# Beyond Vendor Risk: Real-Time GRC, AI, and Protecting App User Data - Jadee Hanson - CSP #221

Page: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/beyond-vendor-risk-real-time-grc-ai-and-protecting-app-user-data-jadee-hanson-csp-221
Text version: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/beyond-vendor-risk-real-time-grc-ai-and-protecting-app-user-data-jadee-hanson-csp-221.md
Podcast: [CISO Stories Podcast (Audio)](https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889)
Published: 2026-02-09T17:00:00+00:00
Episode link: https://cspaudio.libsyn.com/beyond-vendor-risk-real-time-grc-ai-and-protecting-app-user-data-jadee-hanson-csp-221
Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/cspaudio/CSP_221_1--e86f5072-7a1a-4400-9d89-026dde090b54--audio-converted--44d76b5d-99c7-43a1-93a7-eae82b3ff0c6.mp3?dest-id=2584793
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/beyond-vendor-risk-real-time-grc-ai-and-protecting-app-user-data-jadee-hanson-csp-221
Duration seconds: 1598

## Resource

CISO Jadee Hanson shares how Vanta "drinks its own champagne," running on NIST CSF with quarterly baseline reviews and using Vanta's GRC platform to turn every release into live UAT for privacy, governance, and compliance. We rethink third-party management—why point-in-time risk scores are fading and how AI drives continuous monitoring and outcome-based assurance. Bottom line: don't just audit—instrument your controls and prove trust in real time. Visit https://cisostoriespodcast.com for all the latest episodes! Show Notes: https://cisostoriespodcast.com/csp-221

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/beyond-vendor-risk-real-time-grc-ai-and-protecting-app-user-data-jadee-hanson-csp-221/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/beyond-vendor-risk-real-time-grc-ai-and-protecting-app-user-data-jadee-hanson-csp-221.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.