Advertise on podcast: Our Cybersecurity Mission

In this episode of Our Cybersecurity Mission, host Allie Krings sits down with Megan McCormick, Team Lead of the Professional Writing Team at KirkpatrickPrice, to explore an often-overlooked part of the audit process: report writing. Why does an audit firm have a dedicated professional writing team? Because clear communication matters. By having experienced writers focus on transforming audit results into meaningful reports, auditors can focus on what they do best: assessing security and compliance. The result is a final report that is concise, easy to read, and valuable to a wide range of stakeholders, from technical leaders to executives with little familiarity with cybersecurity frameworks and acronyms like SOC 2, NIST, and PCI DSS. Tune in to learn how thoughtful communication helps organizations better understand their risks, compliance posture, and path forward. At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. From audit readiness to final reporting, we partner with organizations to deliver meaningful assurance and measurable business value. Ready to strengthen your security and compliance posture? Connect with an expert today to learn how KirkpatrickPrice can help you achieve your goals.

In this episode, host Allie Krings sits down with John Burkhardt to explore the growing challenge of Shadow IT, or Citizen Developers, and why it's becoming a major concern for organizations. As employees adopt new software, AI tools, and applications to solve business problems faster, many companies find themselves with technology operating outside of established oversight and governance processes. John explains that Shadow IT isn't always bad. In many cases, it starts with employees looking for more efficient ways to work. The real challenge comes when those tools and applications are unknown to leadership, unmanaged by IT, or create security and compliance risks. The conversation covers AI coding tools, unauthorized software, the importance of visibility, and how organizations can support innovation without creating a "Wild West" environment. At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. From audit readiness to final report, our team partners with organizations to deliver meaningful assurance and real business value. Ready to strengthen your security and compliance posture? Connect with an expert today to learn how KirkpatrickPrice can help you achieve your goals.

In this episode, host Allie Krings sits down with Vice President of Privacy Assurance Services Mark Hinely to challenge some of the biggest misconceptions organizations have about privacy. From the common belief that “privacy doesn’t apply to us,” to the struggle of identifying what data truly requires protection, Mark explains why privacy is more than a checkbox exercise. Mark walks through how organizations should think about sensitive information, why compliance isn’t just a matter of black and white, and how establishing clear rules for handling different types of data can reduce risk while supporting business goals. A thoughtful approach to privacy often pays off in ways that leaders don’t expect (like true, measurable value). At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you're going to invest in an audit, it should deliver real value. That's why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

In this episode, host Allie Krings sits down with Senior Penetration Tester Leslie Ryan to explore one of the most overlooked security risks in modern applications: logic flaws.  Leslie explains how attackers look beyond traditional vulnerabilities and search for ways to manipulate an application into doing something its developers never intended. From hidden trust relationships between systems to real-world examples involving financial transactions and application workflows, the conversation highlights why some of the most impactful vulnerabilities aren't bugs at all. Listeners will gain insight into the pentester mindset, why logic flaws often evade automated tools, and what organizations can do to better identify and mitigate these risks before attackers find them. At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you're going to invest in an audit, it should deliver real value. That's why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve.  Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

In this episode, host Allie Krings sits down with Chief Technology Officer Greg Ciampa to tackle one of the biggest questions organizations face today: how to use AI responsibly while protecting company and client data. Greg shares practical guidance on evaluating AI tools, understanding how providers use and protect data, and building governance frameworks that enable innovation while reducing risk. The conversation explores the importance of executive leadership involvement, acceptable use policies, enterprise AI protections, and the critical questions every organization should ask before adopting AI. The more sensitive the data, the higher the risk, making governance, transparency, and thoughtful AI adoption essential for long-term success. At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

Host Allie Krings sits down with Senior Developer Robert Clark to explore the growing impact of AI in software development and how organizations can use it effectively without sacrificing quality or trust.  Robert shares how KirkpatrickPrice established company-wide standards for AI usage, creating a consistent approach that has improved efficiency, increased productivity, and allowed teams to take on more work. He also discusses the importance of treating AI as a powerful tool rather than a replacement for expertise, explaining how developers can recognize when AI is providing inaccurate, incomplete, or misleading recommendations.  At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve.  Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

KirkpatrickPrice is on a mission to help 10,000 people elevate the standards for cybersecurity and compliance. In this episode, Senior Professional Writer Nathan Stephens breaks down policy writing. Join Our Cybersecurity Mission: https://www.linkedin.com/showcase/our-cybersecurity-mission Expert Tips to Help Craft Your Information Security Policy Style Guide for Creating Good Policies 15 Information Security Policies Every Business Should Have The Purpose of Policies and Procedures   We believe if you are going to do an audit, it should be worth it. At KirkpatrickPrice, you’ll have a partner guide you from audit readiness to final report so you get the assurance you deserve. Ready to learn about how we can help your business to meet your challenging security and compliance goals?  Connect with an expert.

In this episode, host Allie Krings sits down with Bob Welch, an auditor at KirkpatrickPrice with a background spanning large national accounting firms, banks, and risk and compliance work, to break down vendor management — and why it matters more than most organizations realize. What's the difference between vendor management, vendor due diligence, and third-party risk management? (Spoiler: not much.) Bob walks through how to categorize your vendors, what to look for when reviewing their audit reports, and why the CrowdStrike incident is a perfect example of why annual re-evaluations aren't optional. He also shares a real story of a vendor that had no documentation, no audit reports, and was storing client data overseas — and why that was an immediate deal-breaker. Whether you're just starting to think about vendor risk or looking to tighten up a program you already have, this conversation is a practical reminder that if it's your data, it's your problem. At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you're going to invest in an audit, it should deliver real value. That's why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

In this episode, host Allie Krings sits down with Michael Petucci, Senior Information Security Auditor at KirkpatrickPrice, who brings over 25 years of experience in healthcare, IT, and security to the conversation. What does vulnerability management actually look like from an auditor's perspective? Michael walks through how he approaches an audit, why organizations are often surprised by what they find in their own asset inventory, and what best practices actually look like when it comes to patching, prioritizing, and staying ahead of threats. Plus — his number one piece of advice for everyday people trying to protect themselves online. Spoiler: don't click. At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you're going to invest in an audit, it should deliver real value. That's why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

In this episode, host Allie Krings sits down with Randy Bartels, VP of Security Services, to get the real scoop on Scope—one of the most misunderstood (and most critical) parts of an audit. What’s included in scope? What’s not? And is everything really just “in the cloud”? Randy breaks down common misconceptions, explains why scope matters more than most organizations realize, and shares how clearly defining it upfront can save time, stress, and surprises during an audit. Whether you’re preparing for your first audit or looking to make your next one run more smoothly, this conversation offers practical insight and clarity you won’t want to miss. At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

In this episode, host Allie Krings sits down with Robert Clark, Senior Developer at KirkpatrickPrice, to dig into vulnerability management in development. What exactly is vulnerability management, and how do development teams even start to identify what's out of date or at risk? Robert walks through the tools his team relies on, how to handle false positives, and why continuously scanning your environment matters — even when your code works exactly as intended. Plus, he shares a practical take on AI in the development process and why you shouldn't always rush to update everything the moment a new version drops. At KirkpatrickPrice, we're on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission   / our-cybersecurity-mission  . If you're going to invest in an audit, it should deliver real value. That's why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.https://kirkpatrickprice.com/contact/

From the stage to cybersecurity—Sam Disney’s career path wasn’t exactly traditional. Tune in to hear how a background in music and drama helped shape a successful career and what it takes to become the go-to person in the field.  At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

The CI:CD Episode Senior Solutions Developer Peter Kraus sits down to talk all things CI/CD—what it is, why it matters, and how it keeps modern development moving fast without breaking things. Along the way, the conversation takes a nostalgic detour to the early days of the internet, including a nod to MySpace. So be honest… who was in your Top 8?  At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve.  Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

The IOT Episode “Hey Alexa…” We all have them—but what are IoT devices, really? As helpful as Internet of Things technologies can be, what risks do they introduce along the way? In this episode, Steven Collins sits down with host Allie Krings to unpack the reality of IoT devices, from smart homes to smart workplaces. Is the risk the same at home as it is on the job? Tune in for a practical look at convenience, security, and what users should know before plugging in. At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join Our Cybersecurity Mission. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve Ready to strengthen your security and compliance posture? Connect with an expert today and learn how we can help you meet your toughest goals.

In this episode, host Allie Krings sits down with Mark Hinely, VP of Privacy Assurance Services, to demystify website privacy. What does it really mean when you opt in - or opt out? What responsibilities do websites have when it comes to handling your data? And what actually happens when a website doesn't follow through? Take a listen as they break down expectations, risks, and real-world implications. At KirkpatrickPrice, we’re on a mission to help 10,000 organizations raise the bar for cybersecurity and compliance. Join our cybersecurity mission: https://kirkpatrickprice.com/podcast/. If you’re going to invest in an audit, it should deliver real value. That’s why we partner with you from audit readiness to final report, ensuring you get the assurance you deserve. Ready to strengthen your security and compliance posture? Connect with an expert today: https://kirkpatrickprice.com/contact/? and learn how we can help you meet your toughest goals. Explore the podcast!