エピソード

  • The Salus Blueprint: Episode 3 What Do We Actually Know
    2026/11/04
    What questions might a leader might face on a difficult morning? In this special podcast series, Marc Duncan, Bridgett Lee-Young and Scott Pickett of Salus Solutions, explain one useful idea for a variety of corporate professionals such as corporate risk and compliance leaders, anti-bribery and corruption professionals, and then demonstrate how that idea changes a decision. This podcast is also for police and fire chiefs, emergency managers, finance and operations executives, CEOs, boards, and leaders of commercial, public, and private organizations. Over the next 4 weeks, we will be running this special series. In this Episode 3, we move from reports to decision-grade intelligence. We continue the River Bend scenario to explain how raw reports become actionable intelligence for leaders. The panelists distinguish information from intelligence by emphasizing verification, context, confidence levels, and the need to answer “so what,” including triaging fast-moving inputs during response versus slower mitigation phases. We consider “trust but verify,” using multiple sources and alternatives such as forensic data, open-source information, satellite imagery, and patterns of life when human intelligence is unavailable, while clearly stating what is known, believed, unknown, and what would change the assessment. They stress building trusted relationships before crises, integrating functional areas like legal and accounting into decisions, and recognizing differing board risk tolerances through facilitation and reflective questioning. They also address maintaining credibility when assessments change by issuing complete corrections to all prior recipients. Key Highlights 1. “What changes when a raw report becomes intelligence a decision-maker can responsibly use?” 2. “If three people repeat the same unverified story, have we gained three independent sources?” 3. “How do you assess whether a system interruption is recent, confirmed, relevant to Riverbend, and likely to affect an essential service?” 4. “How do you handle a potential vendor integrity concern without accusing anyone prematurely or compromising a legitimate review?” 5. “What should an intelligence briefing say about confidence, limitations, and missing information?” 6. “When would you call in a technical specialist, an investigator, or a local public-safety partner rather than generalize beyond your expertise?” 7. “What does SalINTEL provide that a search engine, an alert feed, or a dashboard cannot determine on its own?” 8. “What new fact would make you change your mind, and how should that update reach the people who acted on the earlier assessment?” Questions for Our Listeners: Even if the warning is credible, can you show which consequence matters most and whether your people can handle it? Next time we turn understanding into risk and capability priorities. About Salus Solutions: “Salus helps organizations understand what matters, make informed protective decisions, and carry them into action. SalCAPA is the method and coordination environment that connects those steps.” Salus Solutions is the sponsor of this podcast series.
    続きを読む 一部表示
    26 分
  • Why Coverbase, Why Now: Native AI Speed and Evidence-Driven Third-Party Risk Management
    2026/11/03
    Innovation comes in many areas and compliance professionals need to not only be ready for it but embrace it. Join Tom Fox, the Voice of Compliance as he visits with top innovative minds, thinkers and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom welcomes Tom interviews CoverBase newcomers Brian Shaw (GTM leader) and Constantine Malaxos (Head of Alliances) on why they joined in 2026 and what is changing in third-party risk management (TPRM). They talk about Coverbase’s “native AI” technology, rapid innovation, and client impact—moving teams from document chasing and backlogs to faster, evidence-backed risk decisions—while complementing existing procurement, contract, and risk systems with time-to-value in weeks. They discuss persistent program pressures such as too many third parties, too few analysts, demand for immediate answers and the need to separate signal from noise using evidence, not questionnaires, to identify gaps against client-specific requirements. Topics include disclosure-driven “need for speed,” SBOM analysis, continuous monitoring for fast-changing AI risks, and advice to run a proof of concept, avoid “AI-ish” tools, choose trusted partners, and start with the highest-friction hotspot. Key Highlights · Why They Joined CoverBase · Why TPRM Matters Now · Native AI vs AI-ish · ROI and Executive Buy-In · Disclosures and Risk Visibility · Managing Risk Continuously Resources Brian Shaw on LinkedIn Constantine Malaxos on LinkedIn Coverbase Tom Fox Instagram Facebook YouTube Twitter LinkedIn My first work of general non-fiction is now out: Deluge Before Dawn, the story of the 2025 flood in Kerr County Texas which killed 119 people and devastated a county. It is a story of tragedy, heartbreak, survival and resilience. It is available on the following sites: Amazon.com Stoney Creek Publishing Barnes and Noble Texas A&M University Press Bookshop.org Google.Books Walmart Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts
    続きを読む 一部表示
    31 分
  • The Salus Blueprint: Episode 2 - The Signal Lost Between Departments, Things Go Wrong?
    2026/10/29
    What questions might a leader face on a difficult morning? In this special podcast series, Marc Duncan, Bridget Lee-Young, and Scott Pickett of Salus Solutions share one useful idea for corporate professionals, including risk and compliance leaders and anti-bribery and corruption professionals, and show how it changes decision-making. This podcast is also for police and fire chiefs, emergency managers, finance and operations executives, CEOs, boards, and leaders of commercial, public, and private organizations. Over the next 4 weeks, we’ll run this special series. In Episode 2, we explore how to break silos with tripwires and dashboards and how organizations should evaluate and act on third-party and operational warnings, using repeated contractor communication failures as a potential red flag. We emphasize forensic assessment to determine whether issues are human, process, or technical, and the importance of timely, credible information and formalizing informal communication channels. This podcast highlights that third parties are often the highest risk and that companies must perform and test vendor due diligence beyond tabletop exercises, distinguishing mistakes from potentially criminal conduct through evidence, paper trails, and investigative techniques. Salus describes a multidisciplinary approach that integrates operational, financial, legal, and supply-chain risks; documents findings for defensibility; and helps leaders interpret data through predefined triggers/tripwires and business rules. They also address board oversight needs through dashboards, common operating pictures, and framing updates as confirmed, validating, and unknown, previewing the next episode on separating credible warnings from rumors. Key highlights: 1. “A staff member says the contractor’s communications system has failed twice. What makes that report useful rather than a vague complaint? ” 2. “What minimum context do you seek: time, place, affected service, source, what was observed, what was inferred, and who already knows? ” 3. “What is the difference between a report of an irregular vendor request and an allegation of bribery? How do we avoid prejudging it? ” 4. “What happens when operations knows of an interruption, compliance knows of a vendor concern, and emergency management knows a storm is coming, but no one sees all three?” 5. “Who should see what information, and how does an organization protect confidentiality while connecting the right people? ” 6. “What does SalCAPA do to help people exchange observations, requests, records, and status? What must a human still decide? ” 7. “What should a leader do when a report is incomplete but potentially consequential? ” Questions for Our Listeners: Write down one current concern, capture who reported what, when, the potential effect, and the next person responsible for checking it. Could your organization tell the difference between a credible warning and a convincing rumor before making a costly or dangerous decision? Next time, we show how information becomes qualified intelligence. About Salus Solutions: “Salus helps organizations understand what matters, make informed protective decisions, and carry them into action. SalCAPA is the method and coordination environment that connects those steps.”
    続きを読む 一部表示
    24 分
  • The Salus Blueprint: Episode 1 - What Must Keep Working When Things Go Wrong?
    2026/10/27
    What question might a leader face on a difficult morning? In this special podcast series, Marc Duncan, Bridget Lee-Young, and Scott Pickett of Salus Solutions share one useful idea for corporate professionals, including risk and compliance leaders and anti-bribery and corruption professionals, and show how it changes a decision. This podcast is also for police and fire chiefs, emergency managers, finance and operations executives, CEOs, boards, and leaders of commercial, public, and private organizations. In Episode 1, we take a deep dive into what matters most: mission-critical dependencies and Salus Solutions’ Preparedness Toolkit. Key Highlights: “If I run an organization and tell you, ‘We have a risk register and an emergency plan,’ what would you ask first to learn whether I know what matters most?” “What does ‘protect the mission’ mean for a hospital support service, a school, and a commercial operator in everyday terms?” “Who must be in the first conversation besides the chief executive? What will the front-line operator know that the board may not?” “Where do dependencies such as communications contractors, utilities, responders, or key individuals enter that conversation?” “Can you explain SalINTEL, SalTHIRA, SalCAPA, and SalOPS without an acronym chart, using this one organization?” “What decisions remain with the client, and what work can Salus advise on or support?” “If a board has only ten minutes, what one question should it ask management to expose an assumption about continuity?” Questions for Our Listeners: Write down one essential service and ask what people, systems, outside organizations, and decisions it depends on. “If a worker reported a failing dependency tonight, could your organization capture it and get it to someone who understands its significance before the service stops?” Next time, we examine how to collect what matters. About Salus Solutions (https://salus.solutions): “Salus helps organizations understand what matters, make informed protective decisions, and carry them into action. SalCAPA is the method and coordination environment that connects those steps.”
    続きを読む 一部表示
    27 分
  • Jeff Kushner on GRC Lessons from Kerrville 2025: Why a Policy Isn’t a Control
    2026/10/20
    Innovation comes in many areas, and compliance professionals need to not only be ready for it but embrace it. Join Tom Fox, the Voice of Compliance, as he speaks with top innovators, thinkers, and creators on the award-winning Innovation in Compliance podcast. In this episode, host Tom interviews GRC professional Jeff Kushner about Fox’s book Deluge Before Dawn and its risk management lessons from the 2025 Kerr County flood that killed 119 people. Kushner argues a policy is not a control: policies must be specific, operationalized, tested, monitored, and continuously improved, with clear roles, successor plans, training, and communication protocols. He contrasts document-centric assurance (having a written plan and passing inspections) with outcome-centric assurance (whether plans work in real conditions), citing Camp Mystic’s one-page “shelter in place” plan that passed a DSHS inspection two days before the flood. They discuss alerts as information that requires predetermined response sequences, the need for redundancies in communications, proactive scenario exercises (“what happens next?”), benchmarking against other sites like Mo Ranch, and board-level questions on impact, accountability, timelines, and measurable protections for life, property, and data. Kushner also describes his role at Allgress and its Rexina solution for identifying compliance and risk changes and guiding remediation. Key Highlights: Policy Versus Control Alerts and Control Steps Inspection Paradox Outcome-Based Assurance Scenario Testing Exercises Rexina and Allgress Board-Level Risk Questions Resources: Jeff Kushner on LinkedIn Allgress Allgress on LinkedIn Allgress/Rixena For a report Jeff Kushner created on the risk management issues we discussed in the podcast, click here. Tom Fox Instagram Facebook YouTube Twitter LinkedIn
    続きを読む 一部表示
    27 分
  • Dr. David Gruder on Collaborative Accountability and the Psychology of Compliance
    2026/10/13
    Innovation comes in many areas, and compliance professionals need to not only be ready for it but embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom interviews Dr. David Gruder, a clinical and organizational development psychologist. Dr. Gruder is trained in long-range master planning and is an ordained interfaith rabbi, bringing psychological and spiritual principles to business, culture, and compliance. He introduces “collaborative accountability” as a growth-oriented alternative to coercive, shame-based accountability and outlines four interlocking procedures: accountability-capable agreements, consistently elevating best practices, converting breakdowns into growth opportunities, and collaborative disengagement. He defines accountability as taking responsibility for the impacts of how one spends life energy on those to whom commitments are made, distinguishing good intentions from measurable commitments. Gruder describes three competing futures, regressionism, “Homo machina” transhumanism, and “Homo spiritus,” and urges leaders to align vision, mission, and ethics accordingly. He defines organizational nimbleness as resilience plus innovation and emphasizes marrying legal and psychological compliance. Key highlights: Spiritual Lens at Work Collaborative Accountability Why Psychology Matters Defining True Accountability Humanity’s Three Futures Business Ethics and Influence Resources: DrGruder.com TheCESS.com Facebook: @davidgruder / @drdavidgruder X (Twitter): @davidgruder LinkedIn: linkedin.com/in/gruder Instagram: @drgruder YouTube: @DavidGruder Tom Fox Instagram Facebook YouTube Twitter LinkedIn My first work of general non-fiction is now out: Deluge Before Dawn, the story of the 2025 flood in Kerr County, Texas, which killed 119 people and devastated a county. It is a story of tragedy, heartbreak, survival, and resilience. It is available on the following sites: Amazon.com Stoney Creek Publishing Barnes and Noble Texas A&M University Press Bookshop.org Google.Books Walmart Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts
    続きを読む 一部表示
    30 分
  • Pamela Gupta on Closing the AI Governance Implementation Gap
    2026/10/06
    Innovation comes in many areas and compliance professionals need to not only be ready for it but embrace it. Join Tom Fox, the Voice of Compliance as he visits with top innovative minds, thinkers and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom welcomes Pamela gupta, the author of De-Risking AI Adoption: The AI Trust Layer: An AI Governance Playbook. Pamela Gupta, is the founder of Trusted AI and author. She and tom discuss the closing the AI governance implementation gap between high-level frameworks (e.g., NIST AI RMF, ISO 42001) and use-case execution under rapid AI rollout pressure. Gupta argues organizations struggle to translate principles into actionable, risk-based decisions involving many stakeholders (security, privacy, legal, audit, business, IT, data science), leading either to unmanaged risk or stalled innovation. She emphasizes AI-specific risks such as bias, transparency, explainability, and accountability, illustrating with Humana’s nH Predict claims system (alleged bias; 90% reversals) plus Amazon’s scrapped hiring model and Air Canada’s chatbot ruling. Gupta outlines her AI TIPS framework (eight pillars, ~80 controls) and contends AI governance can accelerate adoption by defining intake, evidence, and decision processes, even as agentic AI raises risk and uncertainty. Key Highlights · AI Governance Gap · Assessing AI Risk · Bias and Ethics Ownership · Humana Case Study · AI TIPS Framework · Governance as Accelerator Resources Pamela Gupta on LinkedIn De-Risking AI Adoption: The AI Trust Layer: An AI Governance Playbook Website: TrustedAI.AI Podcast: Trustworthy AI: De-Risk Business Adoption of AI Trusted AI Feed: TrustedAI.AI/feed/ X/Twitter: @OutsecureCom LinkedIn: OutSecure Inc. YouTube: OutSecure Inc. Facebook: OutSecure Inc. Tom Fox Instagram Facebook YouTube Twitter LinkedIn My first work of general non-fiction is now out: Deluge Before Dawn, the story of the 2025 flood in Kerr County Texas which killed 119 people and devastated a county. It is a story of tragedy, heartbreak, survival and resilience. It is available on the following sites: Amazon.com Stoney Creek Publishing Barnes and Noble Texas A&M University Press Bookshop.org Google.Books Walmart Innovation in Compliance was recently honored as the Number 4 podcast in Risk Management by 1,000,000 Podcasts
    続きを読む 一部表示
    32 分
  • Doni Hoti on Embedding Advertising Compliance Into Content Creation
    2026/09/29
    Innovation comes in many areas, and compliance professionals need to not only be ready for it but also embrace it. Join Tom Fox, the Voice of Compliance, as he visits with top innovative minds, thinkers, and creators in the award-winning Innovation in Compliance podcast. In this episode, host Tom welcomes Doni Hoti, co-founder and CEO of Adclear. Hoti brings a fascinating perspective on embedding compliance directly into content creation. He begins with the shift in advertising and marketing compliance from a slow, “checkpoint” back-office function to an embedded, revenue-enabling capability. Hoti explains that modern content creation involves many stakeholders and must move at near-real-time speed, while enforcement risk and the cost of losing customer trust keep rising. He describes how AI has broken traditional review models by increasing both content volume and speed expectations and how Adclear uses horizon scanning across global regulators, agentic AI, and company-specific policies to deliver more deterministic, auditable compliance guidance tied to rulebooks. Fox and Hoti then turn to third-party and affiliate challenges, regulator-ready documentation and audit trails, and business outcomes such as reduced review SLAs, scalable approvals, and revenue uplift, with marketing increasingly owning the process alongside legal and compliance. Key highlights: Compliance Disconnect Trust and Shopfront Embed Compliance Third-Party Risks AI as Solution Audit Trail Proof Resources: Adclear Doni Hoti on LinkedIn Tom Fox Instagram Facebook YouTube Twitter LinkedIn My first work of general non-fiction is now out: Deluge Before Dawn, the story of the 2025 flood in Kerr County, Texas, which killed 119 people and devastated a county. It is a story of tragedy, heartbreak, survival, and resilience. It is available on the following sites: Amazon.com Stoney Creek Publishing Barnes and Noble Texas A&M University Press Bookshop.org Google.Books Walmart This week only, the Kindle e-book version is available for $0.99 on Amazon.
    続きを読む 一部表示
    31 分