Invisible risk - AI governance is not GRC 2.0

AI is no longer owned solely by IT or data teams. It is embedded in everyday tools—copilots, chatbots, and assistants—used across business units, policy teams, and executive leadership. In many organisations, AI is already influencing how work is done, how decisions are made, and how risks are managed. Yet while adoption accelerates, governance is struggling to keep pace.

Many organisations continue to rely on traditional Governance, Risk, and Compliance (GRC) approaches—frameworks designed for predictable systems. But AI introduces something fundamentally different: uncertainty, autonomy, and risks that evolve in real time. It brings a new risk landscape with invisible risks.

So what invisible risks are we facing? Is AI governance truly optional? And who does it impact? This session challenges conventional thinking and highlights the growing gap between AI capability and organisational readiness. Through practical examples and emerging risk scenarios, the session will unpack what effective AI governance looks like in practice—and why it must be adaptive, continuous, and shared.

If your organisation is using AI, this is no longer an optional conversation. Designed for both technical and non-technical audiences, this session is relevant for those in cyber security, project delivery, and business operations—as well as anyone using AI in their day-to-day work. Attendees will gain practical insights into AI governance and a clearer understanding of their role in using AI safely and responsibly.