
← Keyboard Samurai14 okt · 21 min
Bill Deller - AI in Third-Party Risk: SOC2 & What Automation Still Gets Wrong
<p>A vendor has a SOC 2 report. How much confidence should that really give you?</p><p>Host Wil Klu talks with Bill Deller, a shareholder at Schneider Downs who helps lead its IT risk advisory practice, about AI and third-party risk management. They explore where AI makes vendor reviews faster, why security questionnaires aren't going away, and why a SOC 2 report isn't the full story. If you manage vendors, lead IT or security, or make business decisions about third-party risk, this conversation will help you ask better questions.</p><p><br></p><p>In this episode:</p><p>Learn where AI improves vendor due diligence and where it falls short.</p><p>Find out why automated answers can frustrate clients.</p><p>Understand the difference between a SOC 2 audit and a risk assessment.</p><p>Hear why auditor quality and incentives matter.</p><p>Examine the costs and benefits of AI-powered risk reviews.</p><p>Explore security frameworks beyond SOC 2.</p><p><br></p><p>Follow The Keyboard Samurai for more practical conversations on cybersecurity and business. </p><p><br></p><p>Connect with Bill Deller on LinkedIn. https://www.linkedin.com/in/bill-deller/</p>