Enterprise Risk Management Explained | Building a Risk Program from Scratch

More from Prabh Nair

1. 

   31 Aug 2026 · 53 min

   Threat Modeling for Agentic AI: Stop Treating Agents Like APIs

   Agentic AI is changing the way applications are designed, tested, deployed, and secured.Traditional application security focuses on APIs, authentication, authorization, databases, code, sessions, and technical attack surfaces.But Agentic AI introduces a different challenge.A user may not need technical knowledge to influence the system.A simple natural language prompt can make an AI agent classify intent, call a tool, retrieve data, generate a response, trigger a workflow, or influence a business decision.In this podcast episode, Prabh speaks with Akansha about Threat Modeling for Agentic AI…

2. 

   27 Aug 2026 · 1 hr 2 min

   The New Frontline: Why Hospitals Are The Biggest Cyber Targets

   Healthcare cybersecurity is not only about protecting networks, servers, applications, or medical devices. Shantanu https://www.linkedin.com/in/shantanushastrish/In this podcast episode, Prabh speaks with Shantanu about healthcare cybersecurity, connected medical devices, hospital security, medical device threat modeling, security by design, cyber resilience, and AI in healthcare.Modern hospitals are now highly interconnected technology ecosystems. Patient monitors, scanners, ultrasound devices, laboratory systems, hospital applications, cloud platforms, networks, and AI-enabled tools…

3. 

   24 Aug 2026 · 1 hr 3 min

   AAISM Practice Questions Masterclass | Think Like an AI Security Manager

   AAISM exam preparation is not only about memorizing AI terms.It is about learning how to think like an AI security manager.In this session, I explains AAISM-style practice questions using a practical, manager-focused approach. The focus is on understanding how to choose the best answer when multiple options look correct. The session starts with an AI loan approval case study and connects it with AI governance, AI risk management, AI technologies and controls, enterprise monitoring, and continuous improvement.The key message is simple:AAISM is about governance, risk, controls, evidence, and…

4. 

   17 Aug 2026 · 1 hr 28 min

   IT Application Controls Explained with Payroll Case Study | Practical IT Audit Masterclass

   In this podcast, Prabh speaks with Chinmay, who has tested more than 100 automated controls, to explain IT Application Controls using a practical payroll process case study. https://www.linkedin.com/in/chinmaykulkarni22/https://chinmaykulkarni22.substack.com/Chinmay explains that application controls are automated actions within systems that help prevent or detect errors without manual intervention. Unlike IT General Controls, which are more standardized across applications, IT Application Controls are specific to a business process, system logic, workflow, configuration, and transaction…

5. 

   13 Aug 2026 · 58 min

   Auditing AI Systems in Critical Sectors

   AI is moving from simple human-to-system interaction to agentic AI, where machines interact with other machines, take actions, exchange data, and influence business decisions.This creates a major challenge for cybersecurity, GRC, audit, compliance, and assurance professionals: Priyank Sonihttps://www.linkedin.com/in/priyank-soni-iima/How do you audit an AI system when you cannot fully see the model, logic, architecture, or internal decision-making process?In this podcast, Prabh speaks with Priyank Soni, a cybersecurity, AI/ML, digital trust, governance, and assurance leader, about auditing…

6. 

   10 Aug 2026 · 1 hr 10 min

   CISO Masterclass: Building Security Programs for the AI Era

   AI adoption is accelerating across enterprises, but most security programs were not designed for the speed, scale, and complexity of AI-driven threats.In this CISO Masterclass episode, Prabh speaks with Agnidapta Sarkar, a seasoned cybersecurity evangelist and digital resilience strategist, about how CISOs must evolve their security programs for the AI era.Agni explains why organizations must first understand their digital assets, business impact, material risk, and enterprise architecture before rushing into AI adoption or AI security controls.The discussion goes deep into why traditional…

7. 

   5 Oct 2026 · 47 min

   How to Prepare for OffSec AI-300 AI Red Teaming

   Prepare for the Offsec OSAI+ certification with insights on interview strategies for 2026 cybersecurity roles.Ankit Bharathan joins Prabh Nair to discuss the path to mastering the Offsec OSAI+ (AI-300) certification. This conversation focuses on the practical skills required for professionals aiming to enter the specialized field of AI Security.Beyond the technical curriculum, we analyze effective interview strategies and the specific criteria used for candidate selection in 2026. Whether you are looking to pivot your career or sharpen your expertise, this session provides a roadmap to…

8. 

   1 Oct 2026 · 14 min

   Breaking Down Ransomware: Insights and Analysis

   Welcome to our deep dive into the world of ransomware. In this video, we'll unravel the intricacies of ransomware investigation , exploring their mechanisms, common vectors, and the tools used for analysis. From understanding the initial infection point to decrypting locked files, our comprehensive analysis will equip you with the knowledge to stay one step ahead of cyber threats.In this video, we'll be breaking down ransomware: what it is, how it works, and some tips on how to investigate ransomware . We'll also be discussing the different types of ransomware analysis, including static and…

9. 

   28 Sep 2026 · 18 min

   Real ITGC Interview Questions from Big 4 Firms : Must-Know Questions

   Welcome to our channel! In this video, we dive deep into realistic ITGC interview questions frequently asked in Big 4 firms. If you're preparing for an ITGC (IT General Controls) interview with top consulting firms like Deloitte, PwC, EY, and KPMG, this video is a must-watch!What You'll Learn:The most common ITGC interview questions asked by Big 4 firms.Insider tips on how to answer these questions effectively.Real experiences from candidates who have successfully navigated ITGC interviews.Essential knowledge for ITGC consulting and audit roles.Why Watch This Video?Securing a job in ITGC…

10. 

    24 Sep 2026 · 3 min

    What is Asymmetric Encryption

    Unlock the secrets of secure online communication with our easy-to-grasp explanation of asymmetric cryptography. Discover how it protects your digital conversations like an unbreakable lock and key system, ensuring that only you and the intended recipient can access the message's true meaning. Dive into the world of cybersecurity with us! #AsymmetricCryptography #CyberSecurityExplained #DigitalSafety #EncryptionBasics #SecureCommunication #TechExplained #CryptographyForBeginners #OnlinePrivacy #TechSavvy #StaySecure

Every episode of Prabh Nair →