What the field looks like now, how it got here, and what you need to do about it.

This is the entry point for the "TPRM in the Age of AI" series and the one module every TPRM practitioner should take regardless of seniority. It does not assume any AI background. It starts from first principles: why the attestation model is breaking down, what four real incident case studies say about the gap between declared controls and observable evidence, and what the arrival of AI means for the profession — both the opportunity and the threat.

The module is deliberately uncomfortable in places. It names which parts of the TPRM role are most at risk. It presents the AI-on-AI problem directly: when both the vendor completing the questionnaire and the program reviewing it are using AI, the result is a fast, confident, expensive process that generates zero new information about actual security posture. It also names the structural fact that assessment volume will increase while headcount stays flat — and frames this as something to prepare for, not fear.

By the end, participants have a clear picture of what is changing, a calibrated view of what AI can and cannot do in their work, and five concrete actions to take this week and this quarter — none of which require budget approval.

• Audience: All practitioners

• Format: Live sessions over Zoom

• Length: 120 minutes

• CPE: 2 CPEs

• Prerequisites: Minimum one year of TPRM, GRC, vendor management, or related experience. No prior AI or technical background required.

• Providing Organization: Coverbase

• Instructor: Clarence Chio – Cofounder & CEO of Coverbase, Instructor at UC Berkley since 2019