From the course: Leveraging AI for Governance, Risk, and Compliance

Positives of AI in GRC

- You might have noticed a theme so far in that saving time and streamlining processes. I firmly believe that GRC is a profession that requires a lot of human interaction with relationship building, emotional intelligence, and learning the business being key priorities. Instead of spending hours and days trying to figure out the correct way to identify a risk, utilizing AI could allow you to use that time on creating your story or narrative to provide back to the business on why the risk should be accepted or necessary steps for mitigation. External auditors could spend less time on site doing evidence collection and focusing on walkthroughs, then going back home to their families to continue on from there. There will be less need to fill out yet another vendor security questionnaire because you have a docket all dressed up and ready to go. The same goes for creating metrics and dashboards. Changes in deltas between regulatory updates and your environment could be accessed and easily understood before making swift changes. You can spend your time influencing others and championing different security initiatives that will improve the company's posture. AI could truly assist practitioners to be more hands-on driving positive impact and making well-informed decisions for themselves and stakeholders. But all that glitters ain't gold, and we have to be realistic because there are drawbacks to AI as well.

Contents