Compliance Beyond the Checkbox: A Fresh Perspective on Auditors and Risk
Featuring
Beau Butaud
In this episode of SecuriTea Time, Beau Butaud, Risk and Compliance Manager at Moss Adams, shares a grounded yet refreshing take on compliance. From risk assessments to audit mindset shifts, Beau breaks down what it really takes to move beyond checklists and build smarter, stronger GRC programs.


Compliance Beyond the Checkbox: A Fresh Perspective on Auditors and Risk
Compliance Beyond the Checkbox: A Fresh Perspective on Auditors and Risk
In this episode of SecuriTea Time, Beau Butaud, Risk and Compliance Manager at Moss Adams, shares a grounded yet refreshing take on compliance. From risk assessments to audit mindset shifts, Beau breaks down what it really takes to move beyond checklists and build smarter, stronger GRC programs.


Description
Get ready to take notes! Beau Butaud reveals the key to an effective compliance program and explains why treating compliance reports as mere checkboxes is not the best idea.
Discover the art of customizinhg compliance based on your organization’s unique requirements. Beau will guide you through the essential questions to consider when crafting your organization’s compliance program.
Uncover how conducting an objective comparison between the complexities of Generally Accepted Accounting Principles (GAAP) and frameworks like NIST could shed light on the challenges within each domain.
All this and a treasure trove of knowledge await you in this riveting episode! Don’t miss out – tune in now!
Highlights from the episode
- The benefits of customizing compliance for your organization
- Drawing a comparison between GAAP and NIST
- The need for balancing automation and human insight
“What truly matters is understanding why you are obtaining a compliance report in the first place and whether the tests conducted against those claims align with your intended purpose.”
About the Risk Grustlers Podcast
Risk Grustlers is a podcast for people working in security, risk, and governance who want sharper conversations than the usual industry soundbites. Each episode features CISOs, security leaders, and risk practitioners sharing how they think through the real operational challenges behind cybersecurity, compliance, AI governance, and enterprise risk.
Hosted by Aayush Ghosh Choudhury (CEO and Co-founder of Scrut Automation) and Nicholas Muy (CISO at Scrut Automation), this podcast series focuses on practical lessons, hard-earned perspectives, and the nuance that comes only from years spent in the security and compliance space.


























