{"podcast":{"title":"GRC Uncensored","slug":"grc-uncensored-7039393","podcast_index_feed_id":7039393,"rss_url":"https://feeds.acast.com/public/shows/6702dcb9c88f09c3e0b9a10a","website_url":"https://feeds.acast.com/public/shows/grc-uncensored","image_url":"https://assets.pippa.io/shows/6702dcb9c88f09c3e0b9a10a/1741868280073-98dc972f-f9c8-433b-ab33-a977b7f15a82.jpeg","author":"Elliot Volkman and Troy Fine","episode_count":24,"summary":"GRC Uncensored is an experimental podcast designed to elevate real conversations with GRC professionals, auditors, regulators, and those building programs around it. Your hosts are Troy Fine and Elliot Volkman. Hosted on Acast. See acast.com/privacy for more information.","last_synced_at":"2026-07-23T06:20:29.446813+00:00","page_url":"https://stenobird.com/podcast/grc-uncensored-7039393"},"episode":{"title":"The TPRM Tug-of-War: Trust, Tools, and the AI Tradeoff","slug":"the-tprm-tug-of-war-trust-tools-and-the-ai-tradeoff","published_at":"2025-07-31T10:00:00+00:00","page_url":"https://stenobird.com/podcast/grc-uncensored-7039393/the-tprm-tug-of-war-trust-tools-and-the-ai-tradeoff","show_page_url":"https://stenobird.com/podcast/grc-uncensored-7039393","url":"https://grcpod.substack.com/","audio_url":"https://sphinx.acast.com/p/open/s/6702dcb9c88f09c3e0b9a10a/e/688ab3d5be8bca0ca2c692d7/media.mp3","summary":"This week, the crew sits down with Henry Stanley—founder of Fabrik and engineer-turned-GRC troublemaker-to dig into the messy reality of third-party risk management (TPRM). With experience across fintech, startups, and security consulting, Henry brings a pragmatic but optimistic view of how the industry can move forward. From the limits of SOC 2 and the myth of standardization to the risks and rewards of AI-powered questionnaires, the group unpacks why TPRM is so fragmented—and why that’s not necessarily a bad thing. They also get real about AI in audits, the future role of assurance professionals, and why human connection still matters. 06:30 – Why TPRM Is Fragmented by Nature 09:00 – SOC 2 Isn’t Enough (And Never Was) 13:30 – Does Anyone Really Trust Audit Reports? 17:30 – Blacklists, Quality Checks & the SOC 2 Vibe Check 20:00 – The Rise of AI in Vendor Assessments 25:30 – AI Answers vs. AI Confidence 28:30 – Auditing the Auditors (and Their AI) 32:00 – Reasonable Assurance in an AI World 35:30 – Skepticism, Trust, and Human-in-the-Loop Auditing 38:00 – Does AI Kill Creativity? A Side Quest 44:00 – Will TPRM Be Agent-to-Agent in the Future? Guest: Henry Stanley, Founder of Security Program.io Hosts: Troy Fine, Kendra Cooley Producer: Elliot Volkman Runtime: ~56 minutes Hosted on Acast. See acast.com/privacy for more information.","meta_description":"This week, the crew sits down with Henry Stanley—founder of Fabrik and engineer-turned-GRC troublemaker-to dig into the messy reality of third-party risk…","key_points":[],"chapters":[],"topics":[],"duration_seconds":3022,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/grc-uncensored-7039393/episodes/the-tprm-tug-of-war-trust-tools-and-the-ai-tradeoff/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/grc-uncensored-7039393/the-tprm-tug-of-war-trust-tools-and-the-ai-tradeoff.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}