Your customers are asking how you manage AI, and there isn’t much guidance out there yet. What goes in an AI policy? Do you need an AI inventory? Do the controls you already have count? Rob Pierce is here to tell you how auditors are actually looking at it, plus everything else you’ve wanted to ask about your audit.
Rob P. helps lead the HITRUST and ISO practices at Linford & Co., LLP. He’s done more than 800 SOC examinations over a 20+ year career that started at PwC. In 2018 he became the first auditor to complete an audit using Vanta, and he’s worked on the platform ever since.
Start submitting your questions (here) now on any of the following:
AI governance: AI policies, AI inventories, and which of your existing controls carry over
Scoping and timelines: how to scope your audit and set a realistic schedule
What counts as good evidence: what auditors accept, and what gets sent back
Commonly missed controls: the gaps Rob sees again and again
Prepping for walkthroughs: how to show up ready and confident
The fun stuff: what companies over-prepare for that doesn’t actually matter
When Rob's not auditing, he is skiing, boating, or restoring antique bicycles. Ask him about that too.
Click here to start submitting your questions in advance!