AI is already changing how risk, compliance, and audit teams work. The harder question is how to adopt it without losing control of your program. That’s the question the upcoming GRC Summit 2026 takes on.
Now in its 14th year, the Summit runs on November 4 and 5 as a free, 100% virtual event. Each day is a half-day session, from 7:30 to 11:10 AM PT (10:30 AM to 2:10 PM ET). Here are seven reasons to save your seat.
Day 1 opens with two exciting keynotes from MetricStream leaders.
A product keynote follows, Beyond the Risk Register: AI and Connected GRC for Continuous Resilience. Together, they set out how we see GRC moving from periodic reviews to continuous insight, and what that means for your program in 2027.
Michael Rasmussen of GRC 20/20 Research developed the concept of GRC in 2002 while at Forrester, and many in the field call him the “Father of GRC.” On Day 1, he leads an expert session, Agentic AI in GRC: From Novelty to Strategic Business Advantage, from 10:20 to 11:10 AM PT (1:20 to 2:10 PM ET).
Agentic AI is AI that can plan and complete multistep tasks with limited human prompting. Organizations are already testing it across risk, compliance, audit, and cybersecurity. Getting value from it takes more than deploying agents. It means rethinking how GRC is connected, governed, and operated.
Michael looks at the shift from individual AI use cases to a connected GRC operating model. He covers how AI agents and human decision-makers work together and what governance AI-driven action requires. You’ll leave knowing what to build now: accountability, guardrails, transparency, and oversight.
Slides can only tell you so much, so we’ve lined up in risk, compliance, cyber risk and audit leaders who manage complex GRC programs every day. Day 1 includes a CXO panel, How AI Is Transforming the Roles of Chief Risk, Audit & Compliance Officers. Day 2 adds a panel on building an enterprise GRC program that works on the ground. Speakers include:
Case studies show what a GRC change program looks like once the kickoff meeting is over.
Presenters Clifton Roberts, Sr. Director, Business, Integrity & Compliance, Intel Corporation, and Michael Cover, Director at Blue Cross Blue Shield of Michigan share what worked, what slowed them down, and what they’d do differently. You can take those lessons straight into your own planning.
Once you know what to build, you’ll want to see how it works. On Day 2, a panel examines The AI Way to Build an Enterprise GRC Program That Works on the Ground. Our product session, AI Architecture for GRC, runs from 10:20 to 10:50 AM PT. You’ll leave with sharper questions to ask of any AI tool, ours included.
U.S. teams face SOX, NIST CSF 2.0 (the National Institute of Standards and Technology Cybersecurity Framework), and a growing set of state privacy laws. The Summit examines how AI and automation can support continuous compliance across these areas. A Day 2 panel focuses on AI-powered risk, compliance, and cyber resilience strategies for financial institutions in 2027.
You don’t need to travel or clear your calendar for days. Two focused mornings give you keynotes, panels, case studies, and a product session, and you can return to work by lunchtime.
AI will keep reshaping GRC, with or without a plan from your team. Two mornings with peers, analysts, and our leaders can help you build one. Registration is free.
Subscribe for Latest Updates
Subscribe Now