118xBanin18xban.hashnode.dev·Sep 26 · 13 min readKickoff: Your First GRC Meeting// @18xBan · GRC Series · Chapter 16 4 questions. Everything else is your homework, not theirs. The sentence at the end of the March review The management review is nearly over when Maya says the t00
118xBanin18xban.hashnode.dev·Sep 26 · 15 min readGovernance Roles and Responsibilities// @18xBan · GRC Series · Chapter 15 Who decides, who does, who signs, and who covers when they're away. Monday, 9:15 AM: one name, 5 Boxes Gotham Mutual's contract arrives with a security schedule00
118xBanin18xban.hashnode.dev·Sep 25 · 14 min readRisk Appetite vs Risk Tolerance // @18xBan · GRC Series · Chapter 14 Capacity, appetite, tolerance, trigger. Only one of them is a number. Tuesday, 10:40 AM: "Is that OK?" Priya's team wants to ship a product analytics SDK. It's 00
118xBanin18xban.hashnode.dev·Sep 23 · 13 min readManagement Review: Running the Meeting That Matters// @18xBan · GRC Series · Chapter 13 7 inputs in, decisions out, and a document that survives an audit. Monday, 11:00 AM: "When was your last management review?" The firm Maya funded for the intern00
118xBanin18xban.hashnode.dev·Sep 23 · 13 min readBoard Metrics That Actually Get Read// @18xBan · GRC Series · Chapter 12 6 numbers, 3 decisions, one page. Thursday, 2:00 PM: 14 Charts Maya gives you 10 minutes at the monthly leadership meeting. It's the first time security has bee00
