Beyond Vendor Risk: Real-Time GRC, AI, and Protecting App User Data - Jadee Hanson - CSP #221

Episode notes

CISO Jadee Hanson shares how Vanta "drinks its own champagne," running on NIST CSF with quarterly baseline reviews and using Vanta's GRC platform to turn every release into live UAT for privacy, governance, and compliance. We rethink third-party management - why point-in-time risk scores are fading and how AI drives continuous monitoring and outcome-based assurance. Bottom line: don't just audit - instrument your controls and prove trust in real time. Visit for all the latest episodes! Show Notes:

• Critical Infrastructure: The Risk Hiding in Plain Sight - Jason Manar - CSP #22563 / 100
• IAM for MSSPs: The Hidden Risk of Blind Trust - Dustin Sachs - CSP #224
• Cloud Security: The AI Effect & How to Proceed - Richard Marcus - CSP #223
• From Alerts to Action: Making Public - Private Threat Intel Actually Useful - Ian Washburn - CSP #222
• Keys Without People - John Heasman on Cleaning Up Non-Human Access - John Heasman - CSP #220