Focus
The themes I keep returning to—because they’re where evidence breaks and audit friction shows up.
Control automation
Patterns for automating control execution and evidence capture across the stack—with clear ownership and audit trails.
Evidence engineering
How to move from screenshots and spreadsheets to repeatable evidence pipelines: sources → rules → exceptions → remediation.
GRC platform modernization
How to modernize your GRC tooling so it becomes a system of record—not a ticket graveyard.