ellen Sugano zero in on shared Microsoft files as a security issue that many organizations run into, especially once Microsoft 365 becomes part of everyday work.