<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">
Request a Demo

The Ncast Podcast
Episode 50

Why the Basics Still Decide Everything: A CISO on Vendors, AI, and Resilience

Ncontracts Chief Information Security Officer Clay Carter joins Rafael DeLeon to unpack why the security failures hurting financial organizations most often start with a trusted vendor, not a direct attack. Carter, who built security programs at General Electric, Nielsen, and Xylem before joining Ncontracts, breaks down where vendor questionnaires fall short, what responsible AI governance requires, and why advanced security techniques mean nothing without the basics in place.

 

In this episode, you will learn

  1. What Brought Clay Carter to Ncontracts From Outside Financial Services?
    3:10
    What Brought Clay Carter to Ncontracts From Outside Financial Services?
  2. Why Are Community Banks Less Resourced Than People Assume?
    3:47
    Why Are Community Banks Less Resourced Than People Assume?
  3. How Often Does Security Built for Auditors Line Up With Security That Stops Attackers?
    4:49
    How Often Does Security Built for Auditors Line Up With Security That Stops Attackers?
  4. How Should Financial Organizations Prepare for the Next Breach?
    12:29
    How Should Financial Organizations Prepare for the Next Breach?
  5. Why Do Vendor Questionnaires Fail to Build Trust?
    14:47
    Why Do Vendor Questionnaires Fail to Build Trust?
  6. What Security Risks Do Financial Organizations Overlook When Adopting AI?
    18:36
    What Security Risks Do Financial Organizations Overlook When Adopting AI?
  7. Why Should Every Institution Get an Enterprise AI Agreement?
    21:16
    Why Should Every Institution Get an Enterprise AI Agreement?
  8. What Does It Take to Earn the Right to Advanced AI Security?
    26:33
    What Does It Take to Earn the Right to Advanced AI Security?

Guests

Clay Carter Headshot_ClayCarterNC
Clay Carter
Chief Information Security Officer, Ncontracts

Subscribe to the Nsight Blog

What's the Purpose of Third-Party Risk Management? A Practitioner's Answer
Michael Carpenter, VP of Risk Management at Ncontracts, and Rafael DeLeon, SVP of Industry Relations at Ncontracts, discuss third-party risk management and vendor oversight on the Ncast podcast.

What's the Purpose of Third-Party Risk Management? A Practitioner's Answer

Jul 7, 2026
An Executive's Take: The Future of AI in Risk and Compliance
cpo perspective future of ai in risk and compliance

An Executive's Take: The Future of AI in Risk and Compliance

Apr 7, 2026
Unlocking the Future of Contract Management: How AI and Ncontracts Are Changing the Game

Unlocking the Future of Contract Management: How AI and Ncontracts Are Changing the Game

Feb 14, 2024