GRC Engineering

I’ve discovered a GRC Engineering podcast and also recently heard words such as DevGRCOps and Policy as Code.

Sounds like buzzwords and hype… maybe I’m mistaken…

Is there any good resources on the topic, or even a learning path diagram?

Edit. Here is one article that discusses the topic (just reading it myself). [medium article “fix your security compliance”](https://medium.com/@varungurnaney/fix-your-security-compliance-part-ii-vendor-tools-why-they-may-not-work-for-you-3af4d3e41c21)

code cybersecurity engineering good grc hype path podcast policy policy as code resources topic