Description

In this episode, Drew Danner uncomplicates GRC and stresses the importance of “keeping it stupid and simple.” Drawing from his experiences in both the army and cybersecurity, he shares easy and practical tips for building a sustainable security program.

Drew emphasizes the importance of doing the “little things” in GRC. He highlights how small, consistent actions—like reviewing contracts and integrating compliance into daily operations—can drive meaningful change and prevent last-minute crises.

Tune in to hear his insights on bridging the gap between compliance and security, navigating intimidating frameworks, and how early attention to security can help companies win customer trust and build stronger businesses.

Highlights from the episode

• Pro tips for companies that are getting started with compliance
• The simplicity of building effective security controls
• The evolving nature of security audits in the age of AI

“You don’t need a certificate to do the right thing. Start with the basics.”