AI is rewriting the rules of risk management
Organisations today face unprecedented challenges when it comes to managing risk. More applications, increased cloud migration and the proliferation of software-as-a-service solutions have dramatically expanded the threat landscape. Meanwhile, security teams are struggling with strict regulations, shrinking budgets and talent shortages.
At the same time, chief information and security officers are keen to demonstrate the business value that the security function provides, rather than just being viewed as a cost centre. They want to convey cybersecurity's role in mitigating risk, achieving compliance standards and helping to win new business.
It is against this backdrop that artificial intelligence (AI) presents a double-edged sword, often representing both a significant threat and a powerful solution.
Cybercriminals are using AI to create more convincing phishing attempts and generate more complex attack codes. But AI-powered tools are also providing unprecedented capabilities in risk management and compliance.
'We're seeing more vulnerabilities and attack vectors than ever before,' explains Jeremy Epling, chief product officer at Vanta. 'AI is being used by attackers to create new threats, whether through sophisticated phishing attempts or AI-generated attacks.
'But AI also gives us a capability we never had before: dealing with unstructured data. So much of compliance and security revolves around documents and screenshots, and now we have an entirely new way to understand and provide value.'
Vanta's most recent The State of Trust Report reveals a striking insight: 77 per cent of IT decision-makers believe automation can relieve the manual burden of compliance, saving them time and money. Yet only 60 per cent of business leaders agree. This gap likely stems from a fundamental misunderstanding of the manual burden faced by security teams, says Epling.
'It boils down to who feels the pain every day. Business leaders are looking at the numbers and the ROI and driving the business, but they're not living in these tools every day and building a deep appreciation for how many hours get sucked into these reviews,' he explains. 'Governance, risk and compliance has been underserved for a long time in terms of providing a high level of innovation and helping to drive efficiencies.'
Businesses are spending more time than ever before on compliance. In the UK, companies already dedicate 12 working weeks per year to keeping operations compliant. Security teams in particular often dedicate far more time to compliance than to other value-adding activities, such as cyber strategy and threat mitigation.
Here, intelligent automation offers multiple operational benefits. 'AI can help generate secure code, automate remediation processes and provide a single pane of glass for your entire security programme,' Epling says.
For example, AI can automatically respond to complex security questionnaires and analyse vendor documents, identifying risks and providing actionable insights. It can also ensure consistency around security policies, as AI can detect irregularities across multiple policy documents. Automated systems can also immediately identify documentation issues, which can help prevent last-minute audit complications.
'Instead of spending hours manually reviewing documents and copy-pasting responses, AI can take a first pass on these tasks,' says Epling.
Perhaps most importantly, intelligent automation enables security teams to be seen as strategic business enablers rather than cost centres. 'When you achieve compliance standards, you can unlock new markets and win additional business,' Epling says.
He continues: 'Automation helps us clearly show time savings and improvements in efficiency. For example, when teams use Vanta's automated workflows, we can quantify how much faster they're completing tasks compared to before. That makes it easy for security leaders to go back to their management and explain the tool's value.'
But it's not just security teams that benefit from automation tools, he explains; these systems can also help engineering and IT teams to work more efficiently. 'Since they're not in the security trenches every day, giving them focused, actionable remediation guidance, along with context about why it matters, helps them prioritise effectively,' Epling says.
And with Vanta's tools, such as automated questionnaires, customers are constantly providing feedback to help the firm improve its programmes.
'It's a way to turn security from a cost centre into a growth enabler,' says Epling. 'When you can show how your trust posture helps close deals faster or opens new opportunities, it becomes a clear business-value driver. And it bridges the gap between security teams and leadership, so they're finally speaking the same language.'
For organisations considering intelligent automation, Epling offers some practical guidance.
The first step is to start small – focus on specific areas such as supplier risk or questionnaire management. Then trial AI tools with existing documents and policies, and make sure the AI solutions provide clear citations and explanations.
Epling also advises organisations to consider comprehensive platforms that offer a holistic view of governance, risk and compliance.
'For startups and small businesses, there are tools designed to help you get your first certification,' says Epling. 'You don't need prior knowledge – the right platform will guide you step by step.'
As cyber threats become more sophisticated and the compliance burdens increase, intelligent automation isn't just a 'nice-to-have' – it's becoming a necessity.
Such automation marks a transformative approach to risk management. By embracing AI-powered tools, organisations can not only mitigate risks more effectively but also turn compliance into a strategic business advantage.
'The goal is to spend less time on paperwork and more time on deep, impactful security work that truly protects your organisation,' says Epling.
As cyber threats continue to evolve, the message is clear: intelligent automation isn't just a technological upgrade, it's a critical component of your security strategy.
To learn more, please visit vanta.com
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Daily Mail
29 minutes ago
- Daily Mail
Florida town sees orange groves turned into big box stores
A Florida town that was once home to sprawling orange groves, scenic views, and abundant small-town charm has seen an influx of residents and new developments but is struggling to keep up. Over the past decade Clermont - that is 25 miles east of Orlando - has seen a population explosion and developers have moved to trade rows of trees for rows of cookie cutter houses and chain franchises. Clermont is now home to just over 50,000 residents according to latest census statistics from July 2024. This has shot up from just over 43,000 residents in April 2020 and from just under 29,000 in April 2010. As development has accelerated, locals have grown concerned over whether the city has the infrastructure to handle such robust change. Residents believe that the biggest issue is over-building. 'It used to be a nice town, now it's wall to wall houses,' local Eva Dole told News 6. 'It used to be you could look up where the Publix is on U.S. 27 and it was all orange groves,' she explained. 'Now it's just a whole bunch of stores.' She said locals initially advocated for stores but she wasn't expecting chains to move in practically overnight. The once rolling groves that Florida and Clermont especially was known for now sit at an all time low - production in the state's orange groves has tanked 92 percent since 2003–2004 season, according to the U.S. Department of Agriculture. The Citrus Tower, built in 1956 to allow visitors to observe the miles of surrounding orange groves, sits in the middle of the city and serves as a reminder about the once flourishing industry with new homes and businesses having sprung up around it. Realtor Bent Danholm who has been working in the area since 2016 has found that families are flocking to Clermont to take advantage of spacious homes at lower prices than the surrounding areas. 'It's cheaper than Winter Garden and Horizon West area but it's still close to jobs in the Orlando area and the price range is a little bit lower,' he told Daily Mail. He said that families are also taking advantage of the influx of jobs in the area, and despite their complaints, locals don't seem to be moving out. 'What I gather from what people tell me there's still quite a good sense of community,' he said. 'I've seen more people wanting to buy there than wanting to move away.' Danholm said - on average - families come in looking to spend around $400,000 on their new home. He added that thanks to the ever-developing landscape there are lots of places to choose from. He said that on-the-market homes in the area have increased from 579 in January to 739 in June. He told Daily Mail: 'Overall, the Clermont market is very well-balanced, slightly favoring the sellers.' Many of his Clermont listings contain four or more bedrooms, backyard pools, and spacious yards. The average listing currently costs just under $600,000 and contains 3.5 bedrooms and 3 bathrooms within 2,000 square feet, per Danholm's website. Another local realtor Matt Wheatley said that families aren't the only ones coming in swarms to Clermont. 'A lot of pro wakeboarders and now wake surfers choose the Clermont chain of lakes due to its depth and ease of use for training daily,' he told Daily Mail. Their preferred listings include high-end lake front living. However the rush for real estate has also brought with it other issues like traffic. Dole said: 'When you're driving and all you see are buildings and it's bumper-to-bumper traffic, it's very difficult to feel like you're in a small town.' Local Eddy Judson commented on a social media post about the town's development saying: 'We're basically Orlando now.' At the forefront of the changes going forward is Wellness Way, which is using tens of thousands of acres of land to build 15,000 homes, office buildings and shops. The plan, which has been in the works for over a decade, aims to bring high-tech, high-paying jobs to the city. It's also intended to incorporate fitness centers, sports facilities and health and wellness spaces into the community. It's aimed at 'creating a community devoted to health and wellness,' according to First Capitol Group. Lake County Commissioner Sean Parks said: 'I think the growth has brought some good things, but definitely there's a lot of concern right now. 'I tell people, "Look, I live here too. I'm a Central Florida native." I'm shocked at what I see. I get it.' Parks is advocating for growth management, rather than the end of it altogether, which seems to be what many locals want.
Daily Mail
an hour ago
- Daily Mail
Inside Trump's 20-hour play to win over stubborn Republicans on Big Beautiful Bill including signed MAGA swag
President Donald Trump wasn't on the House floor for Thursday's vote on his 'Big, Beautiful Bill' – but he was there in spirit, including on the right hand of one South Carolina lawmaker voting his way. Joe Wilson (R-S.C.), a member of the House Armed Services Committee, was sporting a custom ring on the big day with a golden image of the president's face as he cast his vote for the mega-bill that extended Trump's 2017 tax cuts. With Wilson's help, the massive bill passed 218-214 after a pressure campaign by Trump and congressional leaders kept lawmakers working overnight. 'It's gold Donald Trump on silver. You don't see it every day,' Wilson told the Daily Mail about the special jewelry he wore for the occasion. 'One of my staff was kind enough to get it for me,' he explained. Wilson's vote wasn't considered up for grabs, which may be why his staff came up with its own special Trump swag. For the about a dozen of other lawmakers who were wavering, the president applied his famous fear tactics – as well as a charm and even an array of signed swag – to get Republicans to push the mammoth bill across the finish line. That came despite polls showing the underwater and even some people who voted for it warning about steep cuts to Medicaid or fretting about the estimated $3 trillion it's estimated to tack onto the national debt. Tim Burchett (R-Tenn.) testified to Trump's salesmanship in a video he posted of himself leaving the White House after conservative House Freedom Caucus members who were wavering met with the president. 'The president was wonderful, as always,' Burchett gushed. 'Informative, funny, he told me he likes seeing me on TV, which was kind of cool.' Then Rep. Byron Donalds of Florida, a Trump loyalist who was walking with him, asked: 'Did you show them what he signed for you?' 'Yeah, he signed a bunch of stuff,' Burchett responded, downplaying it. 'It's cool.' Agriculture Secretary Brooke Rollins also poured on the charm when she ran into Burchett outside the White House, offering a hug and asking: 'Are we getting it done?' 'Yes m'am,' he replied, before adding, 'I'm a happily married man.' The video also shows Burchett gripping a gold challenge coins of the kind Trump doles out, as he did to an African reporter he called 'beautiful.' 'Donald Trump absolutely was our closer, and Donald Trump never stopped,' said House Majority Whip Rep. Steve Scalise (R-La.), whose own role is to line up support for legislation on the Floor. 'Every day [he] was there in the fight [asking] "Who do I need to call? What do I need to do?"' Scalise said no president was 'more directly engaged.' 'President Trump was in the Oval Office making phone calls to just about everybody in the House,' said Trump's economic advisor Kevin Hassett. There were also threats, including some delivered in public. 'For Republicans, this should be an easy yes vote. Ridiculous!!!' Trump wrote in all-caps on his Truth Social site. 'MAGA is not happy, and it's costing you votes!!!' he wrote in another. Not all of his persuasive tactics resulted in votes. Trump golfed this past weekend with ally Sen. Lindsey Graham but also Kentucky Sen. Rand Paul, one of three Senate Republicans who voted against the bill. (Victory came in the Senate after leaders offered a series of concessions to Alaska Sen. Lisa Murkowski, who nevertheless wrote that 'This bill needs more work' and 'this has been an awful process' with a 'frantic rush to meet an artificial deadline.') Trump has notably avoided railing against Paul, even while vowing to primary Rep. Thomas Massie (R-Ky.), who Trump rips as a 'grandstander' and who also opposed the bill. Just two House Republicans, Massie and Pennsylvania Rep. Brian Fitzpatrick, voted against the bill. That comes even as fellow Republicans who had wavered ultimately got behind it. That includes New Jersey GOP Rep. Jeff Van Drew, who had raised concerns that limits on health care provider taxes in his state could and up sapping critical resources for Medicaid. 'I couldn't vote for it that way,' he said, because it would have devastated how the state operates. He said he worked with President Trump directly and got a change incorporated in a final 'wrap-around' amendment. He said he was trying to persuade some of his own colleagues with the misguided view that 'Medicaid was for lazy people.' 'We addressed that, okay? But the bottom line is it's working people, it's disabled people, it's nursing homes, senior citizens, a whole array of people.' Now that the bill is through Congress, Van Drew acknowledged that the fight now becomes a PR battle – with pre-vote polls showing support for Trump's 'big, beautiful bill' is underwater, and a potential risk for Republicans in the 2026 elections. A nonpartisan Congressional Budget estimate said the bill would cut Medicaid by $1 trillion and could cause nearly 12 million people to lose health insurance coverage. 'So the bottom line is, yes, so now this changes from the bureaucratic public policy process into a policy of who's going to be a better mouthpiece? Who's going to articulate the political sense of the ramifications of this bill better? Are you going to be able to emphasize the tax cuts .. So if we articulate that well, if we sell it well, if we talk about we're still maintaining the safety net, then I think we'll be okay.'
Daily Mail
an hour ago
- Daily Mail
States where fast food could get a lot more expensive due to new law
Ten states and the District of Columbia have banned a popular fast food to-go container that could mean takeouts are about to get more expensive for customers. Earlier this week, Delaware joined the cohort of states and the capital that have banned Styrofoam containers in the fast food industry. The restaurant industry has often leaned on the white, creaky material because it insulated food for roughly 14 cents per container, compared to a biodegradable option that typically runs for around 25 cents. 'It could be something that affects us when it comes to pricing [of our food],' Ezell Barnes, who owns a Delaware food truck called Zoagies, told Delaware Online. 'We already exist on razor-thin profit margins.' CEO of the Delaware Restaurant Association, Carrie Leishman, said the new ban could largely affect small businesses and potentially run them into the ground. 'The stain which this could place on a small business could end so many of them,' she told the outlet. 'What this bill really impacts is equity in the restaurant business,' she said. 'The impact upon our local ethnic minority communities, given its effects on these small restaurants, will be incredibly damaging.' CEO of the Delaware Restaurant Association, Carrie Leishman, said the new ban could largely affect small businesses and potentially run them into the ground The Delaware ban follows that of California, Oregon, and Rhode Island, which outlawed the material January 1, 2025. The first US state to ban the product was Maine in January 2021 However Leishman noted that 'most of Delaware's restaurants were already in compliance' with the law. The Delaware ban follows that of California, Oregon, and Rhode Island, which outlawed the material January 1, 2025. The first US state to ban the product was Maine in January 2021. The law was signed in 2019 by Governor Janet Mills, but didn't go into effect until 2021. The Delaware bill was signed in 2022, but went into effect on Tuesday. 'Polystyrene cannot be recycled like a lot of other products, so while that cup of coffee may be finished, the Styrofoam cup it was in is not,' Mill said in 2019. 'In fact, it will be around for decades to come and eventually it will break down into particles, polluting our environment, hurting our wildlife, and even detrimentally impacting our economy.' New York also signed its law in 2019 under former Governor Andrew Cuomo. It went into effect in 2022. A 2024 waste study by the Department of Sanitation in New York City showed that polystyrene - what Styrofoam is made of - decreased 54 percent by weight between 2017 and 2023. It is feared that the ban will impact small businesses like food trucks the most The containers are popular for containing a variety of takeout food The Empire State was one of the first states to ban plastic bags in March 2020, seeing a decrease of 67 percent between 2017 and 2023, the study found. California was the first to ban plastic bags in 2014 and will enact another law in 2026 prohibiting the sale of 'reusable' plastic bags that are thicker. The Golden State has vowed to cut single-use plastics by 25 percent by 2032 and to recycle 65 percent of what's left. It shift to recycled plastic in the same time frame, according to Cal Recycle. Californians throw out 290 Olympic pool-sized worth of plastic each day. Styrofoam takes 500 years to decompose and it cannot be recycled, like glass and certain types of plastic. The material also leaks large amounts of ozone in the atmosphere, which causes environmental and respiratory issues, according to Colgate University. Styrofoam is estimated to take up roughly 30 percent of the US' landfills, with around 5billion pounds of it, according to Heal The Planet.
