UNITING RISK, PRIVACY, AND SECURITY
An Expert's GRC Webinar, hosted by LogicGate.(Please note: These transcripts notes are automated by AI)
Hello! My name is Megan Brown, and I'm with LogicGate. I am doing a quick, special recorded episode of our recent webinar that we put together with Trustco. Trustco is our partner, and together we're gonna talk about the value we can bring for you as we have for other clients and market.
So as you can see on the screen here, we're gonna talk about today, the market, the the challenges that many of you are facing and how we can help.
Now, I was co-presenting this live webinar with Trustco, Michelle Cope and Tim over at Trustco. If you know them. They're great folks, rooted in really strong domain understanding of IT, digital transformation, governance, risk and control, cyber security as well as cost management and containment. And so today, my background is more in GRC. I lead our international team here, and I'm based in the UK.
And when we talked in our webinar together, we talked about the 2 constants we can also count on. And as as organisational leaders, whether we're in network security. If we're Csos or we're compliance leaders, there's 2 kinds that we can count on, we, one will be faced with an increased scope and complexity facing our organisations, particularly in risk management.
and as our organisations grow and evolve the complexity and scope. It's going to evolve and grow and then change the rate of business, or to have tech regular rate of regulatory changes are going to increase over time
Things like Dora. that will be facing Fintech and Fin serve organisations in 2025. Throughout the EU things like ISO and SOCK and GRC is. Maybe you move into new markets. We'll face. You'll be. You'll be impacted by. And even just things like regulatory pressures and changes you might need to adhere to.
And so when you think about the changes, and I increase complexity that we're all dealing with, it increases cost to the business and increases complexity of managing our suppliers. It manages complexity and or impacts complexity and managing our audits.
Fourth-party risk new regulations, etc. So what we seek to do is just to help in the day to day help in the management in between the audits, help in maintaining an audit ready state whether it's for PCI or ISO or cyber essentials. How do you maintain a state whereby the business is collaborating with you in a secure a risk? Aware culture.
Ultimately, what trust Co and logic you have brought to market together is a way to operationalise all those processes that you've been doing today and spreadsheets and back and forth with email to your business. We provide a modern mature GRC program, really helping you to make proactive decisions when it comes to risk and compliance
the value for our clients. What they're seeing is improved efficiency, spending less time and manual audit. Prep. One of our clients and 83% of their time and just prepping for their next iso audit. But, more importantly, they reduce their number of findings from 300 findings to 3.
So it's important to save time and efficiency where we can as well as say, time and evidence collection and one control what maybe it could be used in multiple controls.
decrease cost save money where we can. Today's market in today's economy, it's important to be using our resources in the most effective way that includes our people in our time proactive risk management. So how can you make sure that you're proactively linking your risk to control your identifying compliance gaps? You're staying ahead of things. so that when it's time for audit season or your audit prop, it's efficient. You can see where the gaps are and what you'll need to address before
for. And lastly, how do you drive revenue? You drive revenue by taking strategic risk. You stay ahead of the market by moving quickly, by being a risk and and kind of compliance to where culture, you'll be able to see the opportunities where you can make some of these strategic decisions. And for
it's and our head of info sec. And and others, you're able to bring these insights to the business to help them. Now, one of the examples you mentioned of when the changing regulations is Dora, Dora is the digital operational app
Operational Resilience Act, and it is really focused on helping to make sure organisations are mitigating their cyber security risks and threats
that they're recovering quickly from ICT incidents, and also that they are just making sure that they've protected their infrastructure and they they avoid compliance fines and penalties. Now, we are helping our clients today
do that. There, we're we're providing a digital a GRC workflow management platform. It's a no code cloud hosted platform to get you out of spreadsheets, drive automation drive reminders, due dates, email escalations and notifications for teams or slack
driving efficiency and reminders to the business. So you don't have to nudge, and that ultimately it will help you in your audit cycle. Prep. It will reduce your audit fatigue. You'll have better communication with your risk owners. You'll ultimately have better issue resolution because you can link these issues to your risks to your controls.
You'll reduce those silos. You'll reduce the blind spots that happen because of the silos. And ultimately we always talk about having a concept of assessing once and satisfying many, you can assess one control and satisfy many frameworks.
Now, this doesn't relate just to Dora, and as you talk to your Trustco team. You'll learn that the Grc platform that we offer Risk cloud. With this Co. Presented by logic gain, and Trustco can help you identify your risk, quantify your risk, and act on those insights, whether it's Dora or whether it's it related. risks now, no matter where you, on the spectrum of maturity we can support, and we can help you. We welcome a conversation
about where you live today and your maturity in this governess, risk and compliance market, and if you yourself are listening to this, and you do not manage the day to day risk. Well, please share or let us know who does. We'd love to be able to help your organisations. act quickly, prioritise their time and make sure you maintain
that audit ready state. Now for some of you that are more mature. And you're actually already documenting your risk and controls. You're doing regular assessments within the business for risking controls, residual likelihood impact. And now you're looking to take it a step further where you're looking to quantify, but to financial impact, to your key critical risk. Do some lost students analysis, maybe. Look at magnitude. We are here to help you, and maybe in the risk
cloud in our Grc workflow platform. This is something we can help you do with one click of a button as you see here on the screen here, I'll leave you with this is that we talked a lot about risking controls it. Verse can cyber controls to be specific and Dora as well. However, it doesn't stop there. So if anything on the screen today is of interest to you whether it's enterprise, risk management.
third-party, risk management, policy management, even things like regulatory compliance, business continuity and operational resilience, free. Please reach out to trust Co. Team members today, and we will have upcoming webinars. So there's one on Thursday, the seventh
But there will be other opportunities for us to engage together. But when all our sales please reach out to your trust code team and they can set you up with more information as well as a live. Look at the platform. Thank you all for your time, and have a great day.
- Going beyond compliance by adding risk context to control evaluations
- Automating and centralising risk and compliance processes
- Identifying, quantifying, and taking action on risk trends fasterĀ
Webinar Speakers
