About me

My name is Pedro Carnauba. I work with risk: technology, regulation, third parties. The domains change every few years. The discipline does not.

The work, today: assessing vendors at scale, implementing AI management systems, and acting as Data Protection Officer for a company handling regulated financial data. That is what I execute. It is not who I am.

On a more personal note:

Risk work is mostly epistemology: what counts as knowing something, what an absence of evidence means, when a model stops describing the world and starts replacing it.

I am wary of confident numbers. Assumptions fall away quietly and what remains looks like fact.

Most failures are caused by reasonable people working with incomplete pictures, under pressure, in systems that made the sensible choice the wrong one. Worth remembering before writing a finding.

I read more than I post. I would rather write one thing that holds than ten that perform well.

For an official bio for conference use, see Speaking.