Make the essentials accessible
The initiative’s goal is to make core risks and controls freely accessible and easier to understand.
← Products & TrainingStronger controls.
GOVERNANCE, RISK & COMPLIANCE
Stronger controls.
Substance behind trust.
Second Foundation is an AI-native GRC initiative focused on helping organizations understand their risks and build meaningful controls.
SECOND FOUNDATION
Understand what is at riskSubstance behind trust.
THE PURPOSE
Compliance starts
with how you operate.
Ray’s experience managing compliance at Expedia Group exposed the gap between a polished system and the work of risk assessment, control testing, and evidence collection. Second Foundation grows from that experience.
Build useful structure
Use AI to support learning and compliance work, with a focus on SOC and ISO readiness.
Respect independence
Support relationships with firms that value audit quality, professional judgment, and independence.
THE PRINCIPLE
A report is only as strong as the work behind it.
The aim is to improve security and operations through real controls. Technology should help teams understand and perform that work.
A FEW DETAILS
Good questions.
Clear answers.
How does this relate to Chipmunk’s services?
Second Foundation is a GRC initiative. Chipmunk also provides hands-on controls and readiness support.
Where can I learn about current availability?
Visit Second Foundation or contact our team about the initiative.
Are you interested in professional partners?
Yes. We welcome conversations with firms that put independence, sound controls, and audit quality first.
YOUR NEXT CHAPTER
Let’s put expertise
to work.
Talk to us about the tool, training, or support that fits your next step.