Cherry Bekaert
31 episodes listed below
PRESS PLAY
Cherry Bekaert’s podcast for risk & cybersecurity where we discuss developing trends and market dynamics as well as tips that could impact your business.
Based on 6 episodes we listened to · September 2026
It translates cybersecurity and AI assurance frameworks into sharper questions about vendors, controls, accountability, and business risk.
Cherry Bekaert: Risk & Cybersecurity turns technical assurance questions into focused conversations between practitioners who know where governance can fail.
A SOC 2 report lands; you still need to ask who handles the AI risk.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical case for keeping data governance simple, usable, and durable.
The piece treats data management as a working discipline rather than a shopping list of tools, which fits smaller and mid-sized banking institutions trying to keep up with digitization.
A practical look at the controls that matter when AI is run in-house rather than by a vendor.
The discussion treats AI governance as an operating problem, not a slogan. It gets concrete by laying out the parts that have to work together: the model itself, the training and inference stack, the governance structure, the oversight committee, and the controls auditors can…
A clear HITRUST primer that connects certification choices to business pressure and assurance levels.
HITRUST reads as a practical guide to a certification process organizations may need to understand, especially when client demands or insurance concerns are in play.
A clear map of how AI compliance frameworks become practical risk controls.
The piece treats AI compliance as a practical risk question rather than a paperwork exercise. SOC 2 is presented as a reporting framework that gives organizations more depth and transparency around internal controls, while its security, privacy, availability, confidentiality,…
A plainspoken look at how internal audit may change as technology becomes harder to ignore.
James Eldridge and Scott Payton spend this episode on the IIA's Vision 2035 report and what it means for internal audit as technology keeps moving into the work.
AI compliance starts with the right questions, not checkboxes.
AI compliance is treated here as a practical problem, not a slogan. The episode stays on regulatory pressure, vendor oversight, and the way procurement teams actually buy software, which makes it useful for listeners trying to sort out a field that many organizations still only…
A clear, practical look at AML model testing, with threshold tuning and governance kept in balance.
AML model testing is treated as a practical exercise in validation and optimization, with the work split between initial setup and model validation.
A clear SOC 2 introduction that makes a compliance topic easy to follow.
This episode offers a clean, grounded introduction to SOC 2. It explains what the framework is, how it differs from SOC 1 and SOC 3, and why organizations and customers pay attention to it.
Tyler Selhorn interviews remote-work founders and researchers on building distributed team culture.
Adi Ignatius and Alison Beard interview scholars and executives on management and AI.
Neil Beggin opens a clear discussion on SOC 2 reports with Stephen Ursillo and Dan Sembler.
This episode explores AI compliance frameworks, focusing on how SOC 2, ISO 42001, and other standards like NIST and GDPR can be applied to manage AI risks.
The show closes its Internal Audit Awareness Month series with a conversation shaped by the IIA's Vision 2035 report.
The discussion lays out HITRUST as a security and information protection framework that started with concerns around protected health information.
Cherry Bekaert’s Risk & Cybersecurity episode on anti-money laundering model validation and optimization brings together Nate Rudgenbaugh, Audrey McGinnis, Dan Gallagher, and Alan Swan to explain why vendor testing is not enough for a bank’s own AML data and alerts.
Cherry Bekaert’s Nate Regimbaugh hosts Sam Halaby and Dan Gallagher on AML model testing, validation, and ongoing monitoring.
This episode explores governance risks in AI deployments, focusing on managing internal versus vendor AI systems.
Lauren Ross opens Cherry Bekaert: Risk & Cybersecurity with Steve Urcillo and Morgan Haig on the drivers of AI compliance, starting with regulatory pressure from the EU AI Act and U.S.
Neil Began opens the discussion by framing data management as a practical priority for organizations working in a digital age.
The conversation stays centered on the IIA's Vision 2035 report.