The Risk Wheelhouse Podcast
The Risk Wheelhouse is the podcast dedicated to exploring how RiskTech is reshaping the future of risk management. Hosted by our experts, Ori Wellington and Sam Jones, each episode delves deep into Integrated Risk Management (IRM), offering insights into the latest trends, technologies, and strategies. Join us to stay ahead in the ever-evolving risk landscape and empower your organization with actionable knowledge.
S4E8: Beyond Binders - GRC's Radical Shift to Integrated Risk Management and Enterprise Trust
Governance, Risk, and Compliance (GRC) has undergone a remarkable transformation. What was once the "department of no" – characterized by manual checklists, endless audits, and rooms full of binders – has evolved into a strategic verification backbone powering trust across organizations.
This radical shift positions GRC at the center of Integrated Risk Management (IRM), where policies, controls, and compliance data flow dynamically through organizations to provide real-time assurance. The market reflects this evolution, with GRC projected to grow from $12.1 billion in 2025 to $25.1 billion by 2032 – not as an unavoidable cost, but as a strategic investment that builds market-enhancing trust and enables bolder innovation.
S4E7: The Academic Reckoning of Risk Management
Risk management evolution isn't just about new acronyms. It's about organizational survival in an increasingly complex world. When we examine the journey from checkbox compliance to genuine integration, we uncover profound lessons about how businesses navigate danger and why some approaches fundamentally fail when pressure hits.
This deep dive traces the fascinating progression from Governance, Risk and Compliance (GRC) through Enterprise Risk Management (ERM) to today's Integrated Risk Management (IRM) framework. Drawing from John Wheeler's powerful "Risk Ignored" series, we explore how GRC emerged after Sarbanes-Oxley as an elegant solution on paper that quickly collapsed under its own weight. As Norman Marks memorably quipped, GRC often stood for "Governance, Risk Management, and Confusion."
S3E8: The Risk Ignored - Losing the Secret Formula
When Risk Intelligence Is Just a Lie You Tell Yourself
In this episode of The Risk Wheelhouse, Ori Wellington and Sam Jones take listeners deep inside the boardroom drama, technology illusions, and costly consequences that define one of the most revealing chapters in risk history. Drawing from The Risk Ignored Part I, Chapter 4 by John A. Wheeler, they uncover how SunTrust’s billion-dollar implosion wasn’t just a financial disaster—it was a failure of architecture, mindset, and nerve.
And the kicker? The very tools sold to prevent this kind of catastrophe—first-generation GRC platforms—were part of the problem.
S3E6: The Strategic Risk Revolution—Why Traditional GRC Is Falling Short
In Episode S3E6 of The Risk Wheelhouse Podcast, hosts Ori Wellington and Sam Jones unpack a revealing analysis by McKinsey & Company, highlighting critical weaknesses in traditional Governance, Risk, and Compliance (GRC) frameworks. Despite significant investment, many organizations report disappointing results from legacy GRC approaches. Wellington and Jones discuss five systemic shortcomings identified by McKinsey that underscore why traditional GRC struggles in today’s complex, rapidly evolving business environment.
S3E3: The Missing M—Why Risk Needs Managers, Not Just Playbooks
The moment a baseball season begins, hope fills the air as teams dream of championship glory. But as any sports fan knows, talented players alone can't win championships—they need strong managers making smart calls and adjusting strategy in real-time. This powerful analogy perfectly captures what's often missing in corporate risk management today.
Many companies believe their Governance, Risk and Compliance (GRC) programs provide comprehensive protection against uncertainty. Yet in practice, these programs frequently amount to little more than documenting potential problems and checking compliance boxes—the equivalent of having a playbook without a coach actively managing the game. This fundamental gap between identifying risks and actively managing them represents the critical difference between traditional GRC approaches and the emerging discipline of Integrated Risk Management (IRM).
S2E5: Integrated Risk Management - Lessons from Oracle's GRC Exit
In this episode of The Risk Wheelhouse, hosts Ori Wellington and Sam Jones dive into a major development reshaping the Integrated Risk Management (IRM) landscape: Oracle's decision to sunset its legacy GRC suite by May 2025. The conversation explores the implications of this move, why it signals a broader shift in risk management strategies, and how businesses can turn this challenge into an opportunity.
S1E6: How Does GRC Fit into IRM and Who Are the Top GRC Vendors in 2024?
The discussion is focused on Wheelhouse Advisors’ “2024 IRM Quarterly Insight Report - GRC Edition,” which discusses the evolution of governance, risk, and compliance (GRC) and its importance within the broader framework of integrated risk management (IRM). The report highlights the benefits of integrating GRC applications into a unified IRM platform, providing a comprehensive view of all risks, fostering strategic decision-making, and enhancing regulatory compliance.