Metricstream Logo
×
Blogs

AI Is Changing Your GRC Program: 7 Reasons to Attend the Virtual GRC Summit

Summit Blog
3 min read

Introduction

AI is already changing how risk, compliance, and audit teams work. The harder question is how to adopt it without losing control of your program. That’s the question the upcoming GRC Summit 2026 takes on.

Now in its 14th year, the Summit runs on November 4 and 5 as a free, 100% virtual event. Each day is a half-day session, from 7:30 to 11:10 AM PT (10:30 AM to 2:10 PM ET). Here are seven reasons to save your seat.

1. Hear Where AI and GRC are Headed

Day 1 opens with two exciting keynotes from MetricStream leaders.

  • Gaurav Kapoor, Co-Founder and Vice Chairman, presents Orchestrating the Future of GRC with Connected Intelligence. 
  • Marc Levine, CEO, presents Turning GRC Into a Strategic Business Advantage.

A product keynote follows, Beyond the Risk Register: AI and Connected GRC for Continuous Resilience. Together, they set out how we see GRC moving from periodic reviews to continuous insight, and what that means for your program in 2027.

2. Learn From Michael Rasmussen in an Expert Session

Michael Rasmussen of GRC 20/20 Research developed the concept of GRC in 2002 while at Forrester, and many in the field call him the “Father of GRC.” On Day 1, he leads an expert session, Agentic AI in GRC: From Novelty to Strategic Business Advantage, from 10:20 to 11:10 AM PT (1:20 to 2:10 PM ET).

Agentic AI is AI that can plan and complete multistep tasks with limited human prompting. Organizations are already testing it across risk, compliance, audit, and cybersecurity. Getting value from it takes more than deploying agents. It means rethinking how GRC is connected, governed, and operated.

Michael looks at the shift from individual AI use cases to a connected GRC operating model. He covers how AI agents and human decision-makers work together and what governance AI-driven action requires. You’ll leave knowing what to build now: accountability, guardrails, transparency, and oversight.

3. Listen to Expert Practitioners Who Run GRC Programs

Slides can only tell you so much, so we’ve lined up in risk, compliance, cyber risk and audit leaders who manage complex GRC programs every day. Day 1 includes a CXO panel, How AI Is Transforming the Roles of Chief Risk, Audit & Compliance Officers. Day 2 adds a panel on building an enterprise GRC program that works on the ground. Speakers include:

  • Patrick Simonnet, Chief Audit Executive, Bank of China USA 
  • James Downing, Chief Compliance Officer, JLL Capital Markets 
  • Spruille Braden, Head of Enterprise Resilience, MassMutual 
  • Jessica Markun, Senior Vice President, Finance & Risk, FCCI Insurance Group
  • Clifton Roberts, Senior Director, Legal & Business Compliance, Intel Corporation

4. See Real GRC Transformations in Action

Case studies show what a GRC change program looks like once the kickoff meeting is over.

  • Day 1 features From Reactive to Resilient: GRC Transformation in Action. 
  • Day 2 follows with Inside a Real GRC Transformation: Lessons from the Field.

Presenters Clifton Roberts, Sr. Director, Business, Integrity & Compliance, Intel Corporation, and Michael Cover, Director at Blue Cross Blue Shield of Michigan share what worked, what slowed them down, and what they’d do differently. You can take those lessons straight into your own planning.

5. Get a Straight Answer on Agentic AI

Once you know what to build, you’ll want to see how it works. On Day 2, a panel examines The AI Way to Build an Enterprise GRC Program That Works on the Ground. Our product session, AI Architecture for GRC, runs from 10:20 to 10:50 AM PT. You’ll leave with sharper questions to ask of any AI tool, ours included.

6. Prepare for U.S. Regulatory Demands

U.S. teams face SOX, NIST CSF 2.0 (the National Institute of Standards and Technology Cybersecurity Framework), and a growing set of state privacy laws. The Summit examines how AI and automation can support continuous compliance across these areas. A Day 2 panel focuses on AI-powered risk, compliance, and cyber resilience strategies for financial institutions in 2027.

7. Fit it into Two Mornings

You don’t need to travel or clear your calendar for days. Two focused mornings give you keynotes, panels, case studies, and a product session, and you can return to work by lunchtime.

Save Your Seat

AI will keep reshaping GRC, with or without a plan from your team. Two mornings with peers, analysts, and our leaders can help you build one. Registration is free. 

Book your seat now.

Masha, MetricStream

Masha Versiglia Quadros Manager, Marketing, MetricStream

Masha leads global events marketing and branding at MetricStream, where she runs the company’s corporate event program from first concept through design and on-site execution. Her expertise covers MetricStream’s own roadshows as well as third-party events, and is part of the core team behind the flagship GRC Summit in the US and Europe.

Her work sits at the point where event strategy meets demand generation, and she focuses on how AI is changing governance, risk, compliance, audit, cyber, and operational resilience. She holds a master’s degree from St. Joseph’s College of Business Administration.

 

Related Resources