Welcome to GRC Times — your trusted source for practical insights on governance, risk management, and regulatory compliance.
This channel simplifies complex regulations, compliance and control concepts and latest development into short, easy-to-understand videos using real-world examples designed for professionals who want to stay informed and ahead in today’s fast-changing regulatory environment.
On this channel you will learn about:
- Governance and risk management fundamentals
- Regulations, Standard and Compliance best practices
- Internal controls and oversight principles
- Practical risk and compliance strategies
- Insights to help organizations build stronger and more resilient systems
Subscribe to GRC Times for simple explanations that make risk and compliance easier to understand and apply in the real world. Visit our website www.grctimes.com for more best practices, free checklists for your compliance related activities.
GRC Times
Quick question for this community:
Does your organization have a written policy on employee use of ChatGPT, Copilot, Claude, and other generative AI tools?
🟢 Yes — we have a formal GenAI Acceptable Use Policy
🟡 Sort of — we have informal guidance but nothing documented
🔴 No — we have nothing
⚫ We banned AI tools entirely
No judgment. But I'll tell you this: when Samsung engineers pasted proprietary source code into ChatGPT three separate times in 2023, Samsung didn't have a policy either.
New video dropping tomorrow — the exact step-by-step to write a GenAI Acceptable Use Policy that actually protects your company. With real policy language you can copy and adapt.
Plus a free downloadable template.
This one's been the most requested topic for months. Stay tuned.
3 months ago | [YT] | 0
View 0 replies
GRC Times
NEW VIDEO 🎬
"Your Risk Heat Map Is Useless — Here's How to Fix It in 5 Minutes"
Here's the uncomfortable truth: most risk heat maps are decoration. They look professional. They use nice colors. And they change absolutely nothing.
I've seen it hundreds of times — a CRO puts up a heat map, the board nods politely, nobody asks a question, nothing changes. The meeting moves on.
That's not a communication tool. That's wallpaper.
In this video, I break down the 5-step framework for building a heat map that actually drives decisions:
Step 1: Anchor your scales (so "High" means the same thing to everyone)
Step 2: Plot residual risk, not just inherent
Step 3: Tie your color zones to risk appetite
Step 4: Add movement arrows and trend indicators
Step 5: Curate — show 12 risks, not 50
Plus the 3 most common mistakes that make heat maps useless.
If you're a risk manager, compliance officer, auditor, or anyone who has to present risk to leadership — this one's for you.
Drop a 🔥 in the comments if your heat map needs a redesign. I know I'm not alone.
3 months ago | [YT] | 0
View 0 replies
GRC Times
Discover how risk management evolved from the classic Three Lines of Defense to the modern IIA Three Lines Model. Learn the key differences, practical applications, and how organizations can improve oversight, collaboration, and controls — explained simply with clear visuals.
👍 Like, share, and subscribe to GRC Times for more governance, risk, and compliance insights.
#ThreeLinesOfDefense #IIAThreeLinesModel #RiskManagement #Compliance #Governance #InternalAudit
3 months ago | [YT] | 0
View 0 replies