IDC & Diligent Webinar
The Vendor Blind Spot, Part 2: Who Owns Vendor AI Risk
Hosted By
The first webinar session established that AI risk in the GCC is growing fastest outside the enterprise; inside the vendor and supplier systems organizations already depend on. Risk and security leaders across the region confirmed the scale of the gap: 54% have reviewed AI access for fewer than a quarter of their vendors, and 86% named unauthorized access or compliance failure as their top concern.
A new and more pressing question has emerged since that discussion: accountability. IDC research shows that AI governance in the region still sits mainly with IT or an AI center of excellence: only 10% of organizations in Saudi Arabia and 4% in the UAE govern AI agents within business functions, leaving risk, legal, and procurement leaders outside the decisions they will be held accountable for.
This second session in the series brings together senior risk, security, TPRM, compliance, and procurement leaders from across the GCC to move from diagnosis to action. Drawing on IDC research and the findings from the first session, it will examine where accountability for vendor AI should sit, what organizations should require of their vendors, and how to build a credible case to the board for the mandate and budget to act.
Key Discussion Areas
What proportionate oversight of vendor AI looks like: tiering vendors by AI exposure, asking for evidence rather than attestations, and reviewing when something changes.
Why responsibility for vendor AI outcomes stays with you, and how the CISO, CRO, procurement, and audit share it.
The commitments worth asking for: disclosure of AI use, notice of material changes, incident reporting,
and the right to audit.
How to turn vendor AI risk into a clear owner, a short set of metrics, and a budget request that leadership will back.
42%
Of Saudi organizations have strengthened third-party and supply chain security controls in response to regional tensions, the top initiative they have accelerated.
Agenda
IDC & Diligent Webinar
Wed, Dec 9
Welcome Address
IDC Keynote: Closing the accountability gap in Vendor AI
Shilpi Handa
Associate Research Director (META), IDC
Rethinking Third-Party AI Risk: From Vendor Oversight to Shared Accountability
Chlōe Dellow
Director – Sales, Diligent
Beyond Compliance: What Organizations Must Demand from Their AI Vendors
Jelle Groenendaal
Senior Director, 3rdRisk, A Diligent Brand
Panel Discussion: Building clear ownership of Vendor AI Risk across the enterprise
Shilpi Handa
Associate Research Director (META), IDC
Chlōe Dellow
Director – Sales, Diligent
Jelle Groenendaal
Senior Director, 3rdRisk, A Diligent Brand
Open Discussion Summary & Close
Speakers
Shilpi Handa
Associate Research Director (META)
IDC
Read bio
Shilpi Handa
Event Sessions
One Day Event 11:55 am
Panel Discussion: Building clear ownership of Vendor AI Risk across the enterprise
One Day Event 11:05 am
IDC Keynote: Closing the accountability gap in Vendor AI
Chlōe Dellow
Director – Sales
Diligent
Read bio
Chlōe Dellow
Chlōe holds 7+ years of experience partnering with organisations including FTSE 100 and Fortune 100/500 companies on third-party risk and GRC transformation initiatives, advising organisations on best practices, innovation, emerging risks and considerations.
Chlōe is a strategic advisor focused on supporting organisations with different levels of programme maturity. She supports customers in developing and scaling their risk, compliance and third-party risk strategies, and ensuring consistent, measurable, and outcome-focused results.
She combines this with a strong focus on sharing market trends, peer benchmarks and real-world observations to help organisations stay ahead of an evolving risk and regulatory landscape.
She has deep expertise in navigating complex frameworks such as NIST, DORA, NIS2 and ISO 27001, with particular focus on highly regulated industries including financial services.
Event Sessions
One Day Event 11:55 am
Panel Discussion: Building clear ownership of Vendor AI Risk across the enterprise
One Day Event 11:25 am
Rethinking Third-Party AI Risk: From Vendor Oversight to Shared Accountability
Jelle Groenendaal
Senior Director
3rdRisk, A Diligent Brand
Read bio
Jelle Groenendaal
Jelle Groenendaal is Senior Director at 3rdRisk, a Diligent brand. He holds a Ph.D. in Risk Management and has over 20 years of experience as a researcher, consultant and practitioner in risk and resilience. Throughout his career, he has advised and worked with large corporations and government organisations on strengthening governance, risk management and operational resilience.
Event Sessions
One Day Event 11:55 am
Panel Discussion: Building clear ownership of Vendor AI Risk across the enterprise
One Day Event 11:40 am
Beyond Compliance: What Organizations Must Demand from Their AI Vendors
Partner
Diligent
At Diligent, we believe in a world where transformational leaders can build more successful, equitable and sustainable organizations.
One million users and more than 700,000 board members and leaders rely on Diligent software to connect insights across governance, risk, compliance and audit to drive greater impact and lead with purpose.