In this episode of Risk Is Our Business, Captain Michael Rasmussen welcomes Jannie Wentzel and Andrew Gunter, Partner and Principal GRC Consultants at Cential, for a candid conversation about where risk management and GRC go wrong, particularly inside American organizations, and what it takes to set a better course.

Jannie and Andrew take the helm for much of the discussion, beginning with the bad. They explore the habits, structures, and assumptions that leave risk and compliance programs disconnected from the business, including approaches built around satisfying requirements rather than helping organizations understand uncertainty and make better decisions.

The conversation turns to the state of risk management in the United States and some of the recurring weaknesses they encounter in practice. Rather than treating those problems as inevitable features of GRC, they examine what organizations can do differently and why effective risk management begins with understanding the business, its objectives, and the decisions people are actually trying to make.

From there, the discussion moves naturally into what good risk management looks like. Jannie and Andrew draw on years spent working directly with organizations to discuss the importance of alignment, practical processes, clear ownership, and GRC programs designed around business value rather than bureaucracy.

More than a prescribed tour through frameworks and methodologies, this episode is a practitioner-led conversation about the state of the profession and the course corrections that can turn GRC from an obligation into something the business genuinely wants on the bridge.