Cover art for The Risk Hunger

WPA3-KCIA Radio · Single

The Risk Hunger

Jarrett Heintz · 4:20

  • Risk Quantification
  • Governance & Risk
  • Everything, A to Z
Play on WPA3-KCIA Radio

Lyrics

  1. (Let us speak... of what we leave un-fixed.)
  2. (And why.)
  3. Organizational goals...
  4. Trying to get there, dodging all the holes
  5. Sometimes it can get real hard
  6. To see the point with raised safeguards
  7. It may seem rather daring
  8. But tech without goals is a test red herring
  9. Compliance is just another risk to view
  10. Which means we might just skip and true
  11. That could be bad... but maybe not
  12. Before you spend, before you patch
  13. Run the numbers, watch the match
  14. Some controls won't earn their place
  15. The juice ain't worth the squeeze you face
  16. We don't fix damage 'cause it hurts
  17. Or address risk as just deserts
  18. No — fighting risk is 'bout the goals
  19. Of orgs that balance impact tolls
  20. We don't fix risk because it hurts
  21. We accept what we can take
  22. 'Cause some damage isn't worth
  23. The resource we must stake
  24. Compliance ain't security
  25. Checked boxes aren't the win
  26. Once you know capacity...
  27. Treat it as a sin
  28. You're flexible with tolerance
  29. But find the risk that's right
  30. And see if you can't route the bucks
  31. To proper appetite
  32. Before you swing the audit axe
  33. Check the cost against the facts
  34. Some findings aren't worth the chase
  35. The cure can outweigh the case
  36. We don't fix damage 'cause it hurts
  37. Or address risk as just deserts
  38. No — fighting risk is 'bout the goals
  39. Of orgs that balance impact tolls
  40. We don't fix risk because it hurts
  41. We accept what we can take
  42. 'Cause some damage isn't worth
  43. The resource we must stake
  44. The board don't want to hear you're brave
  45. They wanna know what risk you save
  46. And what you spent and what you spared
  47. And how the appetite was squared
  48. G-R-C ain't just a frame
  49. It's how we name the cost of blame
  50. So bring the math, and bring it true...
  51. Or someone else will bring it to you
  52. We don't fix damage 'cause it hurts
  53. Or address risk as just deserts
  54. No — fighting risk is 'bout the goals
  55. Of orgs that balance impact tolls
  56. We don't fix risk because it hurts
  57. We accept what we can take
  58. 'Cause some damage isn't worth...
  59. The resource... we must stake
  60. (Compliance is the floor...)
  61. (Not the ceiling.)
  62. (Go in peace... and proportional spend.)