Good Bones: Why GRC Is Your Best Defense Against AI Security Risk - Davis Wright Tremaine Hosts Lunch + Panel

Davis Wright Tremaine invites you to a lunch and panel discussion during Seattle Tech Week.

AI is reshaping how companies operate—and how they get attacked. Frontier models have demonstrated autonomous discovery and exploitation of zero-day vulnerabilities, the ability to chain multiple flaws into sophisticated exploit sequences, and the speed to turn attack windows from weeks to hours. Layer on AI-generated deepfakes and tailored social engineering, prompt injection and data exfiltration through LLM-integrated apps, and other threats, and the picture is clear: cyber risks are increasing and many existing defenses will no longer be adequate.

The threats may be novel, but the underlying risks are not. Social engineering, malware, and software vulnerabilities have driven cyber risk for decades. Companies that have strong governance, risk, and compliance (GRC) programs in place will be best positioned to respond to these emerging threats, building off their existing risk management.

This panel makes the case that AI security risk is best managed through disciplined GRC, and that the foundational practices — asset and AI-system inventory, vulnerability management, access control, vendor diligence, monitoring, incident response, and board-level oversight — translate directly to the AI-accelerated threat environment. Standard GRC frameworks remain effective tools, provided they are tailored to AI-specific threat models and run at the tempo the threat now demands.

We'll explore what AI-aware GRC looks like in practice, how to address the specific security risks that AI introduces (both as an attacker tool and as a target), and why the companies that build AI security into their operating model from day one are best positioned to win enterprise trust, satisfy regulators, and respond when incidents happen at machine speed.

Who Should Attend?
Founders, technical leaders, security and compliance owners, operators, and investors who want practical, startup-ready ways to identify and mitigate AI security risk through sound GRC. Ideal for teams building or deploying AI-enabled products, preparing for enterprise security reviews, or thinking through agentic AI and third-party AI integrations.

Lunch will be served!

Speakers

Michael T. Borgia, Partner, Data Privacy and Security, AI Governance, Davis Wright Tremaine

Ken DeMaria, CISO, Yoodli

Kathy Green, Founder & CEO, CargoCheck

Robert Renzulli, CSO, CargoCheck

FBI Seattle Field Office Agent

Kathy Green | LinkedIn is the founder and CEO of CargoCheck, an independent verification layer for high-risk, high-value cargo handoffs. With a background in quality, logistics, and commercial roles, she spent more than 25 years in the chemical industry at Solvay, Olin, and her own consulting practice. Outside of work, she is a nonprofit board member who speaks on leadership and creating positive change.

Robert Renzulli | LinkedIn is a cybersecurity strategist and founder of CyberGeist Security. He is the former CISO of the Port of San Diego and a U.S. Army Intelligence veteran, with a career spanning banking, payments, telecommunications, and cloud. His advisory work supports critical infrastructure clients from startups to enterprises to government, and he is known for translating hard technical problems into clear business terms.

Ken DeMaria is Head of Security and Compliance at Yoodli, a secure, experiential learning platform that uses AI roleplays to help enterprise teams practice high-stakes conversations and build real readiness at scale. With more than 25 years of experience driving digital transformation and security for high-growth organizations, Ken has built and scaled IT and security teams from startup through enterprise, including fintech work at PortX and DigniFi where he led SOC 2, ISO 27001, and PCI-DSS programs. A co-founder of two Seattle companies, he is known for translating complex technical and regulatory challenges into clear business outcomes.