Access controls used to be treated as a technical checklist item. Today, they can determine whether a company closes an enterprise deal, secures cyber insurance, passes an audit—or survives a breach. In this episode of Ivory GC, host Brian Becker sits down with Garrett Grajek, CEO of YouAttest and a longtime leader in identity governance and access control. With nearly three decades in information security, Garrett explains why identity and access management are no longer just IT concerns—they are core business, legal, and financial risks. The conversation explores how the shift to cloud-based systems and SaaS platforms has fundamentally changed enterprise security. As traditional network perimeters disappear, identity becomes the primary control layer. That shift carries implications not just for CISOs, but for general counsel, CFOs, and executive teams responsible for governance, compliance, and disclosure. Brian and Garrett discuss: - Why access governance now belongs high on a general counsel’s priority list- How regulations like HIPAA, SOX, and emerging AI governance frameworks require documented access practices- The risks of “privilege creep” and why over-permissioned users create hidden exposure- Lessons from high-profile enforcement actions, including SolarWinds- How weak access controls can increase insurance premiums, disrupt enterprise sales cycles, and erode customer trust- Why governance documentation—not just security tools—matters when breaches occur Garrett also explains how automation and repeatable review processes can help companies demonstrate compliance, reduce financial waste from unused licenses, and mitigate long-term reputational damage. For growth-stage and enterprise companies alike, this episode reframes access controls as strategic infrastructure—impacting revenue, valuation, insurance coverage, and brand trust. What are your thoughts on access governance and the influence of AI? Let us know in the comments! Connect with Brian Becker on LinkedIn: https://www.linkedin.com/in/brian-becker-jd-mba-80bb211a/Connect with Garret Grajek on LinkedIn: https://www.linkedin.com/in/theauthguy Visit the Ivory Law website here: https://www.ivory.law/Visit the YouAttest website here: https://youattest.com/ Listen to Ivory GC on these podcast platforms: Spotify: https://open.spotify.com/show/0LsuryrP5VuthnqO2uVtXZApple Podcasts: https://podcasts.apple.com/us/podcast/ivory-gc/id1779481512?uo=4Amazon Podcasts: https://music.amazon.com/podcasts/b2841956-606a-4d84-b20d-e774185fe610 #InHouseCounsel #LegalStrategy #CorporateLaw #IvoryGC #BusinessLaw #LegalCareers #LawyerLife #GeneralCounsel #CorporateGovernance #LegalAdvice #LegalProfessionals #InsideCounsel #LegalLeadership #LegalInnovation Ivory GC Podcast is your go‑to channel for in‑depth conversations on balancing legal risk and business innovation. Every week, we bring you candid interviews with general counsel, corporate legal advisors, and business leaders navigating regulatory complexity while driving transformative growth. Ideal for in‑house legal teams, executives, and risk managers, our content delivers strategic insights, practical tips, and real-world stories to help you lead confidently in an ever‑changing legal landscape.
