Risk Grustlers / Episode #2
Do Auditors Have Horns?
Featuring Vignesh Kumar
Joining us on the second episode of Risk Grustlers is Vignesh Kumar, Senior Manager of Security and Privacy at Microsoft and an undeniable GRC genius.
Having started out as a project manager at one of the largest equipment manufacturers in the world, Vignesh developed an unexpected passion for GRC. Today, this passion still burns bright, as he sets about making it more palatable and appealing to the uninitiated or to those who dread it. He is the perfect advocate for all things GRC.
“So, the key difference is the sense of ownership. Internal auditors have that, while external auditors usually stick to compliance. It's about being risk-based versus compliance-focused."
“What I came to really appreciate about GRC was how it could positively impact my applications. Its ripple effects spread across the organization and ensure that hundreds of applications are compliant.”
Description
In this episode, we walk through the journey of Vignesh Kumar, who leads the internal audit teams at Microsoft. He talks about his unorthodox journey to the GRC world, what makes GRC sexy, why relationships are pivotal in the GRC world.
He offers a peek into the world of audits, explaining how internal and external audits vary and emphasizes the need for regular internal audits.
There’s also some sneaky tips on how GRC teams can establish a rapport with other teams to make the whole process, much easier.
Tune in as he recounts amusing anecdotes of his experiences as an internal auditor and learn whether auditor do have horns or are just an angel in disguise?
Whether you’re a GRC professional or an employee who is vary of it, Vignesh will make you gain a new respect for it. Get ready to see GRC in a new light!
Highlights from the episode
- Discussing the importance of GRC for an organization’s security
- Differentiating between internal audits and external audits
- Emphasizing the importance of regular internal audits
