Shows
The Hitchhiker’s Guide to the GRC Technology GalaxyEngineering Digital Trust: Compyl in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Stas Bojoukha, founder and CEO of Compyl, to explore a different way of thinking about governance, risk, and compliance.
The conversation begins with what makes Compyl stand out in a crowded market and the kinds of real-world use cases organizations rely on it to solve today. From there, Michael and Stas dive into the idea of GRC Engineering and what it actually means, who it’s for, and why it extends far beyond the IT security function.
Alon...
2026-03-0531 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Expanding GRC Universe: Mitratech in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen explores a familiar but evolving constellation in the GRC universe: Mitratech.
Long associated with what Michael calls “Legal GRC,” Mitratech has steadily expanded its orbit, moving from legal operations into enterprise-wide risk, compliance, and HR governance. The conversation examines what separates Mitratech in a market filled with specialists and generalists alike: not just breadth, but a deliberate effort to connect disciplines that are too often treated as separate planets.
They unpack how Mitratech balances its deep legal roots with enterprise GRC ca...
2026-02-1918 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Intelligence Layer of the Galaxy: TDI Solutions in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen speaks with David Fisher, President of TDI Solutions, about something that often gets lost in the noise of modern GRC—Intelligence.
They begin by exploring what makes TDI Solutions different in a crowded landscape. While many platforms lead with automation and AI, TDI starts with intelligence (human expertise, investigative depth, geopolitical awareness, and regulatory context) and then uses AI to enhance, scale, and accelerate that foundation.
The conversation dives into TDI’s due diligence capabilities, what distinguishes their approach, and how in...
2026-02-1222 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Deterministic Guide to GRC: Optimas.ai in the GRC GalaxyIn this episode, field researcher and galactic GRC hitchhiker for the Guide, Michael Rasmussen, talks with Aadesh Gawde, Founder and CEO of Optimas.ai, about a different way of thinking about GRC—not as workflows to manage, but as systems to engineer.
The conversation begins with Aadesh’s analogy of Optimas as a Jarvis-like concierge for cybersecurity and resilience, a way of describing how the platform supports executive decision-making by continuously working in the background. From there, he explains why Optimas positions itself as both a GRC engineering platform and a GRC data platform, and why that dist...
2026-02-0527 minThe Hitchhiker’s Guide to the GRC Technology GalaxyBeyond the Continuity Asteroid Belt: Fusion in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Michael Campbell, Chief Executive Officer of Fusion Risk Management, to make sense of a GRC universe that has expanded to well over a thousand solutions (many trying to be everything, and a few choosing to be very precise).
Michael shares his journey to Fusion and how decades of leading technology companies through growth and transformation shaped his view of risk, scale, and operational reality. From there, the conversation widens to the modern GRC landscape: why it has become so fr...
2026-01-2925 minThe Hitchhiker’s Guide to the GRC Technology GalaxyRisk, Without the Panic: CRISAM in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen is joined by Andreas Schmitz, whose journey through the risk universe began not in a product roadmap, but deep in the practitioner trenches and eventually led him to CRISAM.
They explore what happens when someone who has actually lived with risk frameworks, audits, and regulatory pressure falls in love with a GRC platform because it finally makes sense. The conversation digs into why usability is not a “nice to have” in risk management, especially in environments like Germany, where standards such as IDW PS...
2026-01-2222 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThrive on Risk: MetricStream in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with MetricStream to trace a long and improbable journey that began in the age of SOX spreadsheets and has evolved into something far more ambitious.
They reflect on MetricStream’s early role in shaping enterprise GRC, how the platform grew alongside regulatory pressure, and why today’s MetricStream is fundamentally not the MetricStream of yesterday. The conversation explores what it really means to make GRC professionals’ jobs “easier”—not just saving time or money, but improving effectiveness, reducing exposure, increasing resilience, an...
2026-01-1522 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Hitchhiker’s Guide to Risk: Protecht in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen is joined by Gary Lynam, Managing Director for EMEA at Protecht, to trace the unlikely but influential journey of one of the GRC universe’s quiet constants.
The conversation begins in Australia, a place with an outsized impact on modern risk thinking, exploring how the AS/NZS 4360 Standard laid the groundwork for what would later become ISO 31000, and how that legacy continues to shape Protecht’s philosophy today. From those roots, they unpack Protecht’s evolution from a strong mid-market specialist into a global...
2026-01-0824 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Compliance Guide to the Galaxy: NAVEX in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen is joined by Kyle Martin of NAVEX to chart the company’s long arc, from its early days to the AI-powered, fully connected risk and compliance platform used by organizations across the world today.
They explore how NAVEX has evolved alongside the market, why its integrated approach resonates with customers, and how the company's growth in Europe is reshaping its global footprint. Kyle breaks down the kinds of industries and organizational sizes where NAVEX thrives, and why so many customers choose NAVEX as t...
2025-12-1816 minThe Hitchhiker’s Guide to the GRC Technology GalaxyMostly Harmless Advice: Tales from the Galaxy with Andrew McIntyreIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen is joined by Andrew McIntyre, a veteran explorer of the GRC universe whose career in sales has been shaped by equal parts skill, serendipity, and outright improbability.
Andrew shares how he first found his way into sales, the capabilities that truly matter in a world where relationships carry more weight than pitch decks, and the mindset required to thrive in one of the most misunderstood professions in the GRC cosmos. Along the way, he opens his legendary rolodex of stories (the hilarious, th...
2025-12-1142 minThe Hitchhiker’s Guide to the GRC Technology GalaxyFrom Chaos to Capability: iluminr in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen is joined by iluminr to confront a hard truth: business continuity is dying, and resilience must take its place. Organizations today aren’t just facing power outages and weather events, they’re also preparing for ransomware, geopolitical escalation, misinformation, deepfakes, and a threat landscape evolving faster than any static plan can keep up with.
They discuss how iluminr’s Microsimulations deliver a modern approach to readiness, replacing binder-based optimism with data-driven capability intelligence. From 15-minute learning reps to immersive crisis scenarios, iluminr helps te...
2025-12-0429 minThe Hitchhiker’s Guide to the GRC Technology GalaxyGoverning the Galaxy of Third Parties: apexanalytix in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with apexanalytix to chart a course through the sprawling universe of third-party and vendor relationships—where complexity multiplies, risks hide in plain sight, and organizations often panic at the wrong end of the lifecycle.
Unlike many in the space, apexanalytix begins not with risk, but with supplier governance, the foundational understanding of who a supplier is, what they do, and the context of the relationship. From there, they layer on a full constellation of risk domains, such as cybersecurity and IT...
2025-11-2028 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Governance Guide Reimagined: Cura in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Cura Software Solutions to explore how a platform that began as a focused risk tool has evolved into a global, end-to-end GRC ecosystem. From enterprise risk to operational resilience, audit, compliance, legal, analytics, and more, Cura now spans an entire constellation of capabilities used by organizations across Africa, the UK, the US, India, Australia, Malaysia, and beyond.
The conversation dives into the timing of South Africa’s newly released King V corporate governance code, how it reshapes expectations for acco...
2025-11-1316 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Culture at the Center of the Galaxy: Decision Focus in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with the team at Decision Focus to explore why the future of GRC isn’t about more features, it’s about better decisions. They discuss how culture, values, and the people building and using the technology shape outcomes far more than checklists or templates ever could.
The conversation examines how Decision Focus’s platform is designed not to simply enforce compliance, but to support judgment, clarity, and meaningful collaboration across the business. They break down how the company’s culture informs it...
2025-11-0623 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Assurance Singularity: AuditBoard in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Jason Sechrist of AuditBoard to explore how the company has transformed from an audit tool into one of the most intelligent platforms in the GRC cosmos. They discuss what makes AuditBoard distinctly improbable—a platform that’s as beautiful as it is powerful, blending a clean, intuitive UX with the analytical depth needed to quantify, automate, and orchestrate assurance at scale.
Jason dives into how AuditBoard unites Monte Carlo and bow-tie analysis for next-generation risk quantification, delivers a no-code enviro...
2025-10-3121 minThe Hitchhiker’s Guide to the GRC Technology GalaxySeeing Through the Risk Matrix: Riskonnect in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen connects with the Riskonnect CEO, Jim Wetekamp, to explore how the company is helping organizations see through the code of risk, from insurable exposures and geopolitical volatility to AI-driven analysis and quantified decision-making.
The discussion dives into what Riskonnect delivers across the GRC universe today, what it’s building for tomorrow, and how agentic AI is accelerating the maturity of the entire field. From risk quantification and scenario analysis to integrated insights across enterprise, compliance, and continuity, Riskonnect’s approach helps organizations unders...
2025-10-2333 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Event-Based Guide to the Galaxy: SureCloud in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Alex Hollis of SureCloud to discuss how the company is rewriting the rules of digital risk and resilience. SureCloud’s event-sourced architecture captures everything that ever happens in the system (every change, every control, every decision) allowing organizations to recreate their compliance universe at any point in time.
The conversation explores what SureCloud does best, what problems it solves most effectively, and where it fits across enterprise risk, IT, compliance, and legal functions. Alex shares how this architecture enables true...
2025-10-1620 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Improbability of Compliance Made Simple: Comply in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Comply to explore what sets the firm apart in the sprawling universe of financial services compliance. Serving clients across the US, UK, and more than 60 countries, Comply supports firms of every size, from global institutions to boutique shops, with solutions tailored to private funds, broker-dealers, investment banks, and wealth managers.
The conversation dives into Comply’s strengths, including policy management, culture, and a model built on partnership rather than just software. We also chart how Comply is embracing AI, not...
2025-10-0917 minThe Hitchhiker’s Guide to the GRC Technology GalaxyEvolving Through the Galaxy: Archer in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Steve Scharlman of Archer to chart the platform’s evolution from its early days to its role today as a cornerstone of enterprise risk and compliance. Once a household name for CISOs, Archer has become just as essential for chief risk officers, ethics leaders, and compliance officers navigating an ever more complex universe.
The conversation explores how Archer has grown and changed over the years, what sets it apart in the crowded GRC cosmos, and the innovations that should have...
2025-10-0223 minThe Hitchhiker’s Guide to the GRC Technology GalaxySo Long, and Thanks for All the Risk: Renee Murphy in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Renee Murphy, analyst, advisor, and master storyteller, to look back at the origins of the term “GRC” and trace how the technology space has evolved since its early days.
Together they reflect on their parallel paths as analysts shaping the field, sharing what has worked, what hasn’t, and what needs to change. The conversation explores the good, the bad, and the ugly of GRC technology and implementation, from ambitious vendor promises to the realities of deployment. They also discuss...
2025-09-2538 minThe Hitchhiker’s Guide to the GRC Technology GalaxyThe Interconnectedness of All Things: Workiva in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen sits down with Workiva to explore what happens when GRC, ESG, and finance finally converge on a single platform. The conversation digs into what Workiva brings to the GRC landscape, where it’s best of breed, and why the interconnectedness of governance, risk, and compliance is critical to making ESG real rather than rhetorical.
We also look at the role of AI, including the rise of agentic AI, and what new capabilities may soon reshape how organizations manage reporting, controls, and disclosures. The...
2025-09-1831 minThe Hitchhiker’s Guide to the GRC Technology GalaxyRegulation at the Speed of AI: Corlytics in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen navigates with Corlytics through the ever-expanding cosmos of regulatory change. With 30 million pages of regulatory text published each year, Corlytics combines the precision of AI with the insight of top-tier subject matter experts and data scientists to make sense of the noise and turn regulation into risk intelligence.
The discussion dives into Corlytics’ most complex and fascinating use cases, exploring what sets them apart from the crowded constellation of regulatory change management providers. From efficiency and effectiveness to resilience and agility, the conv...
2025-09-1118 minThe Hitchhiker’s Guide to the GRC Technology GalaxyLife, the Universe, and Objectives: Corporater in the GRC GalaxyIn this episode of The Hitchhiker’s Guide to the GRC Technology Galaxy, Michael Rasmussen explores with Corporater why risk cannot exist in isolation from objectives and performance, despite how many organizations and technology providers treat it. Drawing on ISO 31000’s definition of risk as “the effect of uncertainty on objectives,” the conversation dives into why so many platforms reduce objectives to a simple mapping field, missing the point that performance management must sit at the center of GRC.
Corporater demonstrates how its platform takes a truly integrated approach, with dedicated modules to manage strategy, performance, and objectiv...
2025-09-0422 minThe Hitchhiker’s Guide to the GRC Technology GalaxyDon’t Panic, It’s Configurable: CoreStream in the GRC GalaxyStrap in, interstellar travelers, our first stop in the GRC Technology Galaxy is with CoreStream, a platform that proves configurability doesn’t have to feel like Vogon poetry. Michael Rasmussen chats with the CoreStream crew about how they’ve built a system that adapts to you, delivering value faster than a hyperspace jump.
From rapid implementations that go live in weeks, to deployments both in the cloud and on-premise (making it fit even for critical infrastructure planets), CoreStream shows how portability, scalability, and flexibility can turn improbable business realities into manageable ones.
With real-world use case...
2025-08-2816 min