Why Compliance Fatigue Is a National Security Risk

About this episode

The episode discusses the risks of compliance fatigue and the importance of collaboration in cybersecurity.

Compliance shouldn’t come at the cost of security. In this episode, Leah McGrath (Executive Director, GovRAMP) and Brian Conrad (Director of Global Strategic Compliance Initiatives at Zscaler, formerly of FedRAMP) join the Trust vs. team to talk about multi-framework fatigue, the future of recognition and reciprocity, and why real cybersecurity progress depends on collaboration—not just more certifications. Hosted by HITRUST’s Ryan Patrick and Jeremy Huval, this episode dives deep into how public and private sectors can work together to reduce redundancy and get back to the real work: protecting critical systems and data. Meet Ryan: https://www.linkedin.com/in/ryan-patrick-3699117a/ Meet Jeremy: https://www.linkedin.com/in/jeremyhuval Meet Leah: https://www.linkedin.com/in/leah-mcgrath-in/ Meet Brian: https://www.linkedin.com/in/brianhconrad/

People in this episode

Hosts: Ryan Patrick, Jeremy Huval

Guests: Leah McGrath, Brian Conrad

Topics covered

• compliance
• cybersecurity
• national security
• collaboration
• multi-framework fatigue
• public-private partnership

Keywords

• compliance fatigue
• cybersecurity
• multi-framework
• collaboration
• national security
• certifications
• critical systems
• data protection

Mentioned in this episode

Organizations: GovRAMP, Zscaler, FedRAMP, HITRUST Alliance

More episodes of Trust vs.

• Cybercrime Has Gone Cartel · December 18, 2025 · 29 min
• Hacking Back, Legal Limits, and the Future of Cybersecurity Regulation · November 20, 2025 · 40 min
• When Your AI Has a Login and a Mind of Its Own · November 6, 2025 · 38 min
• Why SOC 2 May Not Prove Security Anymore · October 9, 2025 · 41 min
• Chaos, Culture, and Cyber Resilience · September 25, 2025 · 37 min
• Uncle Ronnie and the Problem with AI Security · September 11, 2025 · 32 min