Kickoff: Your First GRC Meeting// @18xBan · GRC Series · Chapter 16 4 questions. Everything else is your homework, not theirs. The sentence at the end of the March review The management review is nearly over when Maya says the tSep 26 · 13 min read18xban.hashnode.dev
Governance Roles and Responsibilities// @18xBan · GRC Series · Chapter 15 Who decides, who does, who signs, and who covers when they're away. Monday, 9:15 AM: one name, 5 Boxes Gotham Mutual's contract arrives with a security scheduleSep 26 · 15 min read18xban.hashnode.dev
Risk Appetite vs Risk Tolerance // @18xBan · GRC Series · Chapter 14 Capacity, appetite, tolerance, trigger. Only one of them is a number. Tuesday, 10:40 AM: "Is that OK?" Priya's team wants to ship a product analytics SDK. It's Sep 25 · 14 min read18xban.hashnode.dev
Management Review: Running the Meeting That Matters// @18xBan · GRC Series · Chapter 13 7 inputs in, decisions out, and a document that survives an audit. Monday, 11:00 AM: "When was your last management review?" The firm Maya funded for the internSep 23 · 13 min read18xban.hashnode.dev
Board Metrics That Actually Get Read// @18xBan · GRC Series · Chapter 12 6 numbers, 3 decisions, one page. Thursday, 2:00 PM: 14 Charts Maya gives you 10 minutes at the monthly leadership meeting. It's the first time security has beeSep 23 · 13 min read18xban.hashnode.dev
