Is your organization ready for the shift from simple AI tools to fully autonomous agents? In this episode, we dive deep into the world of agentic AI and why it represents the next major inflection point for compliance and risk management.

Matt Galvin, a partner at Steptoe Investigations and former Department of Justice counsel, joins the show to discuss the promise and peril of these new systems. Unlike standard models that simply provide answers, agentic AI moves into the realm of performing services autonomously, from booking flights to managing customer refunds.

This shift introduces significant governance challenges, including what Matt describes as an accountability crisis and a credibility crisis. We explore the ethical implications of bots making hyper-logical cost-benefit decisions that may clash with corporate culture.

The conversation also covers the transition from buying generic software to building bespoke internal systems, and how different generations of professionals can adapt to this rapidly changing landscape.

Matt provides actionable advice on how to audit your external spend and leverage AI to drive higher ROI in your compliance and legal programs.

Want to stay ahead of the latest trends in risk and security? Subscribe to our channel for more expert interviews and leadership strategies.

🌐 Join our community for even more insights:

Online Community: https://globalriskcommunity.com/

LinkedIn Page: https://www.linkedin.com/company/globalrisk-community/

LinkedIn Group: https://www.linkedin.com/groups/3701313/

Academy platform: https://globalriskacademy.com/courses/

Is your company moving as fast as possible, or are your brakes holding you back? In the age of AI, your Third-Party Risk Management (TPRM) program is the only thing giving you the confidence to accelerate without crashing. Join host Boris Agranovich and guest Girish Redekar, co-founder of Sprinto, as they reveal why the invisible risk chain of your vendor's vendors could be the biggest threat to your growth.

In this episode, we dive deep into the shift from manual, questionnaire-based due diligence to autonomous, continuous monitoring. Girish explains why treating vendor management as a one-and-done task is a dangerous misconception that leads to massive blind spots. We also discuss the unique challenges posed by AI, where systems can change behaviour or hallucinate without any new code being deployed at your end.

Key topics include the automaker analogy for software recalls, the difference between third-party and fourth-party accountability, and how a strong security posture can actually shorten your sales cycles and boost your top-line revenue.

Learn how to transform your risk management from a back-office function into a strategic advantage that builds trust with customers and auditors alike. d How to Connect Want to stay ahead of the latest trends in risk and security?

Subscribe to our channel for more expert interviews and leadership strategies. You can find more about Girish and his work at sprinto.com.

In this episode of the Risk Management Show, we sit down with Clarence Chio, Cofounder & CEO at Coverbase to explore how vendor risk is evolving in the age of AI and interconnected ecosystems.

As organizations increasingly rely on third-party services, traditional approaches to risk management—like annual reviews and static assessments—are proving insufficient. Clarence shares insights on why continuous monitoring is becoming essential, how procurement is emerging as a critical control point, and how AI can help organizations stay ahead of vendor-related risks.

💡 Key Takeaways Vendor risk is continuous, not periodic: Annual reviews alone cannot keep pace with today's dynamic threat landscape.

Visibility is critical: Organizations need real-time insights into vendor behavior, not just compliance snapshots. Procurement is strategic: It plays a central role in enforcing security and risk standards. AI is a game changer: It enables earlier detection of anomalies and evolving risks across vendor ecosystems.

🚀 Key Topics Covered

1. From Internal Security to Ecosystem Risk

2. The Limits of Traditional Vendor Assessments

3. Lessons from the OpenAI–Mixpanel Incident

4. Annual Reviews vs. Continuous Verification

5. What Continuous Vendor Monitoring Looks Like in Practice

6. Procurement as the New Risk Gatekeeper

7. Misconceptions in Vendor Risk Management

8. The Role of AI in Vendor Risk Detection

🎯 Final Thoughts

Clarence emphasizes the need for a fundamental shift in how organizations think about third-party risk—from static compliance exercises to continuous, intelligence-driven monitoring. As ecosystems grow more complex, so must the strategies used to secure them.

🔗 About the Guest. Clarence Chio is the CEO and co-founder of Coverbase, a company focused on transforming procurement into a risk-aware, AI-driven advantage. He is also the author of Machine Learning & Security, a widely recognized resource at the intersection of AI and cybersecurity.

Thanks for listening! If you enjoyed this episode, be sure to subscribe and share it with your network.

🌐 Join our community for even more insights:

Online Community: https://globalriskcommunity.com/

LinkedIn Page: https://www.linkedin.com/company/globalrisk-community/

LinkedIn Group: https://www.linkedin.com/groups/3701313/

Academy platform: https://globalriskacademy.com/courses/