Speaker: Dr. Christiane Bierekoven

Companies must navigate complex and overlapping legal requirements under the AI Act, GDPR, and cybersecurity regulation. The presentation shows how these requirements can be legally assessed in the context of AI deployment, how risks can be evaluated, and how the resulting requirements can be translated into clear responsibilities and decision-making, approval, and control processes. It focuses on how GRC systems can be used to manage legal requirements in an integrated manner, document decisions in a transparent and traceable way, and demonstrate compliance. This turns complex regulation into practical governance that manages legal risks while enabling the secure use of AI and digital business models.