Managing Third-Party Risk at Scale Without Drowning in Surveys - with Carey Smith

The AI in Business Podcast

Managing Third-Party Risk at Scale Without Drowning in Surveys - with Carey Smith

The AI in Business PodcastMar 26, 2026

Why It Matters

As organizations juggle over 10,000 third‑party relationships, losing visibility can lead to catastrophic breaches and regulatory fallout, making continuous risk monitoring a board‑level priority. Implementing explainable AI and automated remediation not only safeguards data and brand value but also frees executives to focus on strategic risk decisions, a critical advantage in the rapidly evolving 2026 risk landscape.

Key Takeaways

  • Continuous monitoring replaces static vendor questionnaires for 10k suppliers
  • AI risk scores need traceable actions to avoid black box
  • Automated playbooks trigger instant remediation for high‑materiality vendors
  • Segment suppliers by materiality to focus AI automation where needed
  • Shift from compliance to resilience mindset for proactive risk response

Pulse Analysis

Enterprises managing thousands of suppliers are hitting a visibility wall. Traditional third‑party risk management relies on annual questionnaires that quickly become outdated, leaving executives blind to risk concentrations and cascading failures. By moving to continuous, risk‑based monitoring, organizations can maintain a real‑time view of each vendor’s posture, turning a static compliance exercise into an active intelligence engine that scales with the supply chain’s complexity.

Deploying AI for risk scoring adds speed but also introduces a black‑box dilemma. Leaders demand deterministic explainability and full data provenance so that every score can be audited and trusted. Modern platforms ingest external threat feeds, financial signals, and cyber telemetry, updating risk grades in near real time. Traceable actions and transparent models ensure that automated alerts support, rather than replace, human judgment, preserving regulatory standing and brand valuation.

The true competitive edge comes from shifting from detection to resilience. Automated playbooks translate high‑risk signals into instant remediation steps—contract reviews, compensating controls, or alternate supplier activation—based on each vendor’s materiality to revenue, data, and operations. Segmenting the supplier base lets AI focus on critical partners, reducing noise and alert fatigue. This resilience mindset, backed by governance‑first workflows, empowers executives to make strategic decisions quickly, turning risk visibility into decisive, business‑protective action.

Episode Description

The collapse of traditional, static survey models at scale creates a systemic visibility gap that transforms multi-tier supply chain dependencies into boardroom-level risks. In this Aravo-sponsored episode, Carey Smith, former CIO and Chief Technology Innovation Officer of Blue Cross Blue Shield of Minnesota and President and CIO of XcelerateHealth, outlines how enterprises must transition to continuous, AI-enabled monitoring to achieve deterministic explainability in risk scoring. The discussion focuses on shifting from simple risk detection to operational resilience by automating remediation playbooks and segmenting vendor scrutiny based on business materiality

Want to share your AI adoption story with executive peers? Learn how brands work with Emerj and other Emerj Media options at go.emerj.com/partner

Show Notes

Comments

Want to join the conversation?

Loading comments...