The FIT4Privacy Podcast | Exploring ISO Standards AI Privacy | Grow Skills Store

What is AI governance? Who is an AI governance professional? How is AI governance different from ISO/IEC 42001, privacy compliance, or the EU AI Act?  KEY MOMENTS 02:20 - How do you see this world of AI changing so fast? 5:20 - AI Governance Concept 12:20 - AI Governance Professional Definition 15:33 - Skills Framework and Roles 19:41 - Why AIGP Not Regional Like CIPP 27:37 - Why Get AIGP Certified 32:25 - How to Connect and Wrap Up  In this episode of the FIT4Privacy Podcast, host Punit Bhatia welcomes Ashley Casovan, Managing Director of the IAPP AI Governance Center, to explore the rapidly evolving world of AI governance. Ashley shares her journey from developing Canada's pioneering guidance on automated decision-making systems to leading global conversations on AI governance, professional skills, and responsible AI practices. Together, they discuss why AI governance has become a critical discipline, how organizations can manage AI risks and opportunities, and what professionals need to know to succeed in this emerging field.  Whether you're a privacy professional, compliance officer, AI practitioner, risk manager, auditor, or business leader, this episode provides valuable insights into building trustworthy, responsible, and effective AI governance programs.  🎧 Listen now to understand how organizations can turn responsible AI principles into practical governance frameworks.  ABOUT THE GUEST As the managing director of the IAPP’s AI Governance Center, Casovan serves as the primary thought leader and public voice for the IAPP on AI governance, while providing strategic direction and contributions to the development of practical, relevant and timely content for the AIGC. Casovan will lead the AIGC engagement efforts with industry leaders, senior policy makers, regulators and international organizations to ensure AI governance is top of mind when discussing AI’s potential. Through roles in the public sector at the municipal and federal levels, Casovan developed expertise in responsible AI, standards, policy, open government and data governance. As the former director of data and digital for the government of Canada, Casovan previously led the development of the world’s first national government policy for responsible AI.  Building from this work, Casovan served as the Executive Director of the Responsible AI Institute, a multi-stakeholder non-profit dedicated to mitigating harm from the use of AI systems, a member of OECD’s AI Policy Observatory Network of Experts, a member of the World Economic Forum's AI Governance Alliance, an Executive Board Member of the International Centre of Expertise in Montréal on Artificial Intelligence and as a member of the IFIP/IP3 Global Industry Council within the  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links  Guest Links Ashley Casovan • LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/  • Website: https://iapp.org/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

AI has changed the risk landscape faster than many organizations could have anticipated. But what does that mean for privacy, cybersecurity, ethics, and compliance professionals?In this episode of the FIT4Privacy Podcast, we explore how governance has evolved from data governance and privacy governance to the broader world of AI governance.The conversation looks at what AI governance really means, why privacy alone is no longer enough, and how organizations can balance innovation with risks around transparency, accuracy, ethics, cybersecurity, and societal impact.We also explore the evolution of AI governance before ChatGPT, lessons from Canada's approach to automated decision-making systems, and why organizations don't necessarily need another committee but do need a coordinated approach to managing AI risks.Tune in for a deeper conversation on AI, privacy, ethics, and the future of responsible governance.🎧 Catch the full episode on YouTube, Spotify, and Apple Podcasts.Resources & Links Guest Links Ashley Casovan • LinkedIn: https://www.linkedin.com/in/ashley-casovan-b3247211/  • Website: https://iapp.org/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO 

What happens when the CTO and CISO roles come together in one person?  KEY MOMENTS 2:14 New risks come up or amplify? 3:12Copilot Rollout Risks 6:50 How to prevent this scenario? 9:20 AI Opportunity Mindset 13:23 As a CISO CTO, how do they use AI on a regular basis? 14:50 Starting use cases of AI 18:55 What ProArch does? 21:30 Conclusion  In this episode, Punit Bhatia speaks with Ben Wilcox about balancing innovation and security in the age of AI. They explore whether AI introduces new risks or amplifies existing ones, and what organizations must consider when scaling tools like Microsoft Copilot.  The discussion highlights the importance of data governance, access controls, and proper configuration to avoid unintended privacy risks. Ben also shares practical AI use cases from productivity gains to building agents and explains how organizations can start their AI journey responsibly. Overall, this episode offers a balanced view of AI as both an opportunity and a risk, with actionable insights for adopting it securely and effectively.  ABOUT THE GUEST Ben Wilcox is the CISO and CTO at ProArch, where he leads cybersecurity strategy and cloud innovation for enterprise clients. With deep expertise in risk management, compliance, and AI-driven security, Ben helps organizations navigate evolving threats while building resilient, future-ready systems.  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links  Guest Links Ben Wilcox • LinkedIn: https://www.linkedin.com/in/ben-wilcox/ • Website: https://www.proarch.com  Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy How to Find Balance • Intro to GDPR • Be an Effective DPO 

Scaling Copilot: Hidden Risks & Data ExposureMost organizations are adopting Microsoft Copilot as a natural extension of their existing Microsoft environment, but scaling it is not as simple as assigning licenses.In this discussion, Punit Bhatia and Ben Wilcox explore what really happens when Copilot is introduced into environments with scattered data, unstructured information, and complex access permissions.They highlight how AI doesn’t create new risks but makes existing ones visible and usable. Copilot can surface data based on access rights even when those permissions were never properly reviewed.A real-world example shows how an employee unintentionally accessed a coworker’s personal improvement plan due to misconfigured permissions, turning it into a potential privacy breach.The conversation emphasizes that successful Copilot adoption requires proper data governance, clear access controls, and mechanisms such as data classification, sensitivity labeling, and encryption.This is not a plug-and-play exercise organization that must prepare their data before scaling AI.🎧 To catch the full discussion, search FIT4Privacy on YouTube, Spotify, or Apple Podcasts.  Resources & Links  Guest Links Ben Wilcox • LinkedIn: https://www.linkedin.com/in/ben-wilcox/ • Website: https://www.proarch.com  Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/ • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO    

What if AI could monitor your compliance controls 24/7 more consistently than any team ever could?KEY MOMENTS   1:50  What are AI agents and why should business leaders care? 5:24  Is that agent or limited capability agent? 8:13  Is that the dimension this agent can go to?  13:50  How can AI agents help? 22:30  How to handle risks when it comes to AI agents? 26:24  Dislike in the journey of entrepreneur  In this episode of the FIT4Privacy Podcast, Punit Bhatia speaks with Richa Kaul, CEO of ComplYant, to unpack what AI agents really are and what they are not. They clarify the difference between true agentic AI and simple “call-and-response” tools, and explore how AI agents are transforming governance, risk, and compliance (GRC).  This conversation goes beyond hype to offer practical, enterprise-ready insights on using AI responsibly in compliance.  👉 Listen now and rethink how AI can support smarter, continuous compliance.  ABOUT THE GUEST Richa Kaul is the Founder and CEO of Complyance, a privacy and compliance platform that helps companies simplify data protection and regulatory requirements. A seasoned leader in data privacy and governance, Richa is known for translating complex compliance challenges into practical, scalable solutions for modern businesses.  ABOUT THE HOST    Punit Bhatia is one of the leading privacy experts who works independently and has worked with professionals in over 30 countries. Punit works with business and privacy leaders to create an organization culture with high privacy awareness and compliance as a business priority. Selectively, Punit is open to mentor and coach privacy professionals.    Resources & Links  Guest Links Richa Kaul • LinkedIn:  https://www.linkedin.com/in/richa-kaul/ https://www.linkedin.com/company/complyancehq • Website: https://www.complyance.com/   Grow Skills (Privacy Courses & Insights) • Courses: https://growskills.store/courses/ • Insights: https://growskills.store/insights/  • Website: https://growskills.store/  FIT4Privacy • Website: https://www.fit4privacy.com • Podcast: https://www.fit4privacy.com/podcast • Blog: https://www.fit4privacy.com/blog • YouTube: http://youtube.com/fit4privacy  Punit Bhatia • Website: https://www.punitbhatia.com  Books  • Be Ready for GDPR • AI & Privacy – How to Find Balance • Intro to GDPR • Be an Effective DPO