<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">
Request a Demo

The Ncast Podcast
Episode 50

Security That Looks Good on Paper Fails in Practice: A CISO on Vendor Risk and AI

Ncontracts Chief Information Security Officer Clay Carter joins Rafael DeLeon to discuss why breaches at financial organizations so often begin with a trusted vendor instead of a direct attack. Drawing on nearly 20 years of building security programs at Nielsen, GE, and Xylem, Carter covers where vendor questionnaires fall short, how to build trust with the vendors that matter most, and why advanced AI security depends on getting the basics right first.

In this episode, you will learn

  1. What Brought Clay Carter to Ncontracts From Outside Financial Services?
    3:10
    What Brought Clay Carter to Ncontracts From Outside Financial Services?
  2. Why Are Community Banks Less Resourced Than People Assume?
    3:47
    Why Are Community Banks Less Resourced Than People Assume?
  3. How Often Does Security Built for Auditors Line Up With Security That Stops Attackers?
    4:49
    How Often Does Security Built for Auditors Line Up With Security That Stops Attackers?
  4. How Should Financial Organizations Prepare for the Next Breach?
    12:29
    How Should Financial Organizations Prepare for the Next Breach?
  5. Why Do Vendor Questionnaires Fail to Build Trust?
    14:47
    Why Do Vendor Questionnaires Fail to Build Trust?
  6. What Security Risks Do Financial Organizations Overlook When Adopting AI?
    18:36
    What Security Risks Do Financial Organizations Overlook When Adopting AI?
  7. Why Should Every Institution Get an Enterprise AI Agreement?
    21:16
    Why Should Every Institution Get an Enterprise AI Agreement?
  8. What Does It Take to Earn the Right to Advanced AI Security?
    26:33
    What Does It Take to Earn the Right to Advanced AI Security?

Guests

Clay Carter Headshot_ClayCarterNC
Clay Carter
Chief Information Security Officer, Ncontracts

Subscribe to the Nsight Blog

AI, Deregulation, and the Case for Building Real Risk Infrastructure
ai, deregulation, and the case for real risk infrastructure a podcast by ncontracts from rafael deleon and michael berman

AI, Deregulation, and the Case for Building Real Risk Infrastructure

Sep 1, 2026
What's the Purpose of Third-Party Risk Management? A Practitioner's Answer
Michael Carpenter, VP of Risk Management at Ncontracts, and Rafael DeLeon, SVP of Industry Relations at Ncontracts, discuss third-party risk management and vendor oversight on the Ncast podcast.

What's the Purpose of Third-Party Risk Management? A Practitioner's Answer

Jul 7, 2026
An Executive's Take: The Future of AI in Risk and Compliance
cpo perspective future of ai in risk and compliance

An Executive's Take: The Future of AI in Risk and Compliance

Apr 7, 2026