All about compliance commoditization, GRC 4.0 & AI
Featuring
Nicholas Muy
In this episode, Scrut's CISO Nicholas Muy joins CEO Aayush Ghosh Choudhury to unpack what’s next for GRC—from AI agents to audit automation. With experience spanning DHS to startups, Nicholas shares a no-fluff perspective on building modern, resilient programs that actually scale. This is GRC, leveled up.


All about compliance commoditization, GRC 4.0 & AI
All about compliance commoditization, GRC 4.0 & AI
In this episode, Scrut's CISO Nicholas Muy joins CEO Aayush Ghosh Choudhury to unpack what’s next for GRC—from AI agents to audit automation. With experience spanning DHS to startups, Nicholas shares a no-fluff perspective on building modern, resilient programs that actually scale. This is GRC, leveled up.


Description
Nicholas Muy isn’t here to sugarcoat it: compliance is changing—and the shift is bigger than commoditization. It’s convergence.
In this episode, he explores how security and compliance are merging into unified, intelligent workflows—with AI agents playing a key role. Drawing on his vast experience in cybersecurity, Nick breaks down what agentic GRC actually looks like and how early-stage companies can embrace frameworks without being boxed in by them.
Whether you’re rethinking audits, scaling trust, or experimenting with AI teammates, this episode offers a glimpse into what’s next for GRC.
Highlights from the episode
- How security and compliance are converging faster than you think
- The rise of agentic AI and what it means for GRC teams
- Building adaptable, audit-ready programs that don’t drain your team
“Compliance gave us the time and structure to gradually build and refine our security posture.”