Welcome to Risk Is Our Business, where we explore the principles of Governance, Risk Management, and Compliance — to reliably achieving objectives, navigating uncertainty, and act with integrity.
Here, we follow the Prime Directive of Risk Management: No decision or strategy moves forward without understanding its impact on our objectives, our resilience, and our values. Because risk isn’t the enemy, it’s the mission.
After all, risk is our business.
Join us as we go boldly into the world of GRC.
Red Alert: Risk, Resilience, and the Art of Readiness with Joshua Haravay
Recorded live at Mitratech Interact, this episode of Risk Is Our Business features Captain Michael Rasmussen in conversation with Joshua Haravay, Business & Cyber Resilience Architect at Smarsh, for a discussion about what it really means for an organization to be resilient when disruption strikes.
The conversation begins by examining the difference between business continuity and resilience. While the two are closely related, they are not necessarily interchangeable. Michael and Joshua explore what distinguishes them, where they overlap, and how resilience extends beyond maintaining operations to encompass an organization's ability to respond and adapt when circumstances change.
From there, they examine the relationship between resilience and risk management, discussing why the two disciplines depend on one another. Understanding uncertainty helps organizations prepare for disruption, while resilience capabilities influence how effectively those risks can be managed. They also explore the growing complexity of modern businesses, where dependencies and interdependencies between people, processes, technology, and third parties can turn an isolated problem into a much larger operational challenge.
The discussion then turns to tabletop exercises and micro-simulations, and how organizations can use them to sharpen their awareness, test assumptions, and strengthen their ability to recognize and respond to emerging threats. Joshua shares his perspective on why meaningful preparation requires more than documenting procedures. It requires giving people opportunities to practice, learn, and improve before they find themselves making decisions under pressure.
And, of course, Captain Michael poses a familiar question about what keeps Joshua awake at 1 a.m. when it comes to risk and resilience. The conversation explores the concerns that occupy resilience professionals when they consider the complexity of the organizations they are responsible for protecting and the possibility of disruptions they may not see coming.
19 Oct 2026
Keeping Pace at Warp: AI, Audit Transformation, and Breaking Down Silos with Jan Murry & Rachel Nelson
Recorded live at Optro CRX 2026, this episode of Risk Is Our Business features Captain Michael Rasmussen in conversation with Jan Murry and Rachel Nelson of GE Aerospace, exploring how internal audit can keep pace with a business environment where change rarely waits for traditional assurance processes to catch up.
The conversation begins with a familiar question about what keeps risk and GRC leaders awake at night. For Jan and Rachel, one of the greatest concerns is whether their organizations and teams are responding to change quickly enough. Drawing on their experiences at GE Aerospace, they discuss some of the biggest challenges they have encountered, the lessons learned along the way, and why breaking down organizational silos is essential to effective risk management.
They also examine what bad risk management looks like and how organizations can avoid repeating familiar mistakes. A central part of the discussion focuses on GE Aerospace's internal audit technology transformation and how Jan and Rachel worked to align that effort with broader enterprise objectives. Rather than treating the implementation of new technology as an achievement in itself, they explain the importance of demonstrating measurable business value and ensuring that innovation improves how the function operates.
The conversation then turns to artificial intelligence and the challenge of balancing rapid technological innovation with the governance and security requirements of a global aerospace company. Michael, Jan, and Rachel explore how organizations can embrace emerging capabilities while maintaining the oversight, discipline, and accountability needed to manage the risks that accompany them.
They also discuss the human side of transformation, including the cultural shifts and change management strategies required to make new ways of working stick. From encouraging user adoption to establishing standardized processes and consistent execution, Jan and Rachel share how meaningful transformation depends as much on people and organizational alignment as it does on technology.
21 Sept 2026
Beyond the Red Alert: What Good GRC Actually Looks Like with Jannie Wentzel & Andrew Gunter
In this episode of Risk Is Our Business, Captain Michael Rasmussen welcomes Jannie Wentzel and Andrew Gunter, Partner and Principal GRC Consultants at Cential, for a candid conversation about where risk management and GRC go wrong, particularly inside American organizations, and what it takes to set a better course.
Jannie and Andrew take the helm for much of the discussion, beginning with the bad. They explore the habits, structures, and assumptions that leave risk and compliance programs disconnected from the business, including approaches built around satisfying requirements rather than helping organizations understand uncertainty and make better decisions.
The conversation turns to the state of risk management in the United States and some of the recurring weaknesses they encounter in practice. Rather than treating those problems as inevitable features of GRC, they examine what organizations can do differently and why effective risk management begins with understanding the business, its objectives, and the decisions people are actually trying to make.
From there, the discussion moves naturally into what good risk management looks like. Jannie and Andrew draw on years spent working directly with organizations to discuss the importance of alignment, practical processes, clear ownership, and GRC programs designed around business value rather than bureaucracy.
More than a prescribed tour through frameworks and methodologies, this episode is a practitioner-led conversation about the state of the profession and the course corrections that can turn GRC from an obligation into something the business genuinely wants on the bridge.
Who has been a guest on Risk is Our Business
Names identified in recent episode analyses. Showing up to five guests.
Patrick Risch
Benjamin Lüders
Graeme Keith
Kristina Wiese Tranberg
Norman Marks
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Apple Podcasts (US)
5.0 / 5
4 ratings
Spotify
5.0 / 5
4 ratings
Podcast Authority Score: 28 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
