IDC & Diligent Roundtable
Enhancing Visibility of Shadow AI in the Supply Chain
In Partnership With
AI adoption across supply chain is inevitable and most CISO and risk leaders already know it is reshaping how their ecosystem operates. The bigger question is visibility. Shadow AI is silently embedding itself into approved services, third-party operations, and sub-processors, outpacing the enterprise’s capacity for risk visibility. And it is accelerating IDC expects that by 2029, 40% of SaaS applications will be significantly augmented with agentic capabilities. Much of that will happen inside services organizations have already approved.
The visibility gap is real. IDC’s 2026 AI Platform Practitioner Survey found that 35% of organizations name the spread of Shadow AI as a top governance challenge, and 30% have no single system of record for the AI running in their environment. In the Middle East, only 27% of organizations manage AI risk at the level IDC defines as optimized: dynamic and real-time, with strict policies for agent use and permissioning.
IDC and Diligent invite senior IT security leaders to an exclusive evening in Dubai to compare notes on enhancing visibility of Shadow AI across the supply chain and governing it more effectively. The focus is on moving from periodic assurance towards continuous, proportionate oversight.
27% of Middle East organizations
run AI risk management at the optimized tier, with real-time policies on agent use and permissioning
Key Learning Outcomes Include:
How AI comes in through approved services, model updates, sub processors and fourth parties, and how to see it better without trying to block adoption.
Which risk categories matter, what to ask across the supply chain, and how to match oversight to the level of exposure
What should prompt a reassessment, and who owns the response when AI risk in the supply chain shifts
How relying on the same few model and cloud providers creates shared points of failure across a supplier base that looks diversified
Agenda
IDC & Diligent Roundtable
Wed, Nov 18
Welcome & Registration
Welcome Address
Shilpi Handa
Associate Research Director (META), IDC
Shadow AI: How Suppliers are Introducing Invisible Security Risks
Chlōe Dellow
Director – Sales, Diligent
Bram Ketting
Vice President, Business & Product Strategy, Diligent
Panel Discussion: Securing the Supply Chain: Managing Shadow AI and Concentration Risk
As AI adoption accelerates, traditional assurance frameworks are struggling to keep pace with the evolving third-party risk landscape. This panel brings together security leaders to explore strategies for identifying and managing hidden dependencies across suppliers, subcontractors, and shared AI models. The discussion will focus on strengthening supply chain visibility, mitigating concentration risks, and building resilient ecosystems that minimize single points of failure in an increasingly interconnected AI-driven world.
Shilpi Handa
Associate Research Director (META), IDC
Chlōe Dellow
Director – Sales, Diligent
Bram Ketting
Vice President, Business & Product Strategy, Diligent
Summary & Closing Remarks
Networking Dinner
Speakers
Shilpi Handa
Associate Research Director (META)
IDC
Read bio
Shilpi Handa
Event Sessions
One Day Event 6:55 pm
Panel Discussion: Securing the Supply Chain: Managing Shadow AI and Concentration Risk
As AI adoption accelerates, traditional assurance frameworks are struggling to keep pace with the evolving third-party risk landscape. This panel brings together security leaders to explore strategies for identifying and managing hidden dependencies across suppliers, subcontractors, and shared AI models. The discussion will focus on strengthening supply chain visibility, mitigating concentration risks, and building resilient ecosystems that minimize single points of failure in an increasingly interconnected AI-driven world.
One Day Event 6:30 pm
Welcome Address
Chlōe Dellow
Director – Sales
Diligent
Read bio
Chlōe Dellow
Chlōe holds 7+ years of experience partnering with organisations including FTSE 100 and Fortune 100/500 companies on third-party risk and GRC transformation initiatives, advising organisations on best practices, innovation, emerging risks and considerations.
Chlōe is a strategic advisor focused on supporting organisations with different levels of programme maturity. She supports customers in developing and scaling their risk, compliance and third-party risk strategies, and ensuring consistent, measurable, and outcome-focused results.
She combines this with a strong focus on sharing market trends, peer benchmarks and real-world observations to help organisations stay ahead of an evolving risk and regulatory landscape.
She has deep expertise in navigating complex frameworks such as NIST, DORA, NIS2 and ISO 27001, with particular focus on highly regulated industries including financial services.
Event Sessions
One Day Event 6:55 pm
Panel Discussion: Securing the Supply Chain: Managing Shadow AI and Concentration Risk
As AI adoption accelerates, traditional assurance frameworks are struggling to keep pace with the evolving third-party risk landscape. This panel brings together security leaders to explore strategies for identifying and managing hidden dependencies across suppliers, subcontractors, and shared AI models. The discussion will focus on strengthening supply chain visibility, mitigating concentration risks, and building resilient ecosystems that minimize single points of failure in an increasingly interconnected AI-driven world.
One Day Event 6:35 pm
Shadow AI: How Suppliers are Introducing Invisible Security Risks
Bram Ketting
Vice President, Business & Product Strategy
Diligent
Read bio
Bram Ketting
Event Sessions
One Day Event 6:55 pm
Panel Discussion: Securing the Supply Chain: Managing Shadow AI and Concentration Risk
As AI adoption accelerates, traditional assurance frameworks are struggling to keep pace with the evolving third-party risk landscape. This panel brings together security leaders to explore strategies for identifying and managing hidden dependencies across suppliers, subcontractors, and shared AI models. The discussion will focus on strengthening supply chain visibility, mitigating concentration risks, and building resilient ecosystems that minimize single points of failure in an increasingly interconnected AI-driven world.
One Day Event 6:35 pm
Shadow AI: How Suppliers are Introducing Invisible Security Risks
In Partnership With
Diligent
At Diligent, we believe in a world where transformational leaders can build more successful, equitable and sustainable organizations.
One million users and more than 700,000 board members and leaders rely on Diligent software to connect insights across governance, risk, compliance and audit to drive greater impact and lead with purpose.
Venue
InterContinental Dubai Festival City by IHG
Meeting Room – Al Noor Meeting Room
Po 45777 – Al Kheeran – Dubai Festival City – Dubai – United Arab Emirates