Security That Looks Good on Paper Fails in Practice: A CISO on Vendor Risk and AI

Ncontracts Chief Information Security Officer Clay Carter joins Rafael DeLeon on the Ncast to explain why security programs built to document diligence often fall short of reducing third-party risk. Carter built security programs at Nielsen, GE, and Xylem before joining Ncontracts, and he covers vendor questionnaires, patch management, incident response, and AI access controls for community banks, credit unions, and other financial organizations. In this episode, Carter and DeLeon discuss: Why a security program built to satisfy auditors can differ from one built to stop attackers Why vendor questionnaires demonstrate diligence without building trust, and why financial organizations should know their top ten vendors personally How the shrinking window between vulnerability disclosure and exploitation changes patch management and incident response What over-provisioned access and consumer AI tools mean for security teams, and what to require in an enterprise AI agreement Two steps financial organizations can take tomorrow to reduce their security exposure Download the Ncontracts Incident Response Plan Checklist: https://hubs.ly/Q04zTVQ20 #Ncast #cisos #cybersecurity #vendorrisk #thirdpartyrisk #aisecurity #compliance #financialservices #cybersecurity #cybersecurityawareness