Most vendor management programs at financial institutions are built to satisfy an examiner. Michael Carpenter, VP of Risk Management at Ncontracts and author of The Upside of Third-Party Risk Management, spent 30 years building third-party risk management programs at community banks, credit unions, and large financial institutions — and in this episode of Ncast, he explains what that experience revealed about why so many TPRM programs fail to deliver real business value.

Regulators aren't waiting for new rules before they start examining for compliance failures — they're applying existing frameworks to AI and vendor oversight right now, and wealth management firms that aren't prepared are already behind. Hollie Mason, Managing Director at Stout and former FINRA senior enforcement counsel, joins Rafael DeLeon to break down what the SEC and FINRA are prioritizing in 2026 exams, where the vendor oversight documentation gaps are showing up, and what defensible AI governance looks like for RIAs and broker-dealers.

The SEC's amended Regulation S-P raises the bar on how investment advisors protect customer data — and the compliance timeline isn't moving. In this episode of the Ncast, Rafael DeLeon sits down with Tracy Soehle, Associate General Counsel at the Investment Advisors Association, to work through what the rule demands in practice: building an incident response program, meeting the 30-day notification requirement, and managing service providers in a regulatory environment that still leaves a lot open to interpretation.For RIAs, this isn't just a compliance exercise. It runs directly through fiduciary duty — and Tracy walks through how firms can meet that obligation while navigating vendor relationships that don't always cooperate.In this episode:The two most significant changes in amended Reg S-P: mandatory incident response programs and the 30-day customer notification requirementWhy that 30-day clock is harder than it sounds — and what firms need in place before a breach happensWhat "reasonable assurances" from vendors actually means when the rule doesn't require it in the contractWhich service providers will renegotiate and which won't — and how to document the diligence either wayWhy you can delegate notification to a vendor but can't delegate the liabilityData mapping as the non-negotiable foundation of the entire programWhat SEC examiners are asking for and what "reasonably designed" has to mean in practiceTo get insights on how your peers are managing third-party risks, download our State of Third-Party Risk Management Survey: https://www.ncontracts.com/state-of-third-party-risk-management-survey-report

Compliance officers are under constant pressure to answer regulatory questions accurately — and fast. In this episode of Ncast, Rafael DeLeon sits down with Stephanie Lyon and Jay Jamison to unpack what it means to use AI in compliance responsibly, from how Nquiry was built to eliminate the research burden to what examiners actually want to see in your documentation when AI informed a decision.Guests: Stephanie Lyon — SVP of Regulatory & Risk Intelligence, Ncontracts Jay Jamison — Chief Product Officer, NcontractsIn this episode:• Why lean compliance teams are stuck playing compliance encyclopedia — and what that costs• What citations, current sourcing, and visible reasoning have to do with trust in any AI tool• The liability question: when an AI tool gets it wrong, who owns it?• How Nquiry's purpose-built regulatory library and integration with nComply sets it apart from general-purpose AI• What hallucination risk looks like beyond wrong answers — and why regulatory nuance is the harder problem• The examiner's checklist: what Rafael looked for at the OCC when institutions used third-party tools to support compliance decisions• How to tell whether your AI tool is reducing uncertainty or creating itLearn more about Nquiry: https://hubs.ly/Q04f3J8w0

AI is moving faster than most compliance programs can handle — and financial institutions are feeling it. In this episode of the Ncast, host Rafael DeLeon sits down with Ncontracts Chief Product Officer Jay Jamison to talk about what it actually means to govern AI responsibly in financial services.Jay brings nearly 30 years of software experience — including a decade at Microsoft — to a conversation that covers where institutions are going wrong with AI adoption, how to build a practical governance framework starting with your data, what your vendors may not be disclosing about the AI embedded in their products, and where risk and compliance programs are headed over the next three to five years.Whether you're a community bank CEO just getting curious or a compliance officer trying to keep pace with a fast-moving vendor landscape, this episode gives you a framework to move forward with confidence.

Former compliance and BSA officer Ashley Przada joins Rafael DeLeon to share hard-won lessons from 14 years in banking — covering everything from BSA risk and examiner relationships to compliance burnout and building programs from the ground up.

Compliance is often viewed as a gatekeeper instead of a collaborator. How can a compliance officer change that perception and actually become valued as a strategic business partner? In this episode of the Ncast podcast, Rafael DeLeon interviews Michelle Prohaska, Chief Risk & Compliance Officer at Nymbus, as she shares how she laid the groundwork to ensure compliance is welcomed into strategic conversations and partnerships.

In this episode of the Industry Insights podcast, Rafael is joined by CEO and Founder of Ncontracts Michael Berman to talk about the evolution of contract management at financial institutions. It’s a timely topic as Michael’s company celebrates its 15th anniversary and he unveils Ncontracts' newest innovation - the Ntelligent Contracts Assistant.    Contracts are single most effective control a financial institution has when working with third-party vendors. An oversight when drafting or managing contracts can lead to expensive mistakes. It’s not just about pricing. Inadequate analysis of terms and conditions, failure to monitor vendor performance, and deficiencies in handling data security during transitions can all spell trouble. Contract management includes every aspect of the TPRM lifecycle, including vendor onboarding, ongoing oversight, and termination. Meanwhile regulatory scrutiny of contracts continues to increase, with over 100 references in recent guidance impacting banks. Over the years, Michael has watched contract management best practices evolve along with features that can mitigate insider threats that lead to data breaches, like vendor employee background checks, security training, and cyber insurance.  Now AI is transforming contract management again by uncovering risks and driving efficiency. Michael’s company, Ncontracts is leading the way with Ntelligent Contracts Assistant leading the way. It’s an exciting development for financial institutions that want to maximize their understanding of contract while minimizing the staff hours to get it done.

In a recent podcast episode, Rafael engaged in a captivating conversation with Dave Coffaro, an authority in strategy, change leadership, and organizational growth. Dave stressed the importance of agility in leadership and the need for organizations to adapt swiftly in today's dynamic business landscape. His insights are a valuable resource for navigating change successfully. I had an amazing conversation with Dave Coffaro for our podcast, and I'm excited to share the incredible insights he provided. Dave, an expert in strategy, change leadership, and organizational growth, delivered valuable wisdom during our chat. Dave serves as a Principal of the Strategic Advisory Consulting Group. Dave works with service businesses, financial services, academic insurance professional service firms, and nonprofits in refining and redesigning their future state to achieve accelerating growth, more favorable economics, or both. His work also includes serving as interim CEO for organizations in transition. Dave is also published and has a number of articles and blogs that are published in SmartBrief on leadership, the American Management Association Journal, Board Leadership, and the ABA banking journal, to name a few. Dave is also an author and his latest book is Leading from Zero: Seven Essential Elements of Earning Relevance. Dave begins by highlighting that leadership extends beyond the C-suite; it's a quality that can be exhibited by individuals at all levels within an organization. It involves making choices, bringing innovative ideas to the forefront, and positively influencing the organization. He emphasizes the importance of leveraging competencies, recognizing your organization's strengths, and seeking partnerships that complement those strengths. The goal is to adapt and evolve while remaining true to your core competencies. Dave introduces the concept of organizational agility, a vital attribute in today's rapidly changing business landscape. This agility involves continuously monitoring both internal and external changes, interpreting their implications, and swiftly adapting. Change leadership isn't a side project; it's integral to the core business. He presents McKinsey's definition of organizational agility, which underscores the ability to reconfigure strategy, structure, processes, people, and technology to seize value-creating and value-protecting opportunities. Our discussion delves into how the pandemic accelerated the need for agility in financial institutions. Legacy systems are now challenged by agile fintech startups, and regulatory agencies are embracing innovation. This adaptability is essential to staying competitive. Dave underscores the significance of adopting a holistic perspective within organizations. Breaking down silos and viewing the organization as a living entity rather than a rigid machine allows for quicker responses to change and optimal resource allocation. In summary, Dave Coffaro's insights on leadership, agility, and organizational growth are invaluable in today's dynamic business environment. The conversation serves as a reminder that agility and adaptability are core competencies that organizations and individuals should cultivate. Listen to the full podcast episode to delve deeper into these transformative ideas.

Every month, Ncontracts compliance experts provide an overview and analysis of the latest regulatory updates to help you keep up with the rapidly evolving nature of the industry. In this episode, Stephanie Lyon, VP of Compliance, is joined by experts Robert Brosh and Nicole Upshur to discuss regulatory changes that took place in the month of May 2022, and what these changes mean for your financial institution.