AI Unleashed: Transforming Third-Party Risk

Guest: Natalie Druckmann, Head of EMEA at Certa

Host: Mike Day

How is artificial intelligence reshaping third-party risk management? In this episode, Mike Day speaks with Natalie Druckmann from Certa, exploring how AI can transform due diligence, regulatory compliance, and supplier oversight. Natalie shares her journey from delivery and procurement into technology leadership, before unpacking the real-world use cases that are redefining TPRM—from automating document review to interpreting complex regulations like DORA. Together, they discuss how organisations can move from spreadsheet chaos to continuous monitoring, and from compliance overhead to strategic insight.

• Natalie's path from practitioner to tech leader
• The evolution of TPRM tech: from Excel → platforms → modular AI solutions
• Industry maturity: financial services vs pharma, retail, and defence
• Using AI to analyse supplier evidence, interpret new regulations, and enable 'risk management by exception'
• Why 'process → people → platform' is the right order for success
• Common pitfalls in adopting technology
• The future of TPRM: faster onboarding, smarter risk insight, and human + AI collaboration

“We fixed the problem of not knowing—and created the problem of knowing too much.”

“AI in TPRM isn’t about replacing people; it’s about freeing them to focus where it matters.”

“Process first, people second, platform third.”

✅ Start with why and who, before deciding what or how.

✅ Design your process first—technology won’t fix a broken one.

✅ Use AI for transparency, not black-box decisions.

✅ Adopt a base-plate approach: start simple, build as you mature.

✅ Aim for risk management by exception, not exhaustion.

🌐 thirdpartytherapy.com – show archive

🤖 certa.ai – learn more about Certa’s AI-driven risk solutions

Join me in a conversation with Dharminder Mehmi from Legal & General as we explore regulation in the UK Finance sector, the experience of moving from the regulator to the regulated and how regulation may develop in the future.

Distributed with support from CEFPRO Connect

I get to explore my TPRM nerdy side with Harj Mattu from Deloitte as we explore the world of TPRM technology. Who are the big players, who are the new entrants bringing something difference and our favourite topic of AI in TPRM.

Published in partnership with CEFPRO Connect

A conversation with Oliver Jones from H&Z Consulting on the evolution of TPRM from a sub-function of Procurement to a key function on its own with board level focus - how far from Procurement should it go and what are the technology solutions that can help bring them together?

Great conversation with Nathan Hopkins from The ESCROW Company discussing the evolution of ESCROW, how it brings resilience to SaaS solutions and what happens when you invoke it

A great conversation with WIll Cooke and Jack Birch from Procurement Heads on the shortage of good TPRM talent, barriers to entry, how companies are recruiting and why there are no 12 year olds wanting to get into TPRM.

Join me in a conversation with Charlie Jones from Reversing Labs to talk about the limitations of traditional cyber controls, a new approach to testing - Static Binary Analysis - and the impact of recent regulations.

Great conversation with Stephen Boyer - Chief Innovation Officer and co-founder of Bitsight about the growth of the cyber threat and how TPRM can use data to dynamically monitor this risk.