Speaker: Nicoline Matser

Enterprises do not have separate GDPR data, NIS2 data, AI Act data and DORA data. They have the same critical data, systems, vendors and risks - governed by multiple regulations. As data moves through cloud services, AI applications, business systems and third parties, cybersecurity, privacy and regulatory obligations increasingly converge. Yet these obligations are still often managed in separate programmes, tools and spreadsheets. The same data, system, vendor, risk or control is assessed repeatedly by Privacy, Security, Risk, Compliance and AI Governance teams.

This creates duplicated work, fragmented ownership and makes it harder for management to see where the organisation is exposed. This session shows how enterprises can move from fragmente ...