Practical GRC for modern risk teams.
GRC & Me sits at the intersection of risk leadership and day-to-day program design. Recent episodes connect AI agents, enterprise risk, compliance culture, financial services trends, automation, and macroeconomic pressure to decisions organizations actually have to make.
PRESS PLAY
GRC & Me is a governance, risk, compliance, and cybersecurity show focused on how organizations turn broad threats into daily operating choices. The tone is professional and practical. Recent episodes repeatedly frame GRC as something that touches business strategy, technology adoption, culture, audit, controls, and risk tolerance all at once. AI is a major throughline. Conversations cover AI governance, agentic AI, shadow AI, the EU AI Act, human-in-the-loop decisions, and the pressure leaders face to use AI for efficiency without handing entire risk programs over to automated agents. The show does not treat automation as magic. It asks where oversight belongs, which processes deserve more autonomy, and how evidence, metrics, and control testing can be made more continuous without losing accountability. Enterprise risk management gets similar treatment. Episodes on credit unions and smaller organizations talk about shifting from reactive firefighting to strategic risk management, with attention to training, culture, internal audit, and first-line ownership. The financial-services material brings in banking, cybersecurity, digitalization, blockchain, cryptocurrency, regulatory change, and self-regulation. Another recent thread looks at macroeconomic signals, inflation, consumer spending, borrowing, delinquency rates, margins, and the risk of profitless prosperity. The show also makes room for company and product history, including LogicGate founders reflecting on flexibility, modernization, AI governance, and product decisions. Its workplace examples are concrete. Vinted guests discuss targeted training, compliance culture, regulation blind spots, and people-centric strategy in a marketplace setting. Google guests discuss continuous assurance, automated evidence, control automation, and security by design. The pacing is guided and interview-led, with opening questions that make guests personable before moving into the risk conversation. It suits a listener who wants GRC discussed as a living management system: partly technology, partly process, partly culture, and partly judgment under uncertainty.
Made for: Suits a listener who works near governance, risk, compliance, cybersecurity, audit, or operational leadership and wants practical language for complex program decisions. It also fits business leaders tracking AI governance, automation, and risk culture.
What sets it apart: The show connects risk themes to program-level details: evidence collection, control automation, risk ownership, training, human oversight, and regulatory pressure. Its strongest lane is the practical middle ground between broad risk pressure and the work teams must actually run.
When Governance, Risk, and Compliance (GRC) issues are in the headlines, it’s usually a bad thing. It’s only when a major data breach happens, or a company runs afoul of some regulation, that these important responsibilities get their time in the limelight. GRC & Me is here to shine a light on those individuals tasked with safeguarding their employers’ information and integrity, day in and day out. Tune in monthly as host Jane Totaro, LogicGate Podcast Host, and her guests explore the issues and ideas that give shape to these interconnected functions. Just as GRC touches many parts of a business, so too will the podcast delve into a wide array of topics, trends and concerns—from current even…
Cruise control to driverless cars: your next AI risk meeting gets a usable scale.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical look at how consumer resilience and rising prices can turn economic signals into risk decisions.
GRC & Me brings macroeconomic forecasting down to the level where risk leaders actually have to make calls. Jane Totaro, Laurence Adele Baker, and Tony Clausen trace how industrial softness, consumer spending, inflation-adjusted income, and borrowing can show up in operational…
A grounded discussion of how AI agents can support GRC work without displacing human judgment.
AI-driven governance comes through as a practical GRC problem: what to delegate, who stays accountable, and how much risk an organization is willing to accept when agents enter the workflow.
A grounded review of ERM as a shared operating discipline for credit unions and smaller organizations.
Enterprise risk management comes through as a shared organizational duty, not a place where problems get parked. Megan Manival leads Eric Hertzberger of Security Services Federal Credit Union through the move from reactive firefighting toward a steadier, more strategic posture,…
A tenth-anniversary founder conversation that makes product flexibility and AI governance the clearest thread.
Logigate's tenth-anniversary conversation works best as a compact origin story for a GRC product shaped through early disagreement. Megan Manifold's exchange with founders Matt, John, and Dan starts with playful superlatives, then settles into the choices that gave the product…
GRC and Me's episode "GRC in a Shifting Market" pairs Jane Totaro with ITR Economics speaker, economist, and CFA Laurence Adele Baker and Crow principal GRC transformation Tony Clausen.
Jane Totaro opens GRC & Me with Logigate CEO Matt Kunkel and President and COO Diego Panama for a 2026 predictions conversation about GRC, AI governance, and vendor risk.
["Jane Totaro opens GRCandMe's \"CISO to CISO\u2014Let's Get Real About AI\" around AI governance, regulation, agentic AI, and shadow AI.", "Jake Bernardis and Nick Kathman join as CISOs, and both describe hands-on experimentation with models, policy agents, and AI workflows rather than abstract commentary.", "Nick says AI models are not interchangeable, using Gemini, ChatGPT, Gemma, and DeepSeek experiments to show that the same prompt can trigger different refusals and recommendations.", "Jake says the EU AI Act is vague and hard to operationalize, while both guests argue that shadow AI, vendor defaults, and agentic tool use are already creating risk faster than policy teams can keep up."]
Megan Manival opens GRC and Me with Eric Hertzberger of Security Services Federal Credit Union to discuss the evolving landscape of enterprise risk for credit unions and smaller organizations.
["Megan Manifold hosts Logigate's 10-year anniversary episode of GRC & Me with Matt, John, and Dan, opening with a superlatives game about bets, coffee, and a power drill.", "Matt explains the team's 'hustler, hacker, and hipster' structure, with Dan as the full-stack engineer and the others handling the front-facing and jack-of-all-trades work.", "Dan and John trace the company from Capria Solutions and a Techstars incorporation in Chicago to the Logigate name, the C-shaped logo, and the GOAT mascot that started as dummy data.", "The back half focuses on no-code GRC, the move from relational to graph data, and why AI adoption in risk and compliance shifted from fear to active strategy."]
Megan Manifold interviews Elizabeth, Vinted’s Group Risk and Compliance Officer, and Gouda, its Risk Process Manager, about building compliance culture around people rather than controls alone.
GRCandMe's 2025 Financial Industries and Banking Trends episode records Megan Manivel in Chicago with Steph Southard of BCU, Donald Rome of Centure Bank, and Steve Gajiamas of Bilgo.
Megan Manifold interviews Google’s Eric Tsang and Vikram Kaur about continuous assurance, automation, and treating compliance controls as code.
Megan Manival interviews Rishi Khurana, Google’s Cybersecurity GRC Product Manager Lead, about AI, machine learning, automation, and compliance.
Salim Alamuddin of Crossroads Strategies says the Republican Party has shifted over eight years toward populist, worker-centric technology policies and a more hands-off approach for startups.
Host Megan Manifold interviews compliance veteran Steph Southard about navigating financial industry compliance, starting with a childhood memory.
Tony Martin-Vegue discusses his journey from IT to GRC and his role in quantifying risk at Netflix.
John Griffin, Compliance Program Manager at Intel Federal, discusses his 38 years in government contracting and the challenges of navigating U.S.
Megan Fee interviews Dimitrios, Director of Information Security at Wayflyer, about breaking down organizational silos using a common risk language, risk quantification, and global standards.
An interview with risk quantification experts Rich Syerson and Mark Tattersall discussing risk quantification in the insurance technology space, board-level conversations, and technology for consistency.