In the third episode of the Risk and Cybersecurity podcast’s AI Compliance series, host Lauren Ross is joined by Steve Ursillo, Partner in Cybersecurity at Cherry Bekaert, and Morgan Hague, Senior Manager at Meditology Services. Together, they dive into the unique governance and risk management challenges organizations face when deploying internal AI versus leveraging third-party artificial intelligence (AI) solutions.

This episode covers practical approaches to data and model governance, the role of frameworks like ISO 42001 and SOC 2 in supporting responsible AI development, and the essentials of effective vendor due diligence. Our guests also explore how organizations can strengthen contractual safeguards and monitor for model drift and ethical concerns in vendor AI tools.

Tune in to learn more about:

• Key governance and risk management considerations for internal and vendor AI
• How ISO 42001 and SOC 2 frameworks support responsible AI
• Vendor due diligence and contractual safeguards in AI partnerships
• Strategies for monitoring model drift, bias, and ethical risks in third-party AI tools
• Practical steps organizations can take today to strengthen AI compliance and data protection

View All Podcasts from this Series

In the second episode of the AI Compliance series, host Lauren Ross is joined by Steve Ursillo, Partner in Cybersecurity at Cherry Bekaert, and Morgan Hague, Senior Manager at Meditology Services. Listen in as they explore the evolving landscape of artificial intelligence (AI) regulations, including the impact of the European Union (EU) AI Act and U.S. executive orders, and how organizations can proactively prepare for regulatory uncertainty.

The episode also covers what enterprises should look for when evaluating AI vendors, the changing role of procurement in assessing AI risk, and the most overlooked risks in AI systems today. Finally, they examine how compliance frameworks can help organizations mitigate reputational harm in the event of AI failures.

Tune in to learn more about:

• The impact of emerging regulations on global AI strategies
• How organizations can prepare for regulatory uncertainty and evolving compliance requirements
• Key compliance criteria and certifications enterprises should look for from AI vendors
• Overlooked risks in AI systems, from bias and privacy to shadow AI and automation bias
• How compliance frameworks and due diligence can help mitigate reputational damage from AI failures

View All Podcasts from this Series

In this episode of our Internal Audit podcast series, John Heagy, Senior Manager, and Scott Peyton, Partner in our Risk Advisory practice, discuss the evolving role of internal audit in artificial intelligence (AI) oversight.

They unpack the differences between traditional and generative AI, explore how internal audit function is leveraging these technologies, and examine the risks that come with AI adoption—while providing risk mitigation and identification strategies.

This is the final episode in our four-part internal audit series. Catch up on the first three episodes The Evolving Role of Internal Audit: Unpacking IIA’s Vision 2035 Report, Top 3 Critical Skills for the IA Profession and The Client's Guide to Data Analytics in Internal Audit.

Tune in to learn more about:

• A breakdown of AI types andhow traditional AI differs from generative AI
• How internal audit teams are leveraging AI for tasks like fraud detection, control documentation and data analysis
• The risks of AI, including bias, hallucinations, outdated data and ethical concerns
• Key elements of a strong AI governance framework, including transparency, accountability and responsible use policies
• What to include in an AI audit scope, from understanding training data to evaluating cybersecurity and user behavior

Related Insights:

• Podcast: https://www.cbh.com/insights/podcasts/a-guide-to-iias-vision-2035-for-audit-teams/
• Article: 2025 Internal Audit Risks and Hot Topics
• Podcast: https://www.cbh.com/insights/podcasts/top-3-skills-for-internal-audit-profession/
• Podcast: The Client's Guide to Data Analytics in Internal Audit

View All Podcasts from this Series