The AI-Enabled Vendor: Building a Third-Party AI Risk Assessment Aligned to NIST AI RMF
3:00 PM - 3:50 PM
Third-party vendors are rapidly embedding generative and agentic AI into the services organizations already consume, often without notice and rarely within the scope of existing vendor assessments. Point-in-time questionnaires capture neither the model changes, training data shifts, nor autonomous behaviors that define AI-enabled offerings, leaving a widening gap in third-party risk posture and growing demand for evergreen oversight.
Speaker(s)
Nitin Agarwal
Director Enterprise AI & Risk
Luminace
Nitin Agarwal is a CISSP-certified cybersecurity and technology executive with more than two decades of experience leading enterprise risk governance, digital transformation, and AI strategy across the renewable energy and critical infrastructure sectors. As Director of Enterprise AI and Risk at Brookfield Renewable, he advises senior leadership on cyber threats, regulatory risk, and emerging technologies across complex IT and operational technology environments supporting large-scale solar and wind assets. Nitin has built enterprise programs spanning cyber governance, third-party risk, data privacy, and the DOJ Data Security Program, aligning innovation with disciplined governance and responsible AI deployment. His work focuses on translating technical risk into board-ready strategy and enabling secure, scalable technology ecosystems that drive resilience, sustainable growth, and operational excellence.