What happens when AI capabilities advance faster than the organizations adopting them?

In this episode of The Third Party Risk Institute Podcast, Linda Tuck Chapman sits down with Alex Golbin, author and senior financial services executive with more than two decades of experience across enterprise risk, technology and data transformation, operational resilience, regulatory remediation, and AI governance.

The conversation centers on Alex’s new book, Governing AI Risk: The River Charter – An Enterprise Resilience Standard, which combines business fiction with practical risk-management concepts for boards, executives, and risk professionals. The story looks at how seemingly reasonable decisions made today accepting workarounds, relying on third parties, delaying remediation, or giving AI systems greater autonomy can accumulate into interconnected dependencies and future enterprise risk.

Alex’s central argument is not that organizations should slow down AI adoption. Instead, organizations need governance and resilience structures capable of making that speed survivable.

What we cover in this episode:

• Why AI capability can develop faster than an enterprise's data, governance, controls, operating models, and resilience.
• The RIVER Charter and its five pillars: Resolve Convergence, Integrate Hybrid Cognition, Validate Risk Debt, Elevate Data Capital, and Reinforce Resilience.
• What risk debt means and how small risk decisions, exceptions, workarounds, and deferred remediation can accumulate over time.
• Why traditional vendor assessments need to expand to include AI models, cloud providers, data sources, APIs, material fourth parties, autonomous agents, and other dependencies.
• Alex’s concept of All Entity Risk Management (AERM) and why organizations may need to look beyond conventional vendor boundaries to understand what their critical business outcomes actually depend on.
• Why annual questionnaires and point-in-time assessments may not provide enough assurance for rapidly changing AI dependencies and the growing importance of telemetry, control evidence, change signals, outcome monitoring, and reassessment triggers.
• Where accountability sits when a third-party AI system or autonomous agent contributes to a consequential failure.
• Why simply having a “human in the loop” may not be enough, and how Alex’s cognitive handshake concept focuses on meaningful collaboration between human judgment and AI while preserving accountability.

This episode goes beyond a discussion of AI technology. It examines what AI means for third-party risk management, operational resilience, enterprise risk management, governance, data, accountability, and the extended enterprise.

For third-party risk, operational risk, cybersecurity, compliance, governance, procurement, audit, technology risk, and enterprise risk professionals, this conversation raises an increasingly important question: Are our existing risk practices evolving quickly enough for an environment where vendors, models, data, platforms, people, and autonomous AI agents are becoming deeply interconnected?

If your intrested in Alex's book here is the link to it: https://www.amazon.com/Governing-Risk-RIVER-Charter-Enterprise/dp/1041095651/ref=tmm_pap_swatch_0?_encoding=UTF8&dib_tag=se&dib=eyJ2IjoiMSJ9.GXtSzMAgRAR2dHq_QLc78Q.rnNTGsUkShYwPWVZOj-yYbE9n46zkO1wMSpX8uk3v_U&qid=1777308121&sr=8-1

🎧 Enjoying the podcast?
Explore more resources, expert insights, and certification programs at www.thirdpartyriskinstitute.com

📱 Follow us on LinkedIn for real-world conversations and industry trends: Third Party Risk Institute Ltd.

📬 Have a question or topic you'd like us to cover?
Email us at: info@thirdpartyriskinstitute.com