The DPO Centre

You may already have security and privacy controls in place, but with AI being built into more systems and supplier relationships, the challenge is knowing whether those controls mitigate the risks.

Customers may ask for evidence, while you may need similar assurance from your own suppliers. What should you be able to provide and what should you expect in return?

Stanford’s 2026 AI Index\* found that ISO/IEC 42001 was already influencing responsible AI decision-making at 36% of organisations surveyed, with NIST AI RMF influencing 33%, reflecting growing interest in more formal AI standards and frameworks.

In this session, experts from IS Partners and the DPO Centre will discuss how to assess existing controls, identify gaps, and bring security assurance, data protection and AI governance together.

You’ll learn:

*   Where AI can expose gaps in existing security and privacy controls
*   How NIST AI RMF, HITRUST AI and established assurance approaches such as SOC 2 fit into a wider AI assurance approach
*   What evidence to look for when assessing third-party AI suppliers
*   How to give customers assurance that your controls are in place and working

 

The session will close with a Q\&A, with the chance to ask experts from the DPO Centre and IS Partners about your own AI assurance and governance challenges.

 

*\**[*The 2026 AI Index Report, Stanford HAI*](https://hai.stanford.edu/ai-index/2026-ai-index-report)
