Your Auditor Is Testing the Wrong Thing | Schellman's Doug Barbin on Process Audits, SOC 2, & AI Agents

In this episode of Security & GRC Decoded, Raj Krishnamurthy sits down with Doug Barbin, President and National Managing Principal at Schellman, to take apart one of the oldest habits in compliance: pulling a sample of 25 change tickets from a year of thousands of deployments and calling it assurance. Doug's answer is simple — audit the process, not the results. Drawing on 17 years at Schellman and nearly a decade at VeriSign before that, Doug explains why compliance and security were nev...