The GRC vs SOC Divide with Emma Mackenzie, Cyber Security Operations Analyst at Aberdeen

Emma Mackenzie made a deliberate switch into cyber security, and went straight into governance and risk. Since then she's moved across into a cyber defence role, and that experience of working both sides of the house gives her a perspective most people in the industry don't have.Emma works in financial services, specialising in governance, risk, resilience and regulatory alignment.In this episode she gets practical about the tensions that exist between security teams and the business, why patch management is harder than it sounds, and how to translate cyber risk into language that actually lands in the boardroom.We cover:Why silos between GRC and SOC exist in almost every organisation, and what that costs youThe patch management reality in financial services: why "just patch it" isn't always an optionHow to frame cyber risk in financial terms so leadership actually acts on itDORA, the UK Cyber Security Resilience Bill, and whether regulation is moving in the right directionWhat good recovery planning actually looks like and the questions most tabletop exercises never askWhy getting stakeholders involved early is the most underrated project management move in securityEmma's advice on personal resilience in a field with serious burnout problemsIf you're working in GRC, a SOC, or anywhere in between, this one's worth your time.