What managing partners should ask AI vendors before signing any contract

This interview with Kumar Ravi (Chief Security & Resilience Officer at TMF Group) argues that the most underestimated cyber risks in professional services are gradual, hard-to-detect issues—such as over-privileged access and weak workflow controls—rather than dramatic one-off events; it also covers the tension between legal privilege and threat-sharing, the need to treat vendors as part of an integrated supply chain (including fourth-party risk), and due-diligence questions for AI-native tools, concluding that security should be a board-level business control with independent assurance.