When Risks Can Think: Managing Risk and Compliance in the AI Era

AI is reshaping enterprise risk by introducing new concerns like drift, hallucination, model security, and expanded data use, while also amplifying existing operational and compliance challenges. Organizations are feeling growing pressure to move faster with AI, even as critical gaps in visibility, collaboration, and enforcement make governance harder to scale. In this episode, ISACA’s Donnie Carpenter, Principal, Information Security and Professional Practices, Research Development, speaks with Michael Siegrist, Field CTO and Head of Americas Risk Solutions at OneTrust, about what an integrated approach to risk and compliance looks like in practice—from assessing AI across the IT ecosystem to prioritizing risk in ways that support business growth rather than stall innovation. Michael unpacks how organizations can govern AI responsibly, translate emerging risks into enforceable controls, and build greater visibility across their risk landscape. Listeners will come away with a clearer framework for managing emerging AI risks while enabling innovation with greater confidence. Related Resources & Stay Connected Learn More About OneTrust: Discover how OneTrust helps organizations manage risk, compliance, privacy, data, and AI governance while building greater trust across the enterprise. OneTrust Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, privacy, and emerging technology insights. ISACA Podcast Library Subscribe to ISACA on YouTube: Stay ahead with expert interviews, industry analysis, and cybersecurity leadership insights. ISACA YouTube Channel Don’t forget to like, comment, and subscribe for more conversations shaping the future of IT, cybersecurity, governance, risk, and emerging technology.