Building AI Trust Before It Becomes Mandatory - The Startup Edition

​Your AI governance program shouldn't to wait for a customer to demand it.

​As AI gets built into more products and services, trust in how companies handle it is becoming a competitive advantage — not just a compliance checkbox. Join us for a session on how to get ahead of AI governance before a customer, regulator, or contract forces the issue.
If you're building with AI or shipping AI features and haven't yet formalised how you govern that risk, this session will help you start on the front foot.

What we'll cover:

• ​Why AI governance matters now — the AI risk and regulatory landscape across Australia, Europe, and the US, and how trust failures can affect customers and growth

• ​Practical foundations for responsible AI — identifying and assessing foundational AI risks, assigning ownership, documenting controls, and monitoring progress

• ​Frameworks as a journey — where ISO 42001 and the EU AI Act fit, NIST AI RMF and how to align with them even if you're not planning to go into an audit right away

• ​A live walkthrough in Vanta — seeing relevant ISO 42001 and EU AI Act controls in action, and how to focus on what matters now

​About the speaker
Evan Rowse is the APJ GRC Subject Matter Expert at Vanta, where he helps organizations streamline security compliance and accelerate trust. With over 15 years of experience spanning audit, advisory, and tech leadership, Evan specializes in building scalable GRC processes designed to satisfy complex, multi-standard compliance requirements efficiently.

Before joining Vanta, Evan led security and GRC initiatives at global technology companies including Workday and Xero. Earlier in his career, he consulted in cyber advisory at KPMG and EY.