Continuous partner risk monitoring, AI marketplaces turn co-sell into revenue ops

Partner Risk Management Shifts to Continuous, Regulator-Ready Monitoring

Banks and CISOs are replacing annual partner questionnaires with continuous monitoring and cyber scoring, following the 2023 US interagency third-party guidance from the Federal Reserve, OCC, FDIC, and CFPB, which requires oversight “throughout the duration” of third-party relationships. In the UK, Microsoft, Google, AWS, and Oracle were designated Critical Third Parties on 13 July, putting them under direct oversight from the Bank of England, PRA, and FCA and raising expectations for resilience testing, self-assessments, incident reporting, and exit planning.

KYND added portfolio cyber risk analytics that extend screening from single vendors to aggregated exposure across portfolios and supplier ecosystems, while Impartner deepened its HubSpot integration and iCOUNTER appointed a chief legal officer as governance around partner-risk data tightens. The operating model is moving from periodic diligence to always-on oversight, from self-attestation to evidence that can survive regulator review, and from spreadsheet-based partner ops to CRM- and risk-platform-native workflows.

For practitioners, the work is shifting toward maintaining live risk signals, audit-ready documentation, and tighter coordination with security, legal, and compliance. Career value will increasingly come from fluency in risk tooling, CRM-integrated operations, and translating partner data into defensible decisions.

AI Marketplaces Turn Co-Sell Into Revenue Operations

Google Cloud Next ’25 introduced a dedicated AI Agent Marketplace, or “AI Agent Space,” inside Google Cloud Marketplace, giving partners a formal path to list, monetize, and sell AI agents that integrate with Gemini Enterprise through the Agent2Agent protocol. Agents can now be discovered, evaluated, purchased, and billed through a customer’s existing Google Cloud account, with pricing that includes free, subscription, usage-based, combined subscription-plus-usage, and private offers. Partners must package each agent as a software-only offer, publish an A2A-aligned Agent Card, and manage listing and approval through the Producer Portal.

Google also tied these listings to co-sell motions with its field teams, with quota credit and SPIFF eligibility dependent on deal registration and attribution handling. For partnerships teams, this shifts marketplace work from static catalog management to AI-native transaction design and sales-ops discipline: Agent Cards, pricing, procurement, CRM sync, and partner-sourced versus partner-influenced tracking now have to be right before close. For practitioners, the advantage goes to people who can bridge partner strategy, listing mechanics, pricing architecture, and attribution workflows; the role is becoming less about getting listed and more about governing a revenue path that breaks when systems are misaligned.