Culture of Compliance

In this episode of Culture of Compliance, Shelby Nelson sits down with John Ray, Director of Enterprise Risk Management at Norfolk Southern, to discuss how one of the nation's largest freight rail networks manages risk across safety, operations, supply chain and cybersecurity. John shares insights into building a culture of compliance in a highly regulated industry and lessons organizations of any size can apply to strengthen resilience. About our Speakers: Shelby Nelson, Partner, Frazier & Deeter, LLC Partner, Frazier & Deeter Advisory, LLC John Ray, Director Enterprise Risk Management, Norfolk Southern  

In this episode of Culture of Compliance, host Shelby Nelson talks with Cyrus Rattler of Qualla Enterprises about the operational and regulatory realities of working in the cannabis industry. They discuss traceability, internal controls, product testing, physical security and the importance of strong compliance practices in an industry where accountability is built into every step of the process.

In this episode of Culture of Compliance, host Shelby Nelson sits down with Ashley Holmes, a seasoned GRC executive and current J.D. candidate at Elon University School of Law, to discuss the evolving role of compliance in today's risk environment. Together, they explore how compliance has shifted from a checklist-driven function to a more strategic discipline focused on risk management, operational resilience and organizational accountability. The conversation also examines why many organizations continue to struggle with foundational security and control practices, drawing on lessons learned from navigating SOC challenges, strengthening control environments and translating risk into more meaningful conversations with leadership teams. They also discuss Ashley's transition to law school and the growing importance of bridging cybersecurity, compliance and legal expertise in an increasingly complex regulatory landscape.

The Culture of Compliance podcast is back! As compliance continues to evolve, the conversation must evolve with it. Culture of Compliance focuses on what matters most: practical insight, real-world decision-making, and the role culture plays across compliance, cybersecurity, IT, risk management and audit. Hosted by Frazier & Deeter's Shelby Nelson, who brings more than 25 years of experience in IT compliance, risk management and SOC reporting. New episodes released monthly.

What's new in the compliance industry and how can compliance leaders keep up with their peers? Sabrina Serafin interviews Carrie Penman, Chief Risk & Compliance at NAVEX Global, a worldwide leader in integrated risk and compliance management software services. Carrie presents the most interesting findings for NAVEX Global's annual risk & compliance benchmark report as well as additional advice for compliance leaders.