When AI Meets Compliance, Compliance Meets AI – GRC Under Pressure
GRC teams have been under pressure for years: GDPR, NIS, NIS2, DORA – each regulation forces the reinvention of existing governance structures. Organizations have just begun adapting to this load. Now AI arrives, and pressure from outside and inside intensifies further.
Topic
When & Where
Details
Format:
it-sa insights
Language:
German
Session description
Speaker: Dirk Schrader
The Regulatory Side: The EU AI Act mandates new compliance requirements for AI systems – risk classification, documentation, monitoring. This is not an additional policy, but a structural expansion of already fragmented GRC and security processes that were actually hoping for AI support.
The Operational Security Side: Simultaneously, frontier AI models (such as Astra or proprietary developments) become operational weapons. Prompt injection, data exfiltration, social engineering – AI-driven attacks ignore regulations and hit an already overwhelmed GRC and security posture.
The Pressure Cooker Emerges where both collide: Cyber resilience and compliance must absorb AI risks while teams simultaneously meet regulatory requirements – with the same limi ...
