I recently spoke with Bezawit Sumner, CISO of CRISP Shared Services about:

• How to address stakeholder concerns when rolling out AI in sensitive spaces like healthcare
• Issues related to scoping and definitions being non-trivial for AI governance
• The evolving AI regulatory landscape and what companies can do to adapt

I was excited to host Rick Doten, a powerhouse in cybersecurity, to discuss:

• Key insights from his time as CISO at healthcare giant Centene
• The ethical nuances of AI governance in the space
• His experiences advising venture capital firms and cybersecurity startupsI was excited to host Rick Doten, a powerhouse in cybersecurity, to discuss: - Key insights from his time as CISO at healthcare giant Centene - The ethical nuances of AI governance in the space - His experiences advising venture capital firms and cybersecurity startups

NVIDIA blog on killswitches: 
https://blogs.nvidia.com/blog/no-backdoors-no-kill-switches-no-spyware/

Colorado Legislative AI Task Force Report: https://leg.colorado.gov/sites/default/files/images/report_and_recommendations-accessible_1_0.pdf

SB-205 opposition: https://gazette.com/government/colorado-mayors-oppose-ai-regulation-law/article_0abe652f-a60a-583e-a138-e73fa45e9a03.html

AI Stethoscope: https://www.imperial.ac.uk/news/249316/ai-stethoscope-rolled-100-gp-clinics/

ChatGPT Connectors: https://help.openai.com/en/articles/11487775-connectors-in-chatgpt

Federal AI action plan: 
https://www.ai.gov/action-plan

Tool-squatting attack paper: https://arxiv.org/pdf/2504.19951

Burning Glass Institute report: 
https://static1.squarespace.com/static/6197797102be715f55c0e0a1/t/6889055d25352c5b3f28c202/1753810269213/No+Country+for+Young+Grads+V_Final7.29.25+%281%29.pdf

AIUC: https://aiuc.com

Walter kicks off a recurring series with Steve Dufour, talking about:

- Trump's "Big Beautiful Bill" moving through the Senate and how a key AI-related provision was just removed.
- Some key court decisions related to generative AI training on copyrighted material
- ISO/IEC 42005:2025, which gives guidance on AI impact assessments
- Ways to (avoid) automating yourself out of a job

The basics of healthcare can often be a nightmare:

- Finding the right doctor
- Setting up and appointment
- Getting simple questions answered

While these things might seem like an inconvenience, on the grand scale they cost a lot - of money, and unfortunately, lives.

That’s why the Embold Virtual Assistant (EVA) is such a breakthrough.

A generative AI-powered chatbot with access to up-to-date doctor listings and performance ratings, it’s literally a lifesaver.

StackAware was honored to conduct a pre-deployment AI risk assessment and penetration test for EVA on behalf of our client Embold Health.

Following up on our previous discussion, I sat down again with Steve Dufour and Mark Blackham to discuss the product’s development and rollout.

We chatted about:

- EVA’s performance metrics
- Cybersecurity, compliance, and privacy issues
- The future of AI governance and product development in healthcare

Bonus: Steve and I also presented on this work at HITRUST’s Collaborate Conference. Here is our deck: https://docs.google.com/presentation/d/1EedOula8X81WxzVkQim1amiDZWMM8Lh0

Need your own AI risk assessment and governance program build-out?

Book a call at contact.stackaware.com.

On this episode of the Deploy Securely podcast, I spoke with Kenny Scott, Founder and CEO of Paramify.

Paramify gets companies ready for the U.S. government's Federal Risk and Authorization Management Program (FedRAMP). And in this conversation, we talked about:

- Paramify "walking the walk" by getting FedRAMP High authorized
- How AI is impacting FedRAMP authorizations
- The future of AI regulation

I was thrilled to have a leading voice on AI governance and assurance on the Deploy Securely podcast: Patrick Sullivan.

Patrick is the Vice President of Strategy and Innovation at A-LIGN, a cybersecurity assurance firm. He’s an expert on the intersection of AI and compliance, regularly sharing expert insights about ISO 42001, the EU AI Act, and their interplay with existing regulations and best practices.

We chatted about what he's seen from his customer base when it comes to AI-related:

- Cybersecurity
- Compliance
- Privacy

Check out the full episode!

I spoke with Matt Adams, Head of Security Enablement at Citi, about:

- The EU AI Act and other laws and regulations impacting AI governance and security
- What financial services organizations can do to secure their AI deployments
- Some of the biggest myths and misconceptions when it comes to AI governance

While using AI securely is a key concern (especially for companies like StackAware), on the flipside, AI has been supercharging security and compliance teams.

Especially when tackling mundane tasks like security questionnaires, AI can accelerate sales and build trust.

I chatted with Chas Ballew, CEO of Conveyor, about:

- How AI can help with customer security reviews
- What sort of controls Conveyor has in place
- What Chas thinks the future will look like
- The regulatory landscape for AI

Here are some resources Chas mentions in the show:

Deepmind Solving International Mathematical Olympiad problems
https://deepmind.google/discover/blog/ai-solves-imo-problems-at-silver-medal-level/

Prof. Geoffrey Hinton - "Will digital intelligence replace biological intelligence?" 
https://www.youtube.com/watch?v=N1TEjTeQeg0

Jim Keller on Lex Fridman
https://www.youtube.com/watch?v=G4hL5Om4IJ4