In this episode of 3LoD Unlocked, host Ghassan Zeidan sits down with Manoj Kulwal, Chief Risk and AI Officer at Risk Spotlight, to explore the impact, risks, and transformative opportunities of Generative AI in risk management and compliance. The conversation delves into the distinct differences between traditional AI and Generative AI, highlights pressing risks, and emphasizes practical AI use cases.

Key Highlights & Timestamps:

• 00:00 - Introduction to Episode 7 and Guest Manoj Kulwal
• 03:12 - Manoj’s background and journey into AI and risk management
• 07:45 - Differentiating between Traditional AI and Generative AI
• 13:30 - The primary risks of Generative AI, including trust issues and data privacy
• 21:10 - Benefits of using Microsoft Co-Pilot vs. other AI tools
• 27:25 - Top 3 AI use cases in risk management:
  1. Control Library Optimization (cleaning and refining controls)
  2. Enhanced Risk Reporting (summarizing data efficiently)
  3. Policy Management and Regulatory Compliance (automating updates and mappings)
• 44:55 - Importance and role of Prompt Engineering
• 52:30 - Risk Spotlight's innovative Copilot training for risk professionals
• 58:40 - Closing thoughts and future insights

Notable Quotes:

Conclusion:

In this insightful episode, Manoj Kulwal clearly illustrates the transformative potential of Generative AI in risk management and compliance. By addressing practical use cases, highlighting essential risks, and emphasizing proper training and prompt engineering, professionals across the three lines of defense are equipped to leverage AI effectively. Stay ahead by understanding and adopting these powerful tools in your GRC processes.

Connect with Us

📌 Follow 3LoD Unlocked on LinkedIn
🎧 Subscribe on Apple Podcasts, Spotify, or your favorite platform
📧 For enquiries or to suggest topics, contact Ghassan Zeidan

In this insightful episode of 3LoD Unlocked, host Ghassan Zeidan sits down with Linda Tuck Chapman, CEO of the Third Party Risk Institute and a leading voice in third party risk management (TPRM). Linda brings decades of experience to the conversation, sharing essential strategies, common pitfalls, and actionable insights to help organizations manage their third party risks effectively. The discussion covers critical components of robust TPRM frameworks, practical approaches to vendor segmentation, the nuances of fourth-party risk management, and real-world scenarios demonstrating the importance of proactive risk management.

Key Highlights & Timestamps:

• [00:35] – Introduction to Linda Tuck Chapman, her background, and the importance of third-party risk management.
• [02:05] – Defining third-party risk management and its increasing importance in the modern enterprise.
• [05:30] – Clarifying the scope of third-party relationships beyond vendors.
• [09:40] – The power of segmentation in managing third-party relationships and risks effectively.
• [17:20] – Common challenges and critical mistakes organizations make in their third-party risk management programs.
• [26:15] – Discussing the importance of clear risk reporting and practical KRIs (Key Risk Indicators).
• [32:45] – Real-world examples of impactful risk incidents, highlighting lessons learned.
• [40:05] – Deep dive into managing fourth-party risks, practical guidance, and best practices.
• [45:25] – How to evaluate and enhance your organization's TPRM capabilities.
• [48:00] – Where listeners can connect with Linda and explore further resources.

Notable Quotes:

• "Your company is actually the smallest part of the equation when considering your third-party relationships."
• "If everything is risky, nothing matters. Proper segmentation is key to effective third-party risk management."
• "We’re not risk police—we’re enablers of risk-informed decisions."

Conclusion: This conversation underscores the necessity for businesses to evolve their approach to third-party risk management from reactive to proactive. Effective TPRM not only safeguards an organization but also enhances its operational resilience and competitive advantage. Linda's insights emphasize clear segmentation, actionable reporting, and the strategic alignment of TPRM practices with broader enterprise risk management efforts. Listeners are encouraged to leverage these best practices to elevate their third-party risk management capabilities.

Connect with Us

📌 Follow 3LoD Unlocked on LinkedIn
🎧 Subscribe on Apple Podcasts, Spotify, or your favorite platform
📧 For enquiries or to suggest topics, contact Ghassan Zeidan

Episode Summary:

In this insightful episode of 3LoD Unlocked, I sit down with Abdullah Al Ghamdi, an expert in governance to discuss the critical role boards and other governance forums play in shaping effective governance frameworks. We explore key responsibilities, risk oversight, regulatory challenges, and best practices that every board member should know. Tune in to gain actionable insights on how boards can enhance culture, improve accountability and drive strategic initiatives.

Timestamps:

[02:15] - Understanding the Board’s Role in Governance
[06:30] - Risk Oversight: What Boards Must Prioritize
[12:45] - Compliance Challenges in Today’s Regulatory Landscape
[18:20] - Best Practices for Board Members
[24:50] - The Future of GRC and Digital Transformation

Quotes to Remember:

• "Governance isn’t just about policies—it’s about setting the right tone from the top."
• "Boards that integrate risk oversight into strategy are the ones that drive sustainable success."
• "Regulations will keep evolving, but a strong governance foundation ensures adaptability and resilience."

Connect with Us

📌 Follow 3LoD Unlocked on LinkedIn
🎧 Subscribe on Apple Podcasts, Spotify, or your favorite platform
📧 For enquiries or to suggest topics, contact Ghassan Zeidan