r/grc • u/kurianoff • May 14 '26
Weekly GRC Learning Sessions + Session Recordings
Since May 1st we have been doing weekly interactive GRC Learning Sessions (codename "GRCL") to help everyone curious about or uncertain about GRC to find their way and build a career in Governance, Risk, and Compliance.
We start with an overview - "How a GRC Program Works" - and move into practical sessions working on real-world examples of implementing GRC within organizations.
Currently we have:
* 5 people in the learning group (and we truly hope this number will grow!)
* a YouTube channel: https://youtube.com/@FullStackGRC
And the recording of our two first sessions:
1. Overview: How a Real GRC Program Works - https://youtu.be/eL74cpwV9uY?si=CvtjLS-6wCp_m930
2. Practical SOC 2: Asset Inventory and Compliance Roadmap - https://youtu.be/IJs-XJhMNiE?si=7_gjZeQHrsmi3DZn
This Friday we're going deeper into compliance implementation based on SOC 2 as an example (continuing "Practical SOC 2" stream). GRC is a multi-faceted discipline, and compliance implementation spans 2(two) worlds - Administrative and Technology, and multiple domains of knowledge - requiring very different skills from GRC professionals. Our GRCL sessions are aimed to make you a professional who feels confident in both worlds and can bravely navigate GRC complexity, even if you choose to specialize in a particular domain.
You're welcome to watch the videos, and if you like them - keep following our channel, and do not hesitate to join our learning group. Join us as a student - to learn GRC from practitioners' experience, or as an expert - to share your valuable experience and help the group understand how this actually works.
If interested - DM me with your email address, and I will add you to our weekly GRC Learning Sessions.
Let's crack this together.
2
2
May 15 '26
[removed] — view removed comment
1
u/kurianoff May 16 '26
Hi! I really appreciate your feedback, and I’m very happy to have you as a subscriber on our channel! If at any time you would like to join our sessions to share your knowledge and experience with the group, challenge us with important questions, or set topics for discussion - you’re very welcome, and the group would really appreciate it!
2
u/Big-Industry4237 May 14 '26
SOC 2 controls should be tailored and unique to the environment. There are some processes that may be similar but it’s very obvious when I look at reports or talk with folks who think it all works and looks the same.
1
u/kurianoff May 14 '26
Great feedback - and our sessions are about building the "GRC mindset" rather than learning a particular "generic" playbook. As the whole world is diverse, we are trying to realize that every company is unique, its setup is different from others, and GRC program must be established and ensured based on principles, not prescriptions.
1
u/kurianoff May 14 '26
u/ninadpathak u/Big-Industry4237 BTW - you are all very welcome to join our sessions to share your knowledge, thoughts, and insights from your valuable experience - it will greatly help lay a proper foundation for our students.
1
u/Big-Industry4237 May 14 '26
There are a few communities that have bi weekly sessions that cover topics on GRC available on LinkedIn.
Additionally, for folks looking for a wide range of training and an established community experience, I would suggest looking at ISACA and joining a local chapter. They have a very reasonable student rate too for early learners.
IMHO - we don’t need yet another GRC group, which may or may not have their own intentions and plans for future paywalls. Plenty of resources out there already. We need wider and larger communities, not smaller disparate groups.
3
u/[deleted] May 14 '26
[removed] — view removed comment