AI for NIST, ISO 27001, and CMMC Compliance: Opportunities and Pitfalls

AI is quickly becoming part of everyday cybersecurity and compliance activities. The real challenge is understanding where it delivers value, and where it can create unnecessary risk.

This webinar covers:

• Understanding NIST, ISO/IEC 27001 and CMMC v2, and Overlap
• AI in Discovery and Control
• Risk Prioritization
• Use Cases
• Advantages
• Fundamental Limits and Caveats & Critical Risks
• Guardrails and Design Principles & Adoption Roadmap
• Cross-Border Data Transfer & Sovereignty
• Lawful Basis for Processing
• Purpose Limitation & AI Repurposing
• Data Subject Rights in AI Pipelines

Presenters:

Dr. Oz Erdem – Linqs Assurance – Cyber, Compliance, AI & 3rd Party Risk Leader
Digital Trust trainer, auditor, consultant, and speaker with 30 years of experience in Information Security, Defense compliance, Export Controls, AI, Data Privacy, and Third-Party Risk Management. Dr. Erdem is a CMMC Certified Instructor and Auditor in addition to holding a variety of PECB ISO auditor certifications. He took leadership roles in governance and compliance at Fortune 100-500 companies, small and medium size businesses, and government agencies including Linqs Assurance, Siemens Corporation, Siemens Industry, Texas Instruments, RTrust, ICEsoft, NATO C3A and BILGEM.

Dr. Jorge Carillo – Managing Director at PrivacyTech
Jorge Carrillo is an international specialist in Artificial Intelligence governance, cybersecurity, privacy, and governance, risk, and compliance (GRC), with more than two decades of experience across global technology, banking, consulting, higher education, and professional training.
His work sits at the intersection of technology, law, and policy, where digital regulation and enterprise practice converge.
He spent over a decade at Microsoft in senior privacy and compliance roles, leading work on software product compliance, privacy-by-design, data protection obligations, accessibility standards, and enterprise governance controls across international operations. This experience provides direct, first-hand insight into how leading global organizations operationalize privacy, cybersecurity, and regulatory compliance within complex digital ecosystems.
Jorge combines legal expertise, technical depth, and enterprise governance experience, making him well-positioned to design and deliver advanced executive programs on AI regulation, governance, and cybersecurity compliance.