Montro

The people who actually run European governance

Real conversations with the CISOs and DPOs who make it happen.

Episode

When Controls Meet Reality

A framework that reads well for auditors can still fail when pressure hits. In this episode of Montro In Practice, Ankur Arora sits down with Emmanuel Ranchin, VP of Information Protection Governance at State Street, on the gap between documented controls and lived ones: why compliant isn't the same as resilient, how big institutions break where silos meet, and what DORA really asks of the board.

Published

25 September 2026

Duration

39 minutes

Watch the episode

Expert Series

Conversations worth your time

With the people whose work shapes how technology actually gets used, trusted, and governed.

View all
When Controls Meet Reality
Operational Resilience, DORA, Risk Management, Financial Service39 min watch

When Controls Meet Reality

A framework that reads well for auditors can still fail when pressure hits. In this episode of Montro In Practice, Ankur Arora sits down with Emmanuel Ranchin, VP of Information Protection Governance at State Street, on the gap between documented controls and lived ones: why compliant isn't the same as resilient, how big institutions break where silos meet, and what DORA really asks of the board.

Watch now
Compliant on Paper Isn't Compliant in Reality
GDPR, EU AI Act, Privacy Engineering, AI Governance, Data Protec33 min watch

Compliant on Paper Isn't Compliant in Reality

A policy can say all the right things and still not describe what's actually running. In this episode of Montro In Practice, Ankur Arora sits down with Abhishek Bansiwal - DPO, lawyer, and privacy-and-AI governance leader, on the gap between paper compliance and lived reality: why "anonymised" often isn't, why the AI Act is closer to a product safety law than a privacy one, and the one question every leader should start asking - "so what?"

Watch now
Why Compliance Isn't Security
Cybersecurity, NIS2, Third-Party Risk, Multi-Cloud, Compliance41 min watch

Why Compliance Isn't Security

"Compliant" and "secure" are not the same thing. In this episode of Montro In Practice, Ankur Arora sits down with Roopesh Srivastava, a cyber and resilience leader with two decades across military and enterprise, on why tick-box compliance leaves you exposed: people as the weakest link, building security into multi-cloud without slowing the business, getting third-party risk under control, and what NIS2 really asks of you.

Watch now
Why People Break the Rules Around AI at Work
Shadow AI, Behavioural Science, AI Adoption, Human Behaviour56 min watch

Why People Break the Rules Around AI at Work

Rules on paper rarely survive contact with people. In episode two of Montro In Practice, Ankur Arora sits down with behavioural scientist David DeFranza on why employees reach for AI tools they're not meant to use: the gap between personal productivity and organisational risk, why we behave more rationally when we think we're dealing with AI, and where that quietly becomes dangerous.

Watch now
Why Trustworthy AI Starts With Data Governance
AI Governance, Data Governance, Trustworthy AI, EU AI Act43 min watch

Why Trustworthy AI Starts With Data Governance

Frameworks read well on paper. In episode one of Montro In Practice, Ankur Arora sits down with William O'Sullivan, Head of Data Science, on what trustworthy AI looks like once it leaves the slide: why governance comes before modelling, how to build AI that survives regulatory scrutiny, and where trust actually breaks - usually us, not the model.

Watch now

Know someone who should be next?

We feature practitioners, not vendors.

New conversations. Straight to your inbox.

Be the first to know when a new guest joins.

By subscribing you agree to our Terms and Conditions and Privacy Policy