Fame Host (https://fame.so) Trust Issues https://podcasts.fame.so/the-trust-issues https://feeds.fame.so/the-trust-issues For decades, government contractors and regulated SMBs have been trapped inside compliance checkboxes - it's time for change. They’re on the lookout for real security solutions, and Trust Issues is where that conversation begins. Produced by BEMO and hosted by Bruno Lecoq, the show pulls back the curtain on what’s actually happening inside the CMMC, GRC, and cybersecurity ecosystem. Each episode brings together auditors, implementers, GRC platforms, and business leaders to unpack CMMC, zero trust, and modern security. With every conversation, we decode the “industry drama” and explore what it really takes to build secure, resilient, and audit-ready organizations using Microsoft-centric security and practical GRC frameworks. Tune in and learn how to turn compliance into a competitive advantage. BEMO en Fri, 27 Mar 2026 09:27:03 +0000 Thu, 21 May 2026 13:29:29 +0000 https://content.fameapp.so/uploads/4jq4k571/f6027f00-2d0a-11f1-b296-35e3858469d3/f6028000-2d0a-11f1-8957-0b83e03f5608.png Trust Issues https://podcasts.fame.so/the-trust-issues For decades, government contractors and regulated SMBs have been trapped inside compliance checkboxes - it's time for change. They’re on the lookout for real security solutions, and Trust Issues is where that conversation begins. Produced by BEMO and hosted by Bruno Lecoq, the show pulls back the curtain on what’s actually happening inside the CMMC, GRC, and cybersecurity ecosystem. Each episode brings together auditors, implementers, GRC platforms, and business leaders to unpack CMMC, zero trust, and modern security. With every conversation, we decode the “industry drama” and explore what it really takes to build secure, resilient, and audit-ready organizations using Microsoft-centric security and practical GRC frameworks. Tune in and learn how to turn compliance into a competitive advantage. BEMO For decades, government contractors and regulated SMBs have been trapped inside compliance checkboxes - it's time for change. They’re on the lookout for real security solutions, and Trust Issues is where that conversation begins. Produced by BEMO and hosted by Bruno Lecoq, the show pulls back the curtain on what’s actually happening inside the CMMC, GRC, and cybersecurity ecosystem. Each episode brings together auditors, implementers, GRC platforms, and business leaders to unpack CMMC, zero trust, and modern security. With every conversation, we decode the “industry drama” and explore what it really takes to build secure, resilient, and audit-ready organizations using Microsoft-centric security and practical GRC frameworks. Tune in and learn how to turn compliance into a competitive advantage. No No episodic BEMO For decades, government contractors and regulated SMBs have been trapped inside compliance checkboxes - it's time for change. They’re on the lookout for real security solutions, and Trust Issues is where that conversation begins. Produced by BEMO and hosted by Bruno Lecoq, the show pulls back the curtain on what’s actually happening inside the CMMC, GRC, and cybersecurity ecosystem. Each episode brings together auditors, implementers, GRC platforms, and business leaders to unpack CMMC, zero trust, and modern security. With every conversation, we decode the “industry drama” and explore what it really takes to build secure, resilient, and audit-ready organizations using Microsoft-centric security and practical GRC frameworks. Tune in and learn how to turn compliance into a competitive advantage. For decades, government contractors and regulated SMBs have been trapped inside compliance checkboxes - it's time for change. They’re on the lookout for real security solutions, and Trust Issues is where that conversation begins. Produced by BEMO and hosted by Bruno Lecoq, the show pulls back the curtain on what’s actually happening inside the CMMC, GRC, and cybersecurity ecosystem. Each episode brings together auditors, implementers, GRC platforms, and business leaders to unpack CMMC, zero trust, and modern security. With every conversation, we decode the “industry drama” and explore what it really takes to build secure, resilient, and audit-ready organizations using Microsoft-centric security and practical GRC frameworks. Tune in and learn how to turn compliance into a competitive advantage. cybersecurity podcast, compliance podcast, SOC 2, cybersecurity, compliance, risk management, security frameworks, cybersecurity stories, compliance myths, security culture, CISO insights, SMB cybersecurity, BEMO team-bmp@fame.so No No No How BEMO Aced CMMC Level 2 https://podcasts.fame.so/e/lnqw5q9n How BEMO Aced CMMC Level 2 8 No No 81nv3yl1 Getting CMMC Level 2 certified isn't about checking a box. It's about fundamentally transforming how your organization operates, and the path to certification is far more rigorous than most companies anticipate. In this episode of Trust Issues, Brandon and Bruno Lecoq share their firsthand experience achieving CMMC Level 2 certification as an MSSP, walking through the mock audit process, the documentation challenges they encountered, and the operational changes required to maintain compliance at scale. Getting CMMC Level 2 certified isn't about checking a box. It's about fundamentally transforming how your organization operates, and the path to certification is far more rigorous than most companies anticipate. In this episode of Trust Issues, Brandon and Bruno Lecoq share their firsthand experience achieving CMMC Level 2 certification as an MSSP, walking through the mock audit process, the documentation challenges they encountered, and the operational changes required to maintain compliance at scale. 

This is a candid breakdown of what actually happens during a five-day assessment, why the preparation phase matters more than most realize, and how scoping decisions made early can make or break your certification timeline.

What You’ll Learn:

  • Why the mock audit is non-negotiable and how to structure your audit team across multiple departments
  • The real scope of documentation you'll need and the operational reality of audit weeks
  • Why setting your scope boundary correctly in Phase 1 determines everything downstream
  • How automation and ticketing discipline transform from "nice to have" to a survival requirement
  • The hidden cost of MSSP certification and why "self-tested and compliant" claims should raise red flags
  • Why preparation isn't a sprint, but rather a sustained operational shift

Episode Chapters: 

00:00 Introduction 
00:38 How BEMO Achieves CMMC Level 2 Certification as an MSSP
01:50 Why the Mock Audit Is Your Only Risk-Free Test Run
05:17 What Happens During a Five-Day Mock Audit Assessment
09:18 The 240 Fail-Critical Controls That End Your Certification
12:40 Building a Cross-Functional Audit Team Beyond IT
15:13 The 10-Day Window to Fix Mock Audit Findings
28:22 Why Documentation Prep Takes Months, Not Weeks
29:36 Scoping as an MSSP: How Your Boundaries Affect Your Customers
30:58 Why Uncertified MSSPs Fail Your Customer's Audit
33:45 Most Organizations Are Operating at 30% Maturity While Claiming Readiness
35:33 Three Layers of Prep Before Your Official Audit
37:26 Why Artificial Scoping Boundaries Get Rejected at Phase One
39:08 The Scoping Session: Where Most Organizations Fail
40:54 Key Takeaways & Closing Thoughts 

Quotes:

"What I would say to all our customers, you have to do a mock. So what was interesting from a BEMO perspective is we did the mock - it was one week, starting at 7 AM Pacific until 3 PM, every day for five days, very intense. You go through with the assessor, they go through all your controls, and from a people perspective on IT, we had 100% no problem, no control, but we ended up with five documentation issues."

"They cannot tell you how to fix it. They just say you failed; we needed to see that, and we didn't see it, or this was wrong. But now you go fix it - they don't tell you how. So it's not like you come back and hope they like how you fixed or changed it."

"People for sure underestimate the prep. From an IT perspective, if people work with us, we do the IT, but what people don't realize is that at the end, we go with them to their audit, but we are only IT. We are not the HR, we are not the one who represents their company. Their procedure is their procedure. You have to know your procedure and know the policy because it's your policy."

"For me, going through CMMC is a best practice, and I will never run a business without running it the way CMMC does it. Yes, it's more work, but it makes total sense. I have learned a best practice, and now BEMO is following that best practice."

Connect with the team: 

👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/ 

👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq  

👉 BEMO Website: https://www.bemopro.com/ 

Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 19 May 2026 13:00:00 +0000 BEMO BEMO 2521 Getting CMMC Level 2 certified isn't about checking a box. It's about fundamentally transforming how your organization operates, and the path to certification is far more rigorous than most companies anticipate. In this episode of Trust Issues, Brandon and Bruno Lecoq share their firsthand experience achieving CMMC Level 2 certification as an MSSP, walking through the mock audit process, the documentation challenges they encountered, and the operational changes required to maintain compliance at scale. Getting CMMC Level 2 certified isn't about checking a box. It's about fundamentally transforming how your organization operates, and the path to certification is far more rigorous than most companies anticipate. In this episode of Trust Issues, Brandon and Bruno Lecoq share their firsthand experience achieving CMMC Level 2 certification as an MSSP, walking through the mock audit process, the documentation challenges they encountered, and the operational changes required to maintain compliance at scale. CMMC Level 2 certification, CMMC audit process, mock audit preparation, MSSP compliance, CUI data handling, security documentation, SSP (System Security Plan), compliance framework, NIST framework implementation, control assessment, C3 PAO assessment, documentation errors in compliance, policy and procedure alignment, evidence collection for audits, IT control validation, compliance automation, ticketing systems for security, passwordless authentication compliance, baseline policy deployment, cross-control verification, No No Security Lessons from a Microsoft Veteran https://podcasts.fame.so/e/xn127k48 Security Lessons from a Microsoft Veteran 7 No No 703rymp1 Dive into the evolving world of cybersecurity and compliance with Bruno Lecoq and Brandon Lecoq. This episode uncovers the reality of securing your organization using a streamlined Microsoft approach and why proper implementation takes dedication. Discover the hidden risks of ignoring basic security protocols and how continuous monitoring can protect your business from unseen threats. Join Bruno and Brandon Lecoq for a detailed conversation on building resilient security programs and navigating the complex world of CMMC and SOC 2 frameworks. Bruno shares the foundational story behind BEMO and his transition from a twenty-year career at Microsoft to creating a cybersecurity powerhouse for SMBs. Throughout this episode, we unpack the sheer volume of daily threats facing organizations and how a dedicated Security Operations Center filters through tens of thousands of logs to identify risks. 

The discussion explores why a unified Microsoft approach heavily reduces complexity and accelerates your timeline for audit readiness. You will also learn the truth about compliance timelines and why those offering certificates in a few weeks are putting your business in serious danger. 

From the absolute necessity of enforcing multifactor authentication for admin accounts to understanding why your managed service provider falls under the scope of your external audit, this episode provides a comprehensive roadmap for protecting your business.

What You’ll Learn:

  • The benefits of adopting a Microsoft-centric security strategy
  • How Microsoft Secure Score acts as an indicator of audit readiness
  • The process of filtering thousands of daily security logs through a SOC
  • Why implementing MFA is a non-negotiable step for safeguarding accounts
  • How to verify your MSP's qualifications for CMMC audits

Episode Chapters: 

00:00 Introduction 
01:07 Leaving Microsoft to build BEMO 
05:32 Choosing a Microsoft-centric approach 
13:51 Azure Sentinel and SOC reporting 
16:41 Tracking Microsoft Secure Score 
18:36 Why compliance timelines vary 
20:50 The dangers of cheap compliance 
25:20 Enforcing MFA for administrators 
28:29 Processing daily security logs 
34:38 Building your policy framework 
45:41 Understanding CMMC certifications

Quotes:

"I always said I owe my life to Microsoft. I worked 20 years there, and now we are BEMO. We are a Microsoft partner and one of their top 100 cybersecurity partners in the world."

"Half of the company doesn't have an admin with no MFA, and you're like, okay. That's it. So easy to work."

"I welcome the third-party assessor because I want to validate that my system is as good as I can do it. I can never guarantee 100% security, but I know our Secure Score is high, and someone outside checked what we did."

Connect with the team: 

👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/ 
👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq 
👉 BEMO Website: https://www.bemopro.com/







Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 12 May 2026 13:00:00 +0000 BEMO BEMO 1449 Dive into the evolving world of cybersecurity and compliance with Bruno Lecoq and Brandon Lecoq. This episode uncovers the reality of securing your organization using a streamlined Microsoft approach and why proper implementation takes dedication. Discover the hidden risks of ignoring basic security protocols and how continuous monitoring can protect your business from unseen threats. Dive into the evolving world of cybersecurity and compliance with Bruno Lecoq and Brandon Lecoq. This episode uncovers the reality of securing your organization using a streamlined Microsoft approach and why proper implementation takes dedication. Discover the hidden risks of ignoring basic security protocols and how continuous monitoring can protect your business from unseen threats. CMMC level 2 compliance, Microsoft 365 security, SOC 2 compliance, cybersecurity for SMBs, Azure Sentinel SIEM, security operations center, compliance frameworks, DOD contractor security, managed security services, Microsoft Defender, identity and access management, security incident response, compliance audit, Microsoft licensing for security, threat detection, No No This CMMC Myth Is Costing You $200K a Year https://podcasts.fame.so/e/18p75v9n This CMMC Myth Is Costing You $200K a Year 6 No No z1r4j3w1 What if your CMMC compliance could be built on proven experience rather than guesswork? In this episode of Trust Issues, Brandon sits down with Nicholas Bakewell, Director of Information Security at Acuris Aerospace and Lead CCA at Redwood Cyber Services, to explore what CMMC compliance actually looks like from the inside, how to move from documentation theater to real security, and why the first step isn't buying tools - it's understanding your data. In this conversation, Nicholas shares hard-won insights on navigating assessor discretion, building defensible security programs with Microsoft's ecosystem and the critical mistake most organizations make before they even start. Turns out slow, deliberate planning is the way to go because slow is smooth and smooth is fast! What if your CMMC compliance could be built on proven experience rather than guesswork? In this episode of Trust Issues, Brandon sits down with Nicholas Bakewell, Director of Information Security at Acuris Aerospace and Lead CCA at Redwood Cyber Services, to explore what CMMC compliance actually looks like from the inside. 

What You’ll Learn: 

  • How to shift from compliance theater to real security
  • Why getting your CCP (or CCA) as an implementer gives you negotiating power
  • The data mapping exercise that prevents scope creep and massive rework
  • Why "November 1, 2026" doesn't mean what you think it means
  • How to build a cohesive security stack without multiplying complexity
  • The hard truth about DIB contractors avoiding CMMC

This episode is a reminder that slow, deliberate planning is the way to go because slow is smooth and smooth is fast!

Episode Chapters: 

00:00 Introduction & Meeting Nicholas Bakewell 
02:33 From Marine Corps ISSM to Defense Contractor Security Leader
05:10 Why CMMC Isn't Prescriptive
09:40 CCP as Your Negotiating Power
12:30 Redwood Cyber Services and Breaking Through CMMC Myths
14:00 The CUI Ambiguity Problem & Why Waiting Is a Dangerous Bet
17:48 DFARS 7012 Has Been Required Since 2017
18:54 November 2026 Isn't the Real Deadline: The Real June/July Cutoffs
20:49 Why Niche Suppliers Can't Avoid Compliance
22:21 Life After Certification: Preparing for NIST 800-171 Revision Three
24:56 Compliance is Not Security - A Valid Thought? 
27:39 Reduce Complexity, Master Your Tools Deeply
32:33 Automating Compliance Evidence
34:10 Start Now: Data Discovery & Mapping
35:34 Key Takeaways & Closing Thoughts 

Connect with the team: 

👉 Nicholas Bakewell on LinkedIn: https://www.linkedin.com/in/nsbakewell/
👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/
👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq
👉 BEMO Website: https://www.bemopro.com/  
Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 05 May 2026 13:00:00 +0000 BEMO BEMO 2192 What if your CMMC compliance could be built on proven experience rather than guesswork? In this episode of Trust Issues, Brandon sits down with Nicholas Bakewell, Director of Information Security at Acuris Aerospace and Lead CCA at Redwood Cyber Services, to explore what CMMC compliance actually looks like from the inside, how to move from documentation theater to real security, and why the first step isn't buying tools - it's understanding your data. In this conversation, Nicholas shares hard-won insights on navigating assessor discretion, building defensible security programs with Microsoft's ecosystem and the critical mistake most organizations make before they even start. Turns out slow, deliberate planning is the way to go because slow is smooth and smooth is fast! What if your CMMC compliance could be built on proven experience rather than guesswork? In this episode of Trust Issues, Brandon sits down with Nicholas Bakewell, Director of Information Security at Acuris Aerospace and Lead CCA at Redwood Cyber Services, to explore what CMMC compliance actually looks like from the inside, how to move from documentation theater to real security, and why the first step isn't buying tools - it's understanding your data. In this conversation, Nicholas shares hard-won insights on navigating assessor discretion, building defensible security programs with Microsoft's ecosystem and the critical mistake most organizations make before they even start. Turns out slow, deliberate planning is the way to go because slow is smooth and smooth is fast! CMMC compliance, CMMC level 2 certification, defense industrial base security, NIST 800-171, cybersecurity controls implementation, federal contractor compliance, CUI protection, DFARS 7012, CMMC assessment process, C3PAO audits, lead CCA certification, information security program design, compliance documentation, security baseline configuration, data mapping and discovery, compliance frameworks for contractors, No No The CMMC Myth That's Costing SMBs Millions https://podcasts.fame.so/e/4n9m33qn The CMMC Myth That's Costing SMBs Millions 5 No No v07r2271 The CMMC journey is a lot harder than people think it is, and we’re unpacking the truth on this episode of Trust Issues. Tune in as hosts Brandon and Bruno Lecoq sit down with Raymond King, Senior Customer Success Manager at BEMO, to unpack the real CMMC compliance journey - from the initial self-assessment through final audit. Raymond reveals why most companies dramatically underestimate the work involved, how culture determines success or failure faster than any tool ever will and why self-attested compliance is essentially meaningless until a third party verifies it. Turns out CMMC really isn't a checkbox - it's a foundational shift in how your entire organization operates. The CMMC journey is a lot harder than people think it is, and we’re unpacking the truth on this episode of Trust Issues. Tune in as hosts Brandon and Bruno Lecoq sit down with Raymond King, Senior Customer Success Manager at BEMO, to unpack the real CMMC compliance journey - from the initial self-assessment through final audit.

What You’ll Learn: 

  • Why self-attestation is a false confidence play
  • How CMMC sprawls across your entire organization, not just IT
  • The culture-first truth separates six-month timelines from eighteen-month struggles
  • SOC 2 compliance is trivially easy compared to CMMC's rigor
  • The GRC platform paradox - why buying Drata or Vanta doesn't make you compliant
  • Why only 1,000 companies hold CMMC Level 2 certification today

Turns out CMMC really isn't a checkbox - it's a foundational shift in how your entire organization operates. 

Episode Chapters: 

00:00 Introduction
01:39 From Microsoft Government Specialist to CMMC Reality Check
04:54 Three Types of CMMC Customers: Who Moves Fast and Who Stalls
11:50 The 18-Month Journey: What a Real CMMC Level 2 Audit Actually Looks Like
14:54 GFE Users Aren't Out of Scope - Your Biggest Security Gap
16:21 SOC 2 vs. CMMC: Why Level 2 Is Exponentially Harder
20:26 SPRS Scores and the Illusion of Self-Attestation
24:35 Why External Verification Is Non-Negotiable
28:50 The November Deadline: Self-Attestation Window Is Closing
34:10 Security Culture Beats Infrastructure: Why Some Teams Succeed 6–12 Months Faster
37:19 The GRC Platform Graveyard: Why Buying Tools Doesn't Equal Compliance
40:18 The 60/40 Decision: When Government Contracts Aren't Worth the Effort
42:44 GCC vs. Enclaves vs. Two Tenants: Architecture Decisions That Impact Audit
44:55 Why Complexity Creates Evidence Burden
46:26 CMMC Is Coming for Everyone: DFARS Expansion and What's Next
46:53 Key Takeaways: Start Now, Build Culture, Verify Externally

Quotes:

"It's really that mindset of, are we just turning it on to meet the controls, or is this a core priority for our company? And is this part of our culture? And it makes a huge difference when it's part of the culture."

"A lot of the time, I think customers will go, and they'll buy a solution. So they'll say we bought E5, Microsoft 365 E5. We're compliant. They didn't go and turn everything on. They didn't connect everything. They didn't actually watch what's happening, and they just said, well, we purchased it and that makes us compliant."

"SOC is easy by comparison. With CMMC, we're going to be meeting with customers every month. We're going to be reviewing their stances. We're going to be reviewing if a control fell out of compliance and what happened. We are on top of all of their policies in a way that we don't have to have that level of detail with SOC."

"When I was at Microsoft, and we were analyzing the market size, 70% of businesses that were impacted fell into the small and medium space. And we were estimating around 320,000 companies that had to become CMMC compliant. So, yeah, if you get it done now, you've got a serious advantage."

Connect with the team: 

👉 Raymond King on LinkedIn: https://www.linkedin.com/in/raymondkingmsft/ 
👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/
👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq
👉 BEMO Website: https://www.bemopro.com/  
Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 28 Apr 2026 13:00:00 +0000 BEMO BEMO 2857 The CMMC journey is a lot harder than people think it is, and we’re unpacking the truth on this episode of Trust Issues. Tune in as hosts Brandon and Bruno Lecoq sit down with Raymond King, Senior Customer Success Manager at BEMO, to unpack the real CMMC compliance journey - from the initial self-assessment through final audit. Raymond reveals why most companies dramatically underestimate the work involved, how culture determines success or failure faster than any tool ever will and why self-attested compliance is essentially meaningless until a third party verifies it. Turns out CMMC really isn't a checkbox - it's a foundational shift in how your entire organization operates. The CMMC journey is a lot harder than people think it is, and we’re unpacking the truth on this episode of Trust Issues. Tune in as hosts Brandon and Bruno Lecoq sit down with Raymond King, Senior Customer Success Manager at BEMO, to unpack the real CMMC compliance journey - from the initial self-assessment through final audit. Raymond reveals why most companies dramatically underestimate the work involved, how culture determines success or failure faster than any tool ever will and why self-attested compliance is essentially meaningless until a third party verifies it. Turns out CMMC really isn't a checkbox - it's a foundational shift in how your entire organization operates. CMMC compliance, CMMC level 2 audit, DoD contractor compliance, cybersecurity for contractors, federal compliance, DFARS compliance, compliance certification, security framework, government contracts, compliance assessment, self assessment, compliance audit, GRC platform, Drata, Vanta, Microsoft 365 Government, security training, compliance gaps, compliance maintenance, internal assessment, audit prep, compliance monitoring, No No The CMMC Trap: Why Certification Isn’t Compliance https://podcasts.fame.so/e/1np73zw8 The CMMC Trap: Why Certification Isn’t Compliance 4 No No z0r4xm20 Discipline is the difference between winning and losing - even in the world of security and compliance. In this episode of Trust Issues, hosts Brandon and Bruno Lecoq welcome Cindy Oliveto, Senior Director of Operations at BEMO, to break down why government contractors struggle with certification, how to avoid the "checkbox trap,” and why automation and clear ownership are non-negotiable for real compliance success. This episode serves as a critical reminder that you can have all the certifications in the world, but without operational discipline, they amount to naught. Discipline is the difference between winning and losing - even in the world of security and compliance. In this episode of Trust Issues, hosts Brandon and Bruno Lecoq welcome Cindy Oliveto, Senior Director of Operations at BEMO, to break down why operational discipline is the key to winning the security game: 

What You’ll Learn: 

  • Why repeatable processes and consistent operational rigor across every department are the key to compliance 
  • How SOC 2, ISO 27001, and CMMC differ strategically
  • The "post-certification cliff" you can't ignore and why compliance isn’t a one-time project
  • How to build an unstoppable compliance infrastructure
  • Why your policies must match your actual business operations
  • The hidden prerequisite before deploying AI responsibly

This episode serves as a critical reminder that you can have all the certifications in the world, but without operational discipline, they amount to naught.

Episode Chapters: 

00:00 Introduction 
01:46 From Entrepreneurship to BEMO: Lessons Learnt 
02:36 Building Repeatable Systems with Clear Ownership
05:48 SOC 2 vs. ISO 27001 vs. CMMC: Framework Breakdown
10:20 What to Expect from CMMC Level 2 Audits
15:17 Automating Evidence Capture Across 60 Log Sources
18:38 Why Data Cleansing Must Come Before Deploying AI
23:49 ISO 42001: Why BEMO is Going After this Certification
28:10 The Shadow AI Problem & Stopping Unauthorized Data Exposure
33:42 Why it Should be Team First, Tools Second, Automation Third
36:25 Key Takeaways: Building Sustainable Compliance

Quotes:

"I think looking at the entire operating model across an organization is important. So developing that dependable rhythm across teams, those are the key things that I think build team dependencies, customer trust, and deliver good outcomes."

"It requires a lot of discipline, and companies really aren't sure what or how to implement that discipline. So the scoping required, the ability to track, and the ability to monitor evidence - the challenges really aren't the tools or the security. It is documentation, operational rigor, cadence, and they're just not prepared to embrace that across all of their departments."

"Before you can even start thinking that your agent can have accurate boundaries within how you want it to operate, you need group policies and access privileges in place across your organization."

"Identify your core team that is gonna drive this initiative - who's in charge of it, and who's owning it, and what are the players?"
“We ensure customers know what it takes to manage the security, and manage it from a business standpoint. We give them templates so that it helps them come up to speed real quickly around what those policies and what the controls mean.” 

Connect with the team: 

👉 Cindy Oliveto on LinkedIn: https://www.linkedin.com/in/cindyoliveto/ 
👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/
👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq 
👉 BEMO Website: https://www.bemopro.com/  
Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 21 Apr 2026 13:00:00 +0000 BEMO BEMO 2297 Discipline is the difference between winning and losing - even in the world of security and compliance. In this episode of Trust Issues, hosts Brandon and Bruno Lecoq welcome Cindy Oliveto, Senior Director of Operations at BEMO, to break down why government contractors struggle with certification, how to avoid the "checkbox trap,” and why automation and clear ownership are non-negotiable for real compliance success. This episode serves as a critical reminder that you can have all the certifications in the world, but without operational discipline, they amount to naught. Discipline is the difference between winning and losing - even in the world of security and compliance. In this episode of Trust Issues, hosts Brandon and Bruno Lecoq welcome Cindy Oliveto, Senior Director of Operations at BEMO, to break down why government contractors struggle with certification, how to avoid the "checkbox trap,” and why automation and clear ownership are non-negotiable for real compliance success. This episode serves as a critical reminder that you can have all the certifications in the world, but without operational discipline, they amount to naught. CMMC compliance, CMMC level two certification, SOC 2 compliance, ISO 27001 certification, compliance frameworks, defense contractor compliance, GRC platform, security compliance, operational excellence, compliance automation, compliance audit process, evidence collection, compliance documentation, control management, risk management, vendor management, nonconformity tracking, internal audit, No No Why Security Complacency is the CEO's Greatest Mistake https://podcasts.fame.so/e/vn5j49z8 Why Security Complacency is the CEO's Greatest Mistake 3 No No 80q3xlk0 You wouldn’t drive a car without insurance, would you? Then why run a company without giving security the utmost thought? In this episode of Trust Issues, Brandon Lecoq and Bruno Lecoq, CEO/CISO at BEMO, confront the uncomfortable truth about cybersecurity in SMBs: size doesn't determine risk, security hygiene does. Drawing on real-world attacks from BEMO's 478-client base, Bruno shares critical Microsoft security data, insider threat case studies, and the deceptively simple attack methods that catch most organizations off guard. The conversation leaves the noise behind, focusing on what actually stops attackers and why so many SMBs remain dangerously unprepared. You wouldn’t drive a car without insurance, would you? Then why run a company without giving security the utmost thought? In this episode of Trust Issues, Brandon Lecoq and Bruno Lecoq, CEO/CISO at BEMO, confront the uncomfortable truth about cybersecurity in SMBs: size doesn't determine risk, security hygiene does.

What You’ll Learn: 
  • Why the "we're too small to be targeted" myth costs you everything
  • How to recognize when employees unknowingly hand attackers the keys
  • The three-move attack sequence that works on most SMBs
  • How to interpret fake phishing test results as a leading indicator
  • The ROI calculation that justifies investing in Microsoft 365 E5 
  • Why "we've never been attacked" is a dangerous approach to security 

This conversation leaves the noise behind, focusing on what actually stops attackers and why so many SMBs remain dangerously unprepared.

Episode Chapters: 

00:47 The "Too Small to Target" Myth
01:36 Why Org Size Doesn't Determine Risk
03:09 The MFA Social Engineering Attack
07:28 Why Microsoft 365 E5 Matters
11:30 Phishing Remains the #1 Attack Vector
16:13 42% Click-Through Rate on the First Phishing Test
18:52 How MFA and Anti-Phishing Stop 99% of Automated Attacks
21:40 Key Takeaways & Closing Thoughts 

Quotes:

"I just came back from a Microsoft conference, and they told us 48% of admin accounts on Office 365 don't have MFA. If you take that number, it's about 2,500,000 company accounts with no MFA. I can be by the beach in Rio and give you a nice run somewhere and you will pay me a thousand bucks to give you the key, I just need to do 10 a day, and I have a very nice retirement."

"Across our 478 customer base, the attack volume has no correlation with company size. The only correlation is security hygiene, what matters is your secure score.”

"The number one attack we see is phishing links, finding a way for you to click. If you click, it's game over, especially if you don't have MFA. Even if they click, it's about how fast the hacker can come in and what they can access with those credentials."

"One amazing stat from a conference I attended was that 42% of global admins don't have MFA. For me, this was a shocking number. There are 5,700,000 small businesses in the US, and roughly 2,500,000 company accounts may have a global admin with no MFA. That's a nice target, and of course, hackers are happy about it."

“For all the companies we deploy awareness training to, our average is 42% of people clicking on the first phishing test. It's basically half your company clicking - done. That's why we tell all companies the goal should be below 3%, and if you have three clicks, you're in trouble with HR because we cannot take that risk."

Connect with the team: 

👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/

👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq 

👉 BEMO Website: https://www.bemopro.com/  


Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 14 Apr 2026 13:00:00 +0000 BEMO BEMO 1342 You wouldn’t drive a car without insurance, would you? Then why run a company without giving security the utmost thought? In this episode of Trust Issues, Brandon Lecoq and Bruno Lecoq, CEO/CISO at BEMO, confront the uncomfortable truth about cybersecurity in SMBs: size doesn't determine risk, security hygiene does. Drawing on real-world attacks from BEMO's 478-client base, Bruno shares critical Microsoft security data, insider threat case studies, and the deceptively simple attack methods that catch most organizations off guard. The conversation leaves the noise behind, focusing on what actually stops attackers and why so many SMBs remain dangerously unprepared. You wouldn’t drive a car without insurance, would you? Then why run a company without giving security the utmost thought? In this episode of Trust Issues, Brandon Lecoq and Bruno Lecoq, CEO/CISO at BEMO, confront the uncomfortable truth about cybersecurity in SMBs: size doesn't determine risk, security hygiene does. Drawing on real-world attacks from BEMO's 478-client base, Bruno shares critical Microsoft security data, insider threat case studies, and the deceptively simple attack methods that catch most organizations off guard. The conversation leaves the noise behind, focusing on what actually stops attackers and why so many SMBs remain dangerously unprepared. Microsoft 365 security, MFA implementation, Phishing attacks, Cyber attack prevention, SMB cybersecurity, Admin account security, Office 365 security, Password attacks, Brute force attacks, Insider risk management, Security awareness training, Microsoft Defender, GCC compliance, Conditional access policies, Device management, Intune MDM, Identity and access management, Fake phishing testing, No No BEMO’s Blueprint for the CMMC Revolution https://podcasts.fame.so/e/vnwp2148 BEMO’s Blueprint for the CMMC Revolution 2 No No 81x23m71 Security may never be 100% foolproof, but that’s no reason to stop striving for it. In this episode of *Trust Issues* by BEMO, hosts Bruno Lecoq, CEO and CISO, and Brandon Lecoq, Head of Sales, team up for an eye-opening conversation that cuts through the noise of compliance and security. Together, they tackle why checking compliance boxes isn’t the same as being secure, how a Microsoft-centric architecture can simplify CMMC implementation, and why true compliance takes time—but is always worth the effort. This episode is packed with actionable insights, real talk, and a refreshing dose of clarity on building security that lasts. You’ll also discover why shortcuts in compliance often cost more in the long run and how to approach security with a strategy that works. Don’t miss this dynamic discussion that proves simplicity and strategy are the keys to compliance success. Tune in now for a masterclass in doing security the right way! Security is never 100% foolproof, but that doesn’t mean you should stop striving for it. In this episode of *Trust Issues* by BEMO, hosts Bruno Lecoq, CEO and CISO, and Brandon Lecoq, Head of Sales, dive into how organizations can master the real game of security and compliance—and come out on top.

What You’ll Learn: 

  • How to build a Microsoft 365–centric security stack without complexity
  • Why your Microsoft Secure Score is a leading indicator of compliance readiness
  • The real cost of "quick" compliance. Hint: it’s more than you think
  • How to leverage your SOC and SIEM to generate continuous compliance evidence
  • Why your MSP matters more than you think
  • The non-negotiable baseline: MFA on all admin accounts

This episode drives home a simple yet profound point: no organization can afford to ignore security and compliance in today’s environment! 

Episode Chapters: 

00:00 Introduction 
01:05 Why Bruno Left Microsoft to Build BEMO
05:36 The Microsoft-Centric Approach of Simplicity
09:53 Why Complexity Slows Compliance 
13:26 Azure Sentinel Reporting: Ins and Outs
16:59 Microsoft Secure Score: Your Compliance Readiness Thermometer
20:18 Why True Compliance Takes 6-12 Months, Not 3 Weeks
25:08 How MFA on Admin Accounts Eliminates 99% of Breach Risk
31:21 The Strategies to Automate Compliance Evidence
34:38 Building Your Policy Framework
36:55 Documentation as Your Competitive Advantage
39:06 Only Work With Companies That Care About Security
41:20 Compliance as a Business Legitimacy Signal
44:01 Monitor What You Allow, Don't Block It
45:07 Verify Your MSP's CMMC Credentials on CyberAB.org
49:43 Key Takeaways & Closing Thoughts

Connect with the team: 

👉 Bruno Lecoq on LinkedIn: https://www.linkedin.com/in/brunolecoq/
👉 Brandon Lecoq on LinkedIn: https://www.linkedin.com/in/brandon-lecoq 
👉 BEMO Website: https://www.bemopro.com/  





Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 07 Apr 2026 14:39:00 +0000 BEMO BEMO 3085 Security may never be 100% foolproof, but that’s no reason to stop striving for it. In this episode of *Trust Issues* by BEMO, hosts Bruno Lecoq, CEO and CISO, and Brandon Lecoq, Head of Sales, team up for an eye-opening conversation that cuts through the noise of compliance and security. Together, they tackle why checking compliance boxes isn’t the same as being secure, how a Microsoft-centric architecture can simplify CMMC implementation, and why true compliance takes time—but is always worth the effort. This episode is packed with actionable insights, real talk, and a refreshing dose of clarity on building security that lasts. You’ll also discover why shortcuts in compliance often cost more in the long run and how to approach security with a strategy that works. Don’t miss this dynamic discussion that proves simplicity and strategy are the keys to compliance success. Tune in now for a masterclass in doing security the right way! Security may never be 100% foolproof, but that’s no reason to stop striving for it. In this episode of *Trust Issues* by BEMO, hosts Bruno Lecoq, CEO and CISO, and Brandon Lecoq, Head of Sales, team up for an eye-opening conversation that cuts through the noise of compliance and security. Together, they tackle why checking compliance boxes isn’t the same as being secure, how a Microsoft-centric architecture can simplify CMMC implementation, and why true compliance takes time—but is always worth the effort. This episode is packed with actionable insights, real talk, and a refreshing dose of clarity on building security that lasts. You’ll also discover why shortcuts in compliance often cost more in the long run and how to approach security with a strategy that works. Don’t miss this dynamic discussion that proves simplicity and strategy are the keys to compliance success. Tune in now for a masterclass in doing security the right way! No No Your Compliance Report Might Be Worthless https://podcasts.fame.so/e/08jyqw9n Your Compliance Report Might Be Worthless 1 No No 41pqxl80 Reports of a widespread SOC 2 fraud scheme have exposed the dangerous gap between “compliance theater” and REAL security, forcing the industry to reckon with the cost of cutting corners. In the debut episode of the Trust Issues podcast, host Brandon Lecoq welcomes Joseph Candelario, Business Development, Partnerships and Marketing Executive at BEMO, to discuss an emerging fraud scheme involving a compliance automation platform and audit firms rubber-stamping identical SOC 2 reports without verification. Together, they explore why startups are pressured into fast, cheap compliance solutions, how market innovation is both creating and solving problems, and what SMBs should actually do when faced with unrealistic compliance timelines and too-good-to-be-true vendors. There is a real cost to cutting compliance corners. In the debut episode of the Trust Issues podcast, host Brandon Lecoq welcomes Joseph Candelario, Business Development, Partnerships and Marketing Executive at BEMO, to discuss an emerging fraud scheme involving a compliance automation platform and audit firms rubber-stamping identical SOC 2 reports without verification.

What You’ll Learn: 
  • Why market pressure creates fraud and how to avoid it
  • How to spot a fraudulent compliance vendor before engaging
  • The real cost of due diligence and why legitimate vendors should demand deeper scrutiny
  • Why open-source GRC platforms like GigaChad GRC are disrupting the market
  • How to validate compliance readiness without falling into the trap
  • The ripple effect of fraudulent reports 

Tune in for actionable strategies to position your organization for the growth that 2026 promises to bring.

Episode Chapters: 

00:00 Introduction 
00:36 A widespread SOC 2 fraud scheme finally exposed
02:22 Why market pressure creates compliance shortcuts
07:37 What happens now? 
12:51 Why open-source GRC platforms are price disruptors
19:23 Your due diligence = auditor attestation letters
22:35 Consult peers and advisors before committing to vendors
24:10 The “too good to be true” test 
24:46 Key takeaways & final thoughts 

Quotes:

  1. "I feel like a lot of people in the compliance space have thought that something like this was going on with some companies, and they didn't really know who it was or where it was happening, but it just seemed like there's a lot of, like, a gold rush happening right now."

  1. “There's a lot of startups who are trying to go mid-market enterprise really, really fast because they have a good product. And in order to do that, they're finding that they have pressure to get something like a SOC two in place. And because there's a strong need on the market for that, there are gonna be people and companies that are going to want to do that."

  1. "I had one conversation where the guy was spending three times what many other really, really good reputable firms that we work with charge. And the company is literally 20 people, but they're charging three times the amount for the audit for something that does not in any way need to be that thorough."

  1. “The people that actually care about the space or are passionate about the space will push back on you on certain aspects. You can go find people that would be happy to give their two cents about what your plan is."

  1. "If it sounds too good to be true, it probably is. It's kind of like a fitness analogy - if you see big signs that you should take a pill, you probably shouldn't take that pill. If you know that your IT is not up to par and something is very fast and very cheap, you should be very skeptical because it's probably not very good."
Trust Issues is handcrafted by our friends over at: fame.so
]]> Tue, 31 Mar 2026 14:00:00 +0000 BEMO BEMO 1556 Reports of a widespread SOC 2 fraud scheme have exposed the dangerous gap between “compliance theater” and REAL security, forcing the industry to reckon with the cost of cutting corners. In the debut episode of the Trust Issues podcast, host Brandon Lecoq welcomes Joseph Candelario, Business Development, Partnerships and Marketing Executive at BEMO, to discuss an emerging fraud scheme involving a compliance automation platform and audit firms rubber-stamping identical SOC 2 reports without verification. Together, they explore why startups are pressured into fast, cheap compliance solutions, how market innovation is both creating and solving problems, and what SMBs should actually do when faced with unrealistic compliance timelines and too-good-to-be-true vendors. Reports of a widespread SOC 2 fraud scheme have exposed the dangerous gap between “compliance theater” and REAL security, forcing the industry to reckon with the cost of cutting corners. In the debut episode of the Trust Issues podcast, host Brandon Lecoq welcomes Joseph Candelario, Business Development, Partnerships and Marketing Executive at BEMO, to discuss an emerging fraud scheme involving a compliance automation platform and audit firms rubber-stamping identical SOC 2 reports without verification. Together, they explore why startups are pressured into fast, cheap compliance solutions, how market innovation is both creating and solving problems, and what SMBs should actually do when faced with unrealistic compliance timelines and too-good-to-be-true vendors. SOC 2 fraud, Compliance automation platforms, GRC platforms, Audit firm rubber-stamping, Fraudulent compliance reports, SOC 2 certification, Compliance frameworks, GRC software, Vendor due diligence, Compliance shortcuts, Fast compliance solutions, Evidence collection, Control mapping, policy management, Vendor risk assessment, Open source GRC, Compliance audit process, Compliance implementation timeline, No No Trust Issues Trailer https://podcasts.fame.so/e/x8y73xk8 Trust Issues Trailer 7 No No l04r53z0 Compliance has a trust problem. Everyone says they can get you certified. Everyone claims to be “security-first.” And yet, breaches still happen, systems fail, and data is lost. So what’s actually going on? Trust Issues is the podcast where we unpack what real security looks like, beyond the checkboxes, buzzwords, and sales pitches. We sit down with auditors, implementers, GRC platforms, and industry leaders to explore what’s really happening inside compliance, especially in the world of CMMC and government contracting. If you’re a Head of IT, CISO, or business leader navigating compliance, this is where the real conversations happen. 🔗 Subscribe and follow to stay ahead. #ComplianceMatters #CMMC #Cybersecurity Compliance has a trust problem.
Everyone says they can get you certified.
Everyone claims to be “security-first.”
And yet, breaches still happen, systems fail, and data is lost.
So what’s actually going on?

Trust Issues is the podcast where we unpack what real security looks like, beyond the checkboxes, buzzwords, and sales pitches.
We sit down with auditors, implementers, GRC platforms, and industry leaders to explore what’s really happening inside compliance, especially in the world of CMMC and government contracting.

If you’re a Head of IT, CISO, or business leader navigating compliance, this is where the real conversations happen.

🔗 Subscribe and follow to stay ahead.

#ComplianceMatters #CMMC #Cybersecurity
Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 27 Mar 2026 10:37:00 +0000 BEMO BEMO 59 Compliance has a trust problem. Everyone says they can get you certified. Everyone claims to be “security-first.” And yet, breaches still happen, systems fail, and data is lost. So what’s actually going on? Trust Issues is the podcast where we unpack what real security looks like, beyond the checkboxes, buzzwords, and sales pitches. We sit down with auditors, implementers, GRC platforms, and industry leaders to explore what’s really happening inside compliance, especially in the world of CMMC and government contracting. If you’re a Head of IT, CISO, or business leader navigating compliance, this is where the real conversations happen. 🔗 Subscribe and follow to stay ahead. #ComplianceMatters #CMMC #Cybersecurity Compliance has a trust problem. Everyone says they can get you certified. Everyone claims to be “security-first.” And yet, breaches still happen, systems fail, and data is lost. So what’s actually going on? Trust Issues is the podcast where we unpack what real security looks like, beyond the checkboxes, buzzwords, and sales pitches. We sit down with auditors, implementers, GRC platforms, and industry leaders to explore what’s really happening inside compliance, especially in the world of CMMC and government contracting. If you’re a Head of IT, CISO, or business leader navigating compliance, this is where the real conversations happen. 🔗 Subscribe and follow to stay ahead. #ComplianceMatters #CMMC #Cybersecurity cybersecurity compliance, CMMC compliance, information security, GRC platforms, data protection strategies, risk management cybersecurity, security audits, government contracting security, cybersecurity podcast, compliance best practices, No No Why CMMC Matters: A Deep Dive into Security Standards https://podcasts.fame.so/e/lnqw6ypn Why CMMC Matters: A Deep Dive into Security Standards 6 No No 81nvq581 Why are so many DoD contractors shocked by CMMC… when the security requirements have been around for almost a decade? 😅We break down what’s actually driving the panic: companies realizing they’ve skipped years of basic security work. No MFA. No Intune. Still on GoDaddy. Still on Microsoft Business Basic. Still trusting that “nobody will check.” And now that third-party audits are here, the bill is due.We also talk about the bigger picture: how CMMC is less about “new rules” and more about catching up on modernization. From outdated IT setups to security questionnaires with… let’s call them “creative” answers, this episode shows why CMMC matters and why the organizations who invest early will be the ones who stay competitive.Plus, we get into what contractors should actually do next:➡️ How to identify your real security gap➡️ Why compliance automation tools will be essential➡️ What budgeting realistically looks like➡️ Why taking small steps today saves massive stress laterIf you want a grounded, no-BS explanation of where CMMC came from, why it’s sticking around, and what it means for the future of the defense industrial base, this episode is for you.Follow BEMO for more practical breakdowns on compliance, security, and modernization:🔗 Website: https://www.bemopro.com🔗 LinkedIn: https://www.linkedin.com/company/bemopro Why are so many DoD contractors shocked by CMMC… when the security requirements have been around for almost a decade? 😅

We break down what’s actually driving the panic: companies realizing they’ve skipped years of basic security work. No MFA. No Intune. Still on GoDaddy. Still on Microsoft Business Basic. Still trusting that “nobody will check.” And now that third-party audits are here, the bill is due.

We also talk about the bigger picture: how CMMC is less about “new rules” and more about catching up on modernization. From outdated IT setups to security questionnaires with… let’s call them “creative” answers, this episode shows why CMMC matters and why the organizations who invest early will be the ones who stay competitive.

Plus, we get into what contractors should actually do next:
➡️ How to identify your real security gap
➡️ Why compliance automation tools will be essential
➡️ What budgeting realistically looks like
➡️ Why taking small steps today saves massive stress later

If you want a grounded, no-BS explanation of where CMMC came from, why it’s sticking around, and what it means for the future of the defense industrial base, this episode is for you.

Follow BEMO for more practical breakdowns on compliance, security, and modernization:
🔗 Website: https://www.bemopro.com
🔗 LinkedIn: https://www.linkedin.com/company/bemopro

Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 28 Nov 2025 15:26:14 +0000 2473 Why are so many DoD contractors shocked by CMMC… when the security requirements have been around for almost a decade? 😅We break down what’s actually driving the panic: companies realizing they’ve skipped years of basic security work. No MFA. No Intune. Still on GoDaddy. Still on Microsoft Business Basic. Still trusting that “nobody will check.” And now that third-party audits are here, the bill is due.We also talk about the bigger picture: how CMMC is less about “new rules” and more about catching up on modernization. From outdated IT setups to security questionnaires with… let’s call them “creative” answers, this episode shows why CMMC matters and why the organizations who invest early will be the ones who stay competitive.Plus, we get into what contractors should actually do next:➡️ How to identify your real security gap➡️ Why compliance automation tools will be essential➡️ What budgeting realistically looks like➡️ Why taking small steps today saves massive stress laterIf you want a grounded, no-BS explanation of where CMMC came from, why it’s sticking around, and what it means for the future of the defense industrial base, this episode is for you.Follow BEMO for more practical breakdowns on compliance, security, and modernization:🔗 Website: https://www.bemopro.com🔗 LinkedIn: https://www.linkedin.com/company/bemopro Why are so many DoD contractors shocked by CMMC… when the security requirements have been around for almost a decade? 😅We break down what’s actually driving the panic: companies realizing they’ve skipped years of basic security work. No MFA. No Intune. Still on GoDaddy. Still on Microsoft Business Basic. Still trusting that “nobody will check.” And now that third-party audits are here, the bill is due.We also talk about the bigger picture: how CMMC is less about “new rules” and more about catching up on modernization. From outdated IT setups to security questionnaires with… let’s call them “creative” answers, this episode shows why CMMC matters and why the organizations who invest early will be the ones who stay competitive.Plus, we get into what contractors should actually do next:➡️ How to identify your real security gap➡️ Why compliance automation tools will be essential➡️ What budgeting realistically looks like➡️ Why taking small steps today saves massive stress laterIf you want a grounded, no-BS explanation of where CMMC came from, why it’s sticking around, and what it means for the future of the defense industrial base, this episode is for you.Follow BEMO for more practical breakdowns on compliance, security, and modernization:🔗 Website: https://www.bemopro.com🔗 LinkedIn: https://www.linkedin.com/company/bemopro No No Outsourcing Compliance: When and Why It Makes Sense https://podcasts.fame.so/e/mn4lqz9n Outsourcing Compliance: When and Why It Makes Sense 5 No No x06r2xm0 If you’ve ever wondered whether you should handle compliance in-house or call in experts, this episode gives you the honest, behind-the-scenes breakdown.In this episode, Brandon and Joseph break down the real reasons companies decide to outsource compliance—and why it’s often the smartest move you can make when revenue, timelines, and focus are on the line. If you’ve ever wondered whether you should handle compliance in-house or call in experts, this episode gives you the honest, behind-the-scenes breakdown.

In this episode, Brandon and Joseph break down the real reasons companies decide to outsource compliance—and why it’s often the smartest move you can make when revenue, timelines, and focus are on the line.


Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 21 Nov 2025 13:26:00 +0000 2425 If you’ve ever wondered whether you should handle compliance in-house or call in experts, this episode gives you the honest, behind-the-scenes breakdown.In this episode, Brandon and Joseph break down the real reasons companies decide to outsource compliance—and why it’s often the smartest move you can make when revenue, timelines, and focus are on the line. If you’ve ever wondered whether you should handle compliance in-house or call in experts, this episode gives you the honest, behind-the-scenes breakdown.In this episode, Brandon and Joseph break down the real reasons companies decide to outsource compliance—and why it’s often the smartest move you can make when revenue, timelines, and focus are on the line. No No Smart Compliance Tip 2: Know When to Outsource https://podcasts.fame.so/e/q80vrk48 Smart Compliance Tip 2: Know When to Outsource 4 No No p0knq9m1 Compliance doesn’t have to drain your time (or sanity). One of the biggest challenges for growing teams is knowing when to outsource compliance.If your internal team is stretched thin, or you’re just starting to think about frameworks like SOC 2 or ISO 27001, outsourcing to a Managed Security and Compliance Provider (MSSP) or consultant might be your best move. Compliance doesn’t have to drain your time (or sanity). One of the biggest challenges for growing teams is knowing when to outsource compliance.If your internal team is stretched thin, or you’re just starting to think about frameworks like SOC 2 or ISO 27001, outsourcing to a Managed Security and Compliance Provider (MSSP) or consultant might be your best move.

Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 14 Nov 2025 06:57:00 +0000 1418 Compliance doesn’t have to drain your time (or sanity). One of the biggest challenges for growing teams is knowing when to outsource compliance.If your internal team is stretched thin, or you’re just starting to think about frameworks like SOC 2 or ISO 27001, outsourcing to a Managed Security and Compliance Provider (MSSP) or consultant might be your best move. Compliance doesn’t have to drain your time (or sanity). One of the biggest challenges for growing teams is knowing when to outsource compliance.If your internal team is stretched thin, or you’re just starting to think about frameworks like SOC 2 or ISO 27001, outsourcing to a Managed Security and Compliance Provider (MSSP) or consultant might be your best move. No No Smart Compliance Tip 1: Understand Business Impact https://podcasts.fame.so/e/p8m7v4v8 Smart Compliance Tip 1: Understand Business Impact 1 No No 70v53m31 We kick off our Smart Compliance Tips series with an important mindset shift: understanding your business impact.Too often, IT managers and tech staff are handed compliance tasks simply because leadership assumes “it’s an IT thing.” But compliance is a business-wide responsibility — one that affects revenue, ROI, and company growth.When you start thinking in business terms — metrics, risk, and outcomes — you can better advocate for the tools, staff, and resources you need to do compliance right.Connect with Us:🌐 Website: https://www.bemopro.com We kick off our Smart Compliance Tips series with an important mindset shift: understanding your business impact.Too often, IT managers and tech staff are handed compliance tasks simply because leadership assumes “it’s an IT thing.” But compliance is a business-wide responsibility — one that affects revenue, ROI, and company growth.When you start thinking in business terms — metrics, risk, and outcomes — you can better advocate for the tools, staff, and resources you need to do compliance right.Connect with Us:🌐 Website: https://www.bemopro.com

Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 07 Nov 2025 08:09:00 +0000 1699 We kick off our Smart Compliance Tips series with an important mindset shift: understanding your business impact.Too often, IT managers and tech staff are handed compliance tasks simply because leadership assumes “it’s an IT thing.” But compliance is a business-wide responsibility — one that affects revenue, ROI, and company growth.When you start thinking in business terms — metrics, risk, and outcomes — you can better advocate for the tools, staff, and resources you need to do compliance right.Connect with Us:🌐 Website: https://www.bemopro.com We kick off our Smart Compliance Tips series with an important mindset shift: understanding your business impact.Too often, IT managers and tech staff are handed compliance tasks simply because leadership assumes “it’s an IT thing.” But compliance is a business-wide responsibility — one that affects revenue, ROI, and company growth.When you start thinking in business terms — metrics, risk, and outcomes — you can better advocate for the tools, staff, and resources you need to do compliance right.Connect with Us:🌐 Website: https://www.bemopro.com No No The Compliance Checklist Mentality - A Growing Problem https://podcasts.fame.so/e/28xzryq8 The Compliance Checklist Mentality - A Growing Problem 1 No No 60mkq930 Still treating compliance like a checklist? 😬 It’s time to break the habit. In this episode of Trust Issues, Joseph and Brandon tackle the growing concerns surrounding compliance in the tech industry, particularly focusing on the checklist mentality that's infiltrating the SOC 2 certification process. We explore how this approach, pressures auditing firms and companies alike to cut corners and prioritize speed over thoroughness. Join us as we unpack the complexities of SOC 2, the role of GRC platform reps, and the need for a shift in how we approach compliance to ensure genuine security and trust.Want to go deeper? Read our blogs on:- Why SOC 2 compliance really matters 👉 - What to Do the First Time You're Tackling SOC 2 Compliance - Rushing SOC 2 Compliance Can Cost You a Major Deal 🔗 Learn More About BEMO Still treating compliance like a checklist? 😬 It’s time to break the habit.

In this episode of Trust Issues, Joseph and Brandon tackle the growing concerns surrounding compliance in the tech industry, particularly focusing on the checklist mentality that's infiltrating the SOC 2 certification process. We explore how this approach, pressures auditing firms and companies alike to cut corners and prioritize speed over thoroughness.


Join us as we unpack the complexities of SOC 2, the role of GRC platform reps, and the need for a shift in how we approach compliance to ensure genuine security and trust.


Want to go deeper? Read our blogs on:

- Why SOC 2 compliance really matters 👉

- What to Do the First Time You're Tackling SOC 2 Compliance

- Rushing SOC 2 Compliance Can Cost You a Major Deal


🔗 Learn More About BEMO

Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 31 Oct 2025 18:30:00 +0000 1673 Still treating compliance like a checklist? 😬 It’s time to break the habit. In this episode of Trust Issues, Joseph and Brandon tackle the growing concerns surrounding compliance in the tech industry, particularly focusing on the checklist mentality that's infiltrating the SOC 2 certification process. We explore how this approach, pressures auditing firms and companies alike to cut corners and prioritize speed over thoroughness. Join us as we unpack the complexities of SOC 2, the role of GRC platform reps, and the need for a shift in how we approach compliance to ensure genuine security and trust.Want to go deeper? Read our blogs on:- Why SOC 2 compliance really matters 👉 - What to Do the First Time You're Tackling SOC 2 Compliance - Rushing SOC 2 Compliance Can Cost You a Major Deal 🔗 Learn More About BEMO Still treating compliance like a checklist? 😬 It’s time to break the habit. In this episode of Trust Issues, Joseph and Brandon tackle the growing concerns surrounding compliance in the tech industry, particularly focusing on the checklist mentality that's infiltrating the SOC 2 certification process. We explore how this approach, pressures auditing firms and companies alike to cut corners and prioritize speed over thoroughness. Join us as we unpack the complexities of SOC 2, the role of GRC platform reps, and the need for a shift in how we approach compliance to ensure genuine security and trust.Want to go deeper? Read our blogs on:- Why SOC 2 compliance really matters 👉 - What to Do the First Time You're Tackling SOC 2 Compliance - Rushing SOC 2 Compliance Can Cost You a Major Deal 🔗 Learn More About BEMO No No You Bought a GRC Platform...Now What? https://podcasts.fame.so/e/v85j4p6n You Bought a GRC Platform...Now What? 1 No No 81q3xpv1 Getting compliant takes more than just buying a tool. In this episode of Trust Issues, Joseph and Brandon break down a major misconception in the compliance world: thinking a GRC platform will HANDLE compliance for you. Spoiler alert: it won’t. They discuss why GRC software is just the starting point, not the finish line. It helps you understand where you stand, but it won’t implement controls, write policies, or build the ongoing structure your organization needs to stay compliant. You’ll also hear why delegating compliance to an IT manager or developer can lead to major gaps, and why successful companies invest in a dedicated, well-funded compliance team, or a trusted managed compliance partner to do it right.🔗 Learn More About ⁠BEMO⁠ Getting compliant takes more than just buying a tool. In this episode of Trust Issues, Joseph and Brandon break down a major misconception in the compliance world: thinking a GRC platform will HANDLE compliance for you. Spoiler alert: it won’t. They discuss why GRC software is just the starting point, not the finish line. It helps you understand where you stand, but it won’t implement controls, write policies, or build the ongoing structure your organization needs to stay compliant. You’ll also hear why delegating compliance to an IT manager or developer can lead to major gaps, and why successful companies invest in a dedicated, well-funded compliance team, or a trusted managed compliance partner to do it right.🔗 Learn More About ⁠BEMO⁠

Trust Issues is handcrafted by our friends over at: fame.so
]]> Fri, 24 Oct 2025 16:23:58 +0000 997 Getting compliant takes more than just buying a tool. In this episode of Trust Issues, Joseph and Brandon break down a major misconception in the compliance world: thinking a GRC platform will HANDLE compliance for you. Spoiler alert: it won’t. They discuss why GRC software is just the starting point, not the finish line. It helps you understand where you stand, but it won’t implement controls, write policies, or build the ongoing structure your organization needs to stay compliant. You’ll also hear why delegating compliance to an IT manager or developer can lead to major gaps, and why successful companies invest in a dedicated, well-funded compliance team, or a trusted managed compliance partner to do it right.🔗 Learn More About ⁠BEMO⁠ Getting compliant takes more than just buying a tool. In this episode of Trust Issues, Joseph and Brandon break down a major misconception in the compliance world: thinking a GRC platform will HANDLE compliance for you. Spoiler alert: it won’t. They discuss why GRC software is just the starting point, not the finish line. It helps you understand where you stand, but it won’t implement controls, write policies, or build the ongoing structure your organization needs to stay compliant. You’ll also hear why delegating compliance to an IT manager or developer can lead to major gaps, and why successful companies invest in a dedicated, well-funded compliance team, or a trusted managed compliance partner to do it right.🔗 Learn More About ⁠BEMO⁠ No No