How GRC builds trust for OT and IoT

In this episode Guru Sethupathy speaks with Karen Meohas, Director of GRC at Nozomi Networks, about how the company approaches AI governance across product and corporate use cases. Karen explains the difference between embedding AI into customer-facing products and using AI to increase internal efficiency, and why each requires distinct risk and governance approaches. They discuss practical steps Nozomi has taken—EU AI Act alignment, responsible AI disclosures, recurring risk assessments, and an internal AI policy—and how GRC works closely with engineering and legal to maintain transparency and streamline customer conversations. The conversation closes on accountability, incident response, and the ongoing challenge of managing expanding AI risk surfaces, with Karen emphasizing the opportunity for GRC to guide responsible, trustworthy AI adoption across the organization.