ABOUT THIS PODCAST 🔗
The Paramify Podcast is a practical, occasionally chaotic show about GRC, risk management, and staying audit-ready without losing your mind. It’s part talking security strategy, and part group therapy.
We talk with cybersecurity and GRC leaders, including CISOs, auditors, founders, and security engineers, about FedRAMP and FedRAMP 20x, SOC 2, CMMC, NIST RMF, the shift toward continuous evidence, and everything in between.
Learn about what we do at Paramify here: www.paramify.com
Update frequency:
every 20 days
Average audio length:
51 minutes
Guest interviews
English
United States
63 episodes
since July 6, 2023
episodic
LATEST EPISODE 🔗
Class A certifications are live. Mike and Kenny get into why it took this long.
The debate during 20x design was whether an existing SOC 2 or ISO could earn a FedRAMP certification outright. The answer was no. What they landed on instead was a path: show your SOC 2, show where it maps to the KSIs,…
SEARCH PAST EPISODES
Search past episodes of The Paramify Podcast.
PREVIOUS EPISODES 🔗
CMMC just hit pause again, and this time it might actually lead somewhere better. In this episode, Kenny and Isaac sit down with AJ Yawn, founder of the GRC Engineering Club, bestselling author of GRC Engineering for AWS, and GRC Engineering leader at Rippling, for a deep dive into CMMC's Phase 2 s…
"If the community wins, America's going to win. If America wins, the world is going to win."
That's Tyler Sweatt's mindset as CEO of Second Front.
Tyler's a West Point grad and Army vet who's spent his career at the intersection of defense and tech. He's been with Second Front for six years, and …
Justin Scott didn't set out to build a security program. But after Vasion's customers started asking hard questions about cloud security, he ended up leading the company through ISO 27001, SOC 2, FedRAMP Moderate, and all the way to FedRAMP High, with IL6 on the horizon. He breaks down what actuall…
Monthly vulnerability scans and POA&M spreadsheets aren't going to cut it anymore. Kenny and Isaac break down FedRAMP NTC-0014 and CISA BOD 26-04, the two mandates reshaping how cloud service providers approach vulnerability management, and what CSPs need to do before the December 7, 2026 deadl…
"For years defense contractors kept hearing CMMC's coming. And then it kept not coming. So they grew this boy who cried wolf mentality where once it finally really was coming, they were like, I've heard that before." - Matt Bruggeman
Kenny and Mike sit down with Matt Bruggeman, Director of Federal…
Is legacy compliance actually dead?
In this episode of the Paramify Podcast, we sit down with Bhanu Jagasia and Vincent Tham from BladeStack to talk about the massive shift happening in the GRC world. From the "dark matter of data" to the transition toward FedRAMP 20X, we’re moving away from 1,50…
"Anytime someone says something is dead, that's exactly what I have to go learn." - Ethan Troy
Kenny and Isaac sit down with Ethan Troy, Senior GRC Engineer at TRM Labs, Head of AI Research at GRC Engineering Club, and Hacker at hackIDLE. One of the GOATs of GRC engineering. He's been shipping GRC…
In this episode of The Paramify Podcast, Kenny sits down with Justin Merhoff to talk about what makes security actually work: usability, speed, adaptability, and real-world adoption.
Justin shares lessons from nearly three decades in cybersecurity, from his time in the U.S. Army to leading securit…
Today's episode is An Apropos of Nothing.
This episode is optional, you can skip it if you want, but it's a pretty honest glimpse into what hanging out with us is actually like.
Disclaimer: The podcast and artwork embedded on this page are from Paramify, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
PODCAST SEARCH ENGINE
You can use our website to search 3,826,623 podcasts and 196,124,220 episodes by people, places, or topics.
I have no special talent. I am only passionately curious, and
I listen to podcasts.
‐ Albert "Llamacorn" Einstein
SEARCH PAST EPISODES
Search past episodes of The Paramify Podcast.
CLAIM THIS PODCAST
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post classified ads for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
podcaster interview...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
our official X (formerly Twitter) account will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
EDIT
Thank you for helping to keep the podcast database up to date.
