Artificial intelligence systems increasingly cross technical, organizational and jurisdictional boundaries as data, model weights and outputs move through vendors, platforms and markets. Meanwhile, global rules on AI risk, data transfers, advanced computing and sovereignty continue to diverge. Organizations therefore need boundaries that address cyberthreats and regulatory obligations together while producing evidence that supports both security operations and audits.

This session, led by Sébastien Christophe Lacroix of The Coca-Cola Company, will cover:

• How to distinguish data residency from data sovereignty;
• How NIST AI RMF and ISO 42001 can combine risk assessment with an auditable AI management system;
• How controlled ingestion, signed model artefacts, immutable logging and rehearsed offline processes can reduce supply chain, insider and exfiltration risks.