Cybersecurity Today TV - Ep 70 - From Checklists to Strategy: Modernizing GRC for Growth

Cybersecurity Today TV - Ep 70 - From Checklists to Strategy: Modernizing GRC for Growth

by CybersecurityToday

Humanities, Social Sciences & Thought Economics & Finance KJMVManagement of specific areasKJMV3IT and information systems management
🎙 CybersecurityToday 👥 492 📅 February 12, 2026 ⏱ 28 min 👁 67 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

GRCcompliancerisk managementgovernancetrust

Summary

In this episode of Cybersecurity Today, host Jim Wiggins interviews Laura Sawka, founder of Sawka Advisory Group and former SVP of Security GRC at Salesforce. The discussion focuses on modernizing GRC (Governance, Risk, and Compliance) from a checklist-based approach to a strategic enabler for business growth. Sawka defines GRC as the strategic guardrails that build sustainable trust with investors and customers. She addresses common misconceptions, such as GRC being a checklist, a cost center, or a one-time effort. She emphasizes the importance of integrating controls into business processes, continuous monitoring, and aligning security with business objectives. The conversation covers how GRC can be leveraged to build customer trust, the critical role of alignment between security and business teams, and the challenges of scaling GRC during rapid growth, especially internationally. Sawka recommends a three-pronged approach: building a solid foundation, managing compliance at scale, and planning for the future. She also discusses the often-overlooked governance component, the selection of GRC tools, and future trends including increased regulatory complexity and the role of AI and automation.

173 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into GRC from an experienced practitioner. Laura Sawka offers practical advice and frameworks for transforming GRC into a strategic function. Her arguments are well-structured and supported by examples, such as the analogy of a car needing brakes to go fast. She effectively argues that GRC should be integrated into business processes and viewed as a revenue enabler rather than a cost center. The discussion is coherent and addresses common pain points, providing actionable recommendations. However, the arguments are largely based on personal experience and lack empirical evidence or references to specific studies.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite specific sources or studies, relying on the guest’s expertise. The title accurately reflects the content, which is a focused discussion on modernizing GRC. The production quality is professional, and the interview is well-structured. However, the lack of citations and reliance on anecdotal evidence limits the scientific rigor. The video is more of an expert opinion than a research-based presentation.

176 words

Title / Content Match

The title accurately reflects the content, which focuses on modernizing GRC from a checklist approach to a strategic driver.

Quality & Reliability

7/10

The content is an expert interview with a former Salesforce GRC leader, providing practical insights and frameworks. However, it lacks detailed citations or references to specific research or standards, and the claims are largely anecdotal.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Contribution & Novelties

The video offers a practitioner’s perspective on modernizing GRC, emphasizing the shift from compliance checklists to strategic trust-building. It provides a clear framework for integrating GRC into business processes and scaling it for growth. The discussion on common misconceptions and the importance of governance adds value for professionals.

Pour aller plus loin :

  • NIST Cybersecurity Framework — Foundational framework for improving cybersecurity posture.
  • ISO/IEC 27001 — International standard for information security management.
  • COBIT — Framework for governance and management of enterprise IT.
  • Policy as Code — Concept of managing policies through code for automation.

94 words

Radar Profile

The radar profile shows balanced scores across information quantity, quality, technical level, and reliability, indicating a well-rounded but not deeply technical or heavily sourced content.

Reliability 7/10