Rescheduled: San Antonio ISACA August Meeting: GRC is Broken & Now Meaningless Except as a Sales Too

Introduction:

Let’s call it what it is: GRC has become a bloated, buzzword-ridden mess. It's more useful for selling software promising democratization and check-the-box audits than for actually improving security or reducing risk. What started as a framework for discipline and alignment is now a meaningless acronym slapped onto dashboards, slide decks, and snake oil. In this no-BS session, we’ll tear down the façade, expose how GRC got hijacked by SMB vendors and consultants, and talk about what it actually takes to build trust, enforce accountability, and drive real outcomes. If you’re fed up with fake metrics, empty frameworks, and GRC theater, this is your wake-up call. Data is the only solution!

Speaker Information: