Brought to you by Trustero
In a world of evolving threats, expanding frameworks, and growing pressure on security and compliance teams, real leadership matters.
AI Security Vanguard is a podcast series featuring candid conversations with today’s top CISOs, security executives, and GRC innovators. We explore the decisions behind the headlines—from building resilient programs and navigating emerging tech like AI and quantum computing, to rethinking audit prep, vendor risk, and security culture.
Each episode delivers sharp insights and honest perspectives from those leading the charge.
Exploring AI Governance & Security: Insights with Walter Haydock of Stack AwareWelcome to our AI and Security Podcast! In this episode, we sit down with Walter Haydock, founder of Stack Aware. Walter discusses Stack Aware's journey from a vulnerability management company to a leader in AI cybersecurity compliance and privacy risk management. We dive deep into the nuances of ISO 40 2001 and how it compares to ISO 27001, the importance of AI governance, and the challenges and opportunities in the AI regulatory landscape in the US and EU. This episode is packed with insights on how companies can build effective AI governance frameworks to meet evolving regulatory requirements and ensure data integrity and privacy.00:00 Introduction and Guest Introduction00:44 Founding of Stack Aware01:58 ISO 40 2001 and AI Governance02:57 Comparing ISO 40 2001 and ISO 27,00106:09 US AI Regulations and State-Level Approaches08:28 Global AI Governance and Standards18:09 Building AI Governance Programs22:42 Tools and Approaches for AI Governance28:28 Future of AI Governance30:36 Conclusion and Closing Thoughts
22 Oct 2025TRANSCRIPT
Building Intelligent Systems: An Inside Look at Multi-Agent AI
Join us for the latest episode in our AI and security series as we sit down with David Marsyla, VP of Engineering at Trustero, who discusses the company's innovations in AI-driven multi-agent workflows. David provides insights into the development and functionality of Trustero new multi-agent agency framework, policy design assessment tools, and the complexities of harnessing AI for Governance, Risk, and Compliance (GRC). He delves into the architecture behind Trustero's solutions, focusing on the integration with AWS, development practices, and the strategic use of AI to streamline processes. Discover how Trustero is leveraging AI to enhance security, compliance, and operational efficiency for their clients.00:00 Introduction and Guest Introduction00:40 Understanding Agentic AI02:17 Multi-Agent Workflows Explained04:05 Benefits of Multi-Agent Systems06:08 Developing and Iterating Agents09:14 Technical Architecture Overview10:16 Data Management and Indexing14:48 Development Practices and Security17:10 AI-Driven Data Modeling and Analysis17:25 AWS Receptor and Evidence Collection18:12 Open SDK and Custom Integrations19:02 AI Team and Development Process19:53 Backend Technologies and Databases20:29 Automated Release and Testing Processes21:23 Security and Vulnerability Management24:28 Customer Onboarding and Environment Setup27:55 AI in Development and Future Plans29:11 Challenges and Best Practices with AI31:19 Conclusion and Final Thoughts
21 Aug 2025TRANSCRIPT
AI Governance Redefined at Snowflake
Dive into an insightful discussion with Josh McKibben, Head of Compliance, Risk, and Trust at Snowflake, on the AI Security Vanguard Podcast, Hosted by George from Trustero.
This episode explores how security leaders are tackling evolving AI risks and governance. Josh shares his experience in setting up scalable AI policies, using AI models for efficient business processes at Snowflake, and addressing the new challenges posed by agent AI and shadow IT. Learn about AI-driven automation, compliance strategies, and the importance of staying ahead in this rapidly changing field.
20 Jun 2025
Cybersecurity's AI Revolution: What CISOs Should Expect Next
Cybersecurity expert Steve Zelensky discusses AI's impact on governance, risk, and compliance with hosts George and Paolo, exploring how it transforms the CISO role and business risk approaches in this interview.
13 Jun 2025
Future of AI, Quantum Computing, and Risk Management
Cybersecurity experts Bil Harmer and Paolo Marquez explore the transformative impact of AI and quantum computing on security strategies, discussing compliance, risk management, and advanced encryption in this interview with George.
13 Jun 2025
SOC 2 is a Joke! Or is it?
Henry Stanley, Chief Product Officer at Fabrik, explores the perceived shortcomings of SOC 2 compliance and how continuous monitoring and AI can improve enterprise security in this interview with George.
13 Jun 2025
The Real Value of AI in Compliance
Justin Dooley explains to Michael Eggerling how AI streamlines compliance, accelerates audits, and fosters better auditor communication, highlighting AI's growing role in compliance and security in this interview.
13 Jun 2025
Navigating AI Governance and Compliance
Paul Starrett explores the complexities of AI governance and compliance, focusing on legal liabilities and the EU AI Act, in an interview that highlights the intersection of AI, security, and law.
13 Jun 2025
AI, Quantum Computing, and Leadership
Security expert Bob Zynga explores the threats of quantum computing, the necessity of ethical AI in civilian and military sectors, and the crucial role of leadership in technological advancement in this interview.
13 Jun 2025
Bridging The Risk Resiliency Gap
Chief Information Security Officer Richard Marcus discusses strategies for closing the risk resiliency gap and integrating AI into security workflows, offering valuable insights for GRC leaders in this interview.
Inside a recent episode
Is ISO 42001 the Future of AI Governance
Published 3 Nov 2025 · Transcript excerpt
[…] So do you have any kind of tips and tricks and advice how to how to approach building the governance around AI? If you're building an AI governance program, I would recommend using ISO 42 ,001 as the basis for it rather than a specific law or regulation. And here's why ISO 42 ,001 gives you a system for complying with regulatory requirements, whereas the EU AI act is a regulatory requirement itself. And if your only goal is to avoid enforcement action under the EU AI act and you build your program 100 % around that law, then that should work. However, if you want to expand into another jurisdiction, if you know, different country start passing their own requirements that you're already operating in, it's difficult to turn the the ship. […]
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
