GRC Essentials: From the Basics to Mastery with Dustin Bailey

The GRC Podcast

Get ready for a fresh perspective on GRC as we invite Dustin Bailey, the former Security Lead at Twilio Segment, to share his expertise. Listen in as we explore how Dustin fell into GRC - or as he puts it, how GRC chose him - and how he manages to prioritize ruthlessly to extract the most value from his GRC program. Hear how he navigates the challenges of aligning GRC with the various departments, understanding their products and culture, and designing security controls that are widely accepted.
In our chat, Dustin also enlightens us on how GRC intersects with everyday life, using his own experiences during a power outage as an example. We draw parallels between customer calls at Twilio Segment and cost-benefit evaluations he makes when considering risk. Hear how Dustin has had to alter his risk management strategies as data loss risks change with the shift to cloud computing.
Dustin's journey from consulting to an internal resource role offers unique insights into GRC implementation. We discuss the importance of aligning GRC with sales and strategic goals, and how his consulting experience has underscored the need for simple, value-added products. We also touch on the process of getting Twilio Segment's first SOC 2 certification, and how stakeholder involvement is crucial in designing controls. Tune in as we wrap up with a discussion on the importance of stakeholder relationships in GRC, and how Dustin applies GRC principles in real estate investing.
For show notes, please visit The GRC Podcast website.
Sign up for our Bi-Weekly Newsletter

Chapter

1. GRC Essentials: From the Basics to Mastery with Dustin Bailey (00:00:00)

2. How did you choose GRC? (00:02:32)

3. Having a technical background in GRC (00:05:45)

4. Dustin loses power (but has a UPS!) (00:09:47)

5. Application of GRC Principles in Everyday Life (00:12:17)

6. Steve Jobs on Consulting (Theory vs Implementation) (00:18:04)

7. Starting in Consulting (Good or Bad?) (00:20:53)

8. Customer Security Enablement (00:24:13)

9. How does your work advance the business? (00:25:36)

10. Productizing GRC (00:28:38)

11. Design controls with technical stakeholders (00:37:24)

12. Be excited to share your team's work externally (00:50:34)

13. Scaling GRC activities and impact with business growth (00:51:56)

14. Highlighting unsung GRC collaborators (00:58:19)

15. GRC GEM: Immediately improve your GRC work (01:00:26)

16. Dustin's new career path (01:03:35)

17. How to contact Dustin (01:10:00)