Trust Spotlight
Trust Spotlight is our series featuring the people behind every security review, every policy, and every customer trust conversation. They’re often behind the scenes, playing a huge role in keeping deals moving. We think they deserve a spotlight too.
Our fifth guest is Chad Fryer, Head of GRCP at Docker. In his words, “I look after all things Governance, Risk, Compliance, and Privacy. I help sales pull the correct levers within engineering to maximize revenue of all of our products, and I give security enough teeth to get their initiative done by ensuring risk is surfaced to the business to influence roadmapping.”
He also built GigaChad GRC, his own open-source GRC platform.
How did you get into security?
I got into security when someone locally saw my security-curious messages on LinkedIn. They asked me the hard questions I wasn’t asking myself about my motivation for wanting to get into security. When the timing was right for me, they helped me land my first role in a SOC at an MSSP.
What do most people get wrong about security reviews?
Most people ask the wrong questions. They create a questionnaire that is meant to check a box rather than actually assess the security of a vendor in such a way to allow them to create a meaningful risk score. It is a checkbox, compliance exercise rather than a risk-based exercise that helps define your supply chain security posture. It is a big swing and a miss for many companies.
What’s something Wolfia does that you haven’t seen from other tools?
It gets AI right and automates the correct tasks. With the advent of AI, folks are racing to automate all of the things without asking if the task they are automating is the right task to automate. They are also doing so in a vanilla way that causes the task to be automated without providing enough of the right context to ensure the task creates the most value. Wolfia is crushing the context that causes the automated tasks to complete with a high confidence rate and provides maximum usable output. However, the most important piece Wolfia is doing that sets it apart from all other tools is removing the layers between their engineers and customers. When the engineers are with the customers and asking the right questions, their revisions based off customer feedback are providing more value than filtering customer feedback through CS > Jira > Product Manager > Engineer. Too much gets lost in translation and there is never enough context for a usable output. Wolfia leads the pack for all GRC tools in this regard.
Thank you, Chad, for always asking the right questions, and for making us better every time you do.
Know someone who should be in the Trust Spotlight? Let us know on LinkedIn.