EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier

Guest: Jeanette Manfra , VP, Head of Risk and Compliance, Google Cloud Topics: How does "outsourcing" security to the cloud change the intensity of the security vs. privacy struggle for a CISO? Does the centralization of cloud make it a bigger target for regulators, or is there a dimension we're missing? Does the Shared Responsibility Model actually survive contact with regulators, and how does AI complicate that boundary? Can AI actually automate the translation of fragmented rules into evidence, or are we just dreaming? How do we navigate the collision between transparency (logging everything) and privacy (recording nothing)? What is your one piece of practical advice for leaders helping their teams adopt AI? Resources: Video version EP14 Making Compliance Cloud-native EP161 Cloud Compliance: A Lawyer - Turned Technologist! - Perspective on Navigating the Cloud EP258 Why Your Security Strategy Needs an Immune System, Not a Fortress with Royal Hansen EP126 What is Policy as Code and How Can It Help You Secure Your Cloud Environment?

You can listen to EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier online on Radio and Podcast. Open the player on this page to stream the available audio.

EP273 From CISA to Cloud: AI Assurance, Concentration Risk, and the New Regulatory Frontier is an episode from Cloud Security Podcast by Google by Anton Chuvakin.

This episode is 29:28 long.

This episode was published on Apr 20, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Cloud Security Podcast by Google when more episodes are available from the podcast feed.