The question is no longer whether to use AI in governance, risk, and compliance — it's whether your platform is actually built to deliver on it.

In this session, Strike Graph CEO Justin Beals and renowned GRC analyst Michael Rasmussen — the man who coined the term GRC and authored the first Forrester Wave on GRC solutions — cut through the marketing noise to explore what AI-native compliance really means, and what separates genuine innovation from a chatbot bolted onto a legacy database.

What you'll hear in this session:

- Why AI is a force multiplier — and why that's a warning as much as a promise. If your controls are poorly designed, AI will automate the problem, not solve it.

- The four generations of AI in GRC, and why the shift to agentic AI by 2030 will leave many of today's legacy platforms behind.

- Why linked data isn't enough — the case for graph-based architecture, and why the relationships between risks, controls, evidence, and frameworks are what give AI the context to reason accurately.

- Michael's four dimensions of value — efficiency, effectiveness, resilience, and agility — and why organizations that only measure ROI are missing the bigger picture.

- The concept of homeostatic GRC: what it means for compliance programs to become self-regulating, continuously monitored, and forward-looking rather than episodic and reactive.

- The one word that ties it all together — and why it's the foundation for business growth, not just audit readiness.

Who should watch:

Security and compliance leaders, CISOs, chief compliance officers, and GRC teams navigating multiple frameworks or evaluating whether their current tools can take them where the industry is heading.