GRC as a product
Build GRC around decisions people need to make. AI can read across vendor changes, access and security findings, then bring a practitioner the few changes worth discussing.
Explore the demos →This Is GRC
Make GRC relevant.
I'm Pierre-Paul Ferland. I work in GRC, teach it and build with AI. I want GRC close to the systems and people it is meant to help, so we can spot problems early and give advice someone can use.
AI finally gives us the reach to do that across a company. The judgment and relationships remain ours.
Explore the demos →About me →
Portfolio
Selected work.
Working demos
AI-native GRC lenses
Try vendor, control and risk cases built with fictional data.
Explore the demos →
Original essay · 2025
GRC is Technical
My case for understanding the systems behind the controls.
Read the essay →TeachingGRC lessons you can play
Three short cases and a six-question GRC personality test.
Try a lesson →Talks and webinarsSpeaking about what GRC can become
Recorded sessions on AI with real GRC data and building versus buying tools.
See past appearances →We have made GRC too small.
Evidence matters. But we have made a profession with a view across the company behave like a paperwork desk. I would rather help a team decide how to use customer data today than explain that decision to an auditor six months later.
What we believe in
GRC is technical
Framework parrots and checkmark collectors belong to the past. If you don’t understand the technology, you can’t advise the people building it. Curiosity and relationships get you into that conversation.
Read GRC is Technical →Advocacy
I write, teach and speak to make the case for a more technical, useful GRC profession, and to show what AI makes possible for the people doing the work.
Speaking → · Writing → · Teaching →