Drata - Experts & Thought Leaders

RAIDS AI, the AI safety monitoring platform, has announced its partnership with Prescient Security and Drata. The three companies can provide organizations with end-to-end operational AI governance. As well as cross-referring clients, the companies are working together to educate organizations and help them navigate an increasingly complex compliance landscape.  Partnership launch during webinar The educational element of the partnership launched with a webinar, which aired live on 11 March and is now available via a recording link. It is designed to equip GRC and security professionals with practical steps to future-proof their AI governance programs and prepare for upcoming regulatory scrutiny. The webinar focuses specifically on ISO 42001, the first international standard for AI, which enables organizations to develop, deploy, and manage AI systems responsibly, ethically, and transparently. Titled ‘ISO 42001 in practice’, the session explores how ISO 42001 can function as a central thread, embedded into AI governance, rather than being bolted on later. It advises how governance checkpoints, operational controls, and risk management can be designed directly into system architecture.  Detecting and alerting rogue AI behavior Co-founded by Nik Kairinos and Brett Stonefield, the RAIDS AI platform detects and alerts rogue AI behavior in real time. It works by monitoring AI behavior and highlighting deviations before they cause failures, bias or regulatory exposure. The platform enables the safe and responsible deployment of AI and gives its users the confidence to scale AI without compromising on safety. Automation and validation Through its agentic trust management platform, Drata provides automated governance, risk, compliance, and assurance. RAIDS AI delivers the middle layer; continuous monitoring of AI which generates the evidence that proves the framework is operational. Prescient Security then provides the final element with third-party validation and certification to confirm that the evidence meets the standard. Expert insights Nik Kairinos, CEO & Co-founder, said: “Regulation continues to become more complex and is evolving quickly in order to keep up with technology that is increasingly sophisticated. This is why compliance has moved far beyond fulfilling a prescribed set of criteria. In order to adapt successfully, it’s critical that organizations comprehensively integrate the three layers: the compliance framework, continuous monitoring and evidence, and the certification to go with it." “The offering of RAIDS, Drata and Prescient Security fit together to provide end-to-end AI governance, and there is a shared commitment and enthusiasm to educate the market and help those responsible for compliance ensure they are ahead of the curve.” Sammy Chowdhury, CEO of Prescient Security, said: "What excites me most about partnering with RAIDS AI is that they’re solving the problem everyone talks about but very few actually operationalize: continuous AI oversight in the real world." "We’re at an inflection point where AI adoption is outpacing governance, regulation, and risk management. With regulators, boards, and customers demanding transparency, explainability, and accountability, organizations can no longer rely on static policies or annual audits. In my opinion, managing AI risks is no different than managing user behavior risks. Tools like RAIDs promises to increase transparency in AI behaviors."

Drata, the pioneering Trust Management platform, announced it has entered into a definitive agreement to acquire SafeBase, the pioneering Trust Center solution for the enterprise. The acquisition is intended to integrate both companies’ shared vision of being the go-to “trust layer” between companies—driving seamless, transparent relationships with the most comprehensive Trust Management Platform. The acquisition is expected to close later this month. Cloud and AI dependency Maintaining client trust via serial compliance requires a scalable and adaptable approach The surge in market demand for a full-stack Trust Management platform is fueled by a perfect storm of increasing Cloud and AI dependency, stricter regulatory requirements like DORA, ISO 42001, and the EU AI Act, high-profile breaches, and rising security risks. Maintaining customer trust through continuous compliance requires a scalable and adaptable approach to effectively address these challenges. Drata’s acquisition of SafeBase Drata’s acquisition of SafeBase is expected to significantly enhance its ability to streamline security reviews and strengthen vendor risk management, all through AI-driven automation. Together, Drata and SafeBase will create a seamless ecosystem of trust, governance, risk, and compliance (GRC).  Since SafeBase's founding in 2020 by CEO Al Yang and CTO Adar Arnon, over 1,000 organizations like OpenAI, Twilio, Crowdstrike, Hubspot, LinkedIn, T-Mobile, and one-third of the Cloud 100 have used its Trust Centers to drive approximately $15 billion in security-enabled revenue.  Inbound security questionnaires Drata’s meteoric growth in the past four years has also empowered thousands of organizations With SafeBase, organizations can build trust through transparency and reduce time spent on inbound security questionnaires by up to 98%. Drata’s meteoric growth in the past four years has also empowered thousands of organizations to radically transform compliance automation, vendor risk management, and modern GRC. Innovations in automation and AI “As a pioneer of the Trust Center category, SafeBase has always been committed to addressing and solving our customers’ needs through unmatched innovations in automation and AI,” said Al Yang, Co-Founder and CEO of SafeBase. “Joining Drata marks another milestone in that commitment, where two customer-obsessed companies with aligned missions and cultures work together to redefine what’s possible in Trust Management. This union cements our position as the pioneering solution for the enterprise.” Compliance and vendor risk management “Trust is now a competitive advantage that rests on a combination of speed and tangible proof, so there’s never been a more important time for organizations to prioritize compliance and vendor risk management, while eliminating the pain points within their GRC program,” said Adam Markowitz, Drata Co-Founder and CEO. “Together with SafeBase, we are empowering customers to continuously ensure and proactively communicate security, compliance and trust—with unrivaled market advantage.”

Drata, the continuous security and compliance automation platform, debuted the first look of a new capability to streamline and expedite security questionnaires at the company’s annual user conference, Drataverse. Drata AI Questionnaire Automation was showcased live to over 600 governance, risk, and compliance (GRC), IT, and cybersecurity professionals. AI Questionnaire Automation During sales cycles, organizations of all sizes often spend countless hours manually crafting replies to hundreds of questions to demonstrate a strong security posture, a process that demands extensive collaboration across multiple teams. The introduction of AI Questionnaire Automation significantly minimizes this labor-intensive process by parsing and extracting questions, generating responses using existing data within the Drata platform, and allowing users to review, edit, and approve the AI-generated answers. As a result, organizations can expedite sales cycles and drive revenue growth by minimizing delays in the security review process, while also scaling efficiently without sacrificing the quality of responses. Key features Automated Questionnaire Processing: Simply upload security questionnaires in formats like .xls, .csv, .pdf, and more, while Drata AI parses the document and extracts the questions automatically. AI-Driven Answer Generation: Using a rich knowledge base comprising information from the organization’s Drata instance, the AI generates suggested responses to the extracted questions. Reducing sales friction “AI Questionnaire Automation empowers our customers to build trust quickly and efficiently,” said Brian Elmi, Drata's Senior Vice President of Product Management. “With this new capability, businesses can respond to security questionnaires in minutes instead of days, reducing friction in the sales process and allowing teams to focus on their core operations.” Compliance as Code The company will introduce new releases and enhancements to its risk management capabilities Drata also announced Compliance as Code is rolling out to customers starting today, enabling even more GRC teams to identify and remediate compliance gaps during code development. The company will also introduce new releases and enhancements to its risk management capabilities, including residual risk scoring, vendor intake with AI summary, risk owner notification, and Workspace support, as well as the ability to manage multiple Risk Registers in Workspaces. Drataverse 2024 Drataverse 2024, held at Pier 27 in San Francisco, was designed to bring industry pioneers together to collaborate and shape the future of GRC. This year’s “Chart Your Course” theme featured keynote presentations as well as 20 panel discussions and interactive sessions from A-LIGN, Eden Data, MJD Advisors, ASAPP, and Class Technologies among others, fostering discussions on navigating the complex GRC landscape.