Why Change Management Breaks Down at Scale (And What I Built to Fix It)Most conversations about Governance, Risk, and Compliance focus on frameworks, policies, and audits. But the real breakdown doesn’t happen in documentation. It happens in execution. More specifically,May 4 · 5 min readneviarrawlinson.hashnode.dev
Shadow SaaS and Shadow AI Are Becoming One of the Biggest Enterprise RisksShadow IT is not new. What is new is the scale, speed, and invisibility of shadow SaaS and shadow AI in modern environments. Today, teams can onboard a new SaaS tool or start using an AI assistant in minutes. No procurement. No security review. No go...Dec 29, 2025 · 3 min readneviarrawlinson.hashnode.dev
The Open Source Training Program for Learning GRCGovernance, Risk, and Compliance (GRC) is one of the fastest-growing and most impactful areas in the tech industry, but accessible, hands-on learning resources are still hard to find. That’s why I created the GRC Training Program, a free and open sou...Dec 1, 2025 · 3 min readneviarrawlinson.hashnode.dev
How to Use Jira Automation to Track Compliance ViolationsTracking compliance violations shouldn’t just live in spreadsheets and audit binders. If your team is already using Jira, you can automate compliance workflows and create real-time visibility into violations—no manual chasing required. This article w...Nov 27, 2025 · 3 min readneviarrawlinson.hashnode.dev
Building RCA Builder: A Practical App for Real-World Root Cause AnalysisWhen it comes to incident analysis and operational risk, most teams fall into two extremes — either overcomplicating the RCA process, or skipping it altogether. I work in IT Governance and Compliance, and I’ve seen firsthand how RCA reporting often b...Aug 18, 2025 · 2 min readneviarrawlinson.hashnode.dev
