The GRC Engineering Blueprint for the Public Sector w/ Dr. Ibrahim Waziri Jr. from Google

In this episode of the GRC Engineer podcast, Ayoub Fandi interviews Dr. Ibrahim Waziri Jr., Global Insider Risk Lead for the Cloud CISO at Google, to discuss GRC engineering, particularly within the U.S. federal and national security sectors. Dr. Waziri shares his extensive background, including his work with OSCAL, ATO implementations, and various roles in government and the private sector. The conversation covers the definition of GRC engineering, its application across different governance models, the role of tools like OSCAL, and the challenges and benefits of prescriptive frameworks. They explore how to prove the value of GRC in mission-driven environments, the complexities of heterogeneous infrastructures, and the balance between rigor and bureaucracy. Dr. Waziri also shares his vision for the future of GRC engineering, emphasizing regulatory acceleration, the importance of "as code" approaches, and the need for global harmonization.