Beyond the Cloud - Managing Third-Party AI Risk with Provenance, Compliance and Board Metrics

Explore a comprehensive 25-minute conference talk that addresses the emerging challenges of third-party AI risk management in modern organizations. Discover how artificial intelligence introduces unprecedented risks hidden within training data, opaque model updates, and complex supply chains spanning unstable jurisdictions. Learn to reframe AI risk management around three critical pillars: model provenance tracking, regulatory compliance readiness, and effective board-level metrics communication. Master practical techniques for evaluating AI vendors with confidence while developing skills to translate complex technical risks into clear, actionable language that resonates with executive leadership. Gain strategies for building an AI-first, risk-resilient organization without overwhelming your security team's capacity. Access practical tools including a comprehensive risk assessment checklist and board communication framework designed to enhance your credibility as an AI security leader. Understand how to leverage the AI Controls Matrix (AICM) framework with its 243 controls across 18 domains, mapped to global AI security standards, while exploring pathways for continued professional development through research participation and certification opportunities in zero trust and cloud security assurance.