This new #InfoSec thing called the GRC Engineer continues to make me laugh. Mostly because the info is repackaged agile BS, it assumes a lot, and a lot of foundational information is not being accounted for because of SaaS tools.
Building something on top of someone else’s services is a huge risk for the system that is informing risk.
I am at a loss as to effectively communicate the circle jerk of compliance is not security, and vice versa.
LeeRayl
npub1ny…rsms6
2026-09-04 00:55:51 UTC
Author Public Key
npub1nyesyaxhtxs40xfy79y5pwc4trreyhlmekevyh8sn8g9w5ze9jzsersms6Seen on
wss://relay.ditto.pubPublished at
2026-09-04 00:55:51 UTCEvent JSON
{
"id": "ff061bdb1f14a868eb07d2141c4113e1d0f0f993e35a4e93161c7e1900009bb2",
"pubkey": "99330274d759a1579924f14940bb1558c7925ffbcdb2c25cf099d05750592c85",
"created_at": 1788483351,
"kind": 1,
"tags": [
[
"t",
"infosec"
],
[
"proxy",
"https://infosec.exchange/users/leerayl/statuses/117210044941883018",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "This new #InfoSec thing called the GRC Engineer continues to make me laugh. Mostly because the info is repackaged agile BS, it assumes a lot, and a lot of foundational information is not being accounted for because of SaaS tools.\n\nBuilding something on top of someone else’s services is a huge risk for the system that is informing risk. \n\nI am at a loss as to effectively communicate the circle jerk of compliance is not security, and vice versa.",
"sig": "b84b00cf769662edcbfb8dc8cd71e94202cfcfd2c36c58cf4691bc9cab6dd3c9879674a3b2b5e2e8d47b5fa841724236aab9ce66fb76c7ff58ea8ec16ddfba4c"
}