The Paramify Podcast

Justin Scott didn't set out to build a security program. But after Vasion's customers started asking hard questions about cloud security, he ended up leading the company through ISO 27001, SOC 2, FedRAMP Moderate, and...

<p>Monthly vulnerability scans and POA&M spreadsheets aren't going to cut it anymore. Kenny and Isaac break down FedRAMP NTC-0014 and CISA BOD 26-04, the two mandates reshaping how cloud service providers approach...

Monthly vulnerability scans and POA&M spreadsheets aren't going to cut it anymore. Kenny and Isaac break down FedRAMP NTC-0014 and CISA BOD 26-04, the two mandates reshaping how cloud service providers approach...

<p>"For years defense contractors kept hearing CMMC's coming. And then it kept not coming. So they grew this boy who cried wolf mentality where once it finally really was coming, they were like, I've heard that before."...

<p>Is legacy compliance actually dead? </p> <p>In this episode of the Paramify Podcast, we sit down with Bhanu Jagasia and Vincent Tham from BladeStack to talk about the massive shift happening in the GRC world. From...

<p>"Anytime someone says something is dead, that's exactly what I have to go learn." - Ethan Troy</p> <p>Kenny and Isaac sit down with Ethan Troy, Senior GRC Engineer at TRM Labs, Head of AI Research at GRC Engineering...

<p>In this episode of The Paramify Podcast, Kenny sits down with Justin Merhoff to talk about what makes security actually work: usability, speed, adaptability, and real-world adoption.</p> <p>Justin shares lessons from...

<p>Today's episode is An Apropos of Nothing.</p> <p>This episode is optional, you can skip it if you want, but it's a pretty honest glimpse into what hanging out with us is actually like.</p> <p> </p>

<p>“There’s a 5% chance of a $5 million loss. Is it exactly right? No. But it’s way better than saying medium, because medium means nothing.”</p> <p>Kenny sits down with Rob Black, Founder and CEO of Fractional CISO, to...

<p>Federal compliance is having a moment. FedRAMP, FedRAMP 20x, CMMC, the whole alphabet soup is going mainstream, fast.</p> <p>In this episode of The Paramify Podcast, we sit down with Justin Rende, Founder and CEO of...

<p>“There’s this misconception in the marketplace that you need to be a coder to do GRC Engineering. You don’t. I don’t want people to be bogged down in scripting. I want them to be systems thinkers focusing on...

<p>Kenny and Mike sit down with Dixon Wright, Head of Delivery at Eden Data, for a grounded and insightful conversation on security, compliance, and building smarter systems.</p> <p>They cover:</p> <p>- Dixon’s journey...

<p>"The AI age we're in is going to force startups to compete in the higher upper echelon of risk assurance."</p> <p>Jack Rumsey Head of GRC at Swimlane explains why startups will no longer have the luxury of maturing...

<p>Security isn’t sexy. It’s laundry. You know you need to do it, but you’d rather have a tool do it for you.</p> <p>Kenny Scott and Mike Schreiner from Paramify sit down with George Manuelian from RapidFort to talk...

<p>FedRAMP as we know it is changing. In this episode, Mike and Kenny sit down with Mike “Waffle” Craig, founder and CEO of Vanaheim Security and longtime cloud and cybersecurity leader, to unpack what FedRAMP 20x means...