The AI GRC Summit 2026: Governing AI in the Age of Agents
AI agents don't just answer questions. They read data, call tools and take actions, often with permissions that changed after they were approved. Most AI governance programs weren't built for that.
On Saturday, November 21, practitioners who have built AI governance inside real organizations show what they did: the controls, the evidence, the tradeoffs, and what they'd change.
Free · Live on Zoom · Saturday, Nov 21 · 10:00 AM–3:45 PM ET (3:00 PM London)
When you register, you get:
Live access to every session, including a live authorization-gate demo and a working Governance as Code proof of concept
The replay, sent to every registrant. Can't make Saturday? Register anyway.
A certificate of attendance you can use to self-report CPEs
The Agentic AI Governance All-In-One Toolkit, free
Built for GRC, cybersecurity, risk, audit, privacy and AI governance professionals, and for people moving into AI governance roles.
What you will learn:
How to set and enforce boundaries for agent actions, permissions and human oversight
How to connect governance requirements to operating controls, tests and evidence
How a healthcare GRC team built AI intake, inventory and tiered vendor risk reviews
How to challenge an AI use case before it scales
Summit Agenda
All times are Eastern Time. Sessions are hosted on Zoom.
Master of Ceremonies: A.J. Nash
Founder & CEO, Unspoken Security
nashaj
10:00–10:25 AM | Opening Keynote: Your AI Governance Program Wasn’t Built for Agents
François B. Arthanas
Founder & CEO, CyberProsAI
francoisbarthanas
Most AI governance programs were designed around models that answer questions. Agents introduce a different challenge: systems that take actions. This opening keynote examines where existing approaches fall short on scope, controls, and evidence, and introduces the questions that will guide the day’s discussions.
10:25–10:55 AM | From Approval to Execution: Governing AI at the Point of Action
Grace Adjeli
Founder, BridgeCore AI
graceadjeli
An agent receives approval to act. What happens if its permissions, tools, or operating conditions change before execution?
Grace’s Governance at Execution™ research examines how authorization can be checked when an action occurs. Explore change-triggered revalidation, human oversight, decision ownership, and execution evidence. A live Email Authorization Gate demonstration shows how controls permit, escalate, or block actions as permissions shift.
10:55–11:25 AM | Write the Control Before the Policy
Susan Shepard
Manager of GRC Engineering, Reco
xnasusx
Susan shares an approach to building governance programs from an operating control inventory. Each control is recorded at the layer where it actually lives, with a named owner and supporting evidence, before the policy is written.
Applied to AI, this means identifying which systems and data it can reach, which actions it can take, who approves those actions, and what evidence demonstrates that the boundaries held. Leave with a practical way to examine your own controls.
11:25–11:55 AM | Beyond AI Policies: Engineering Governance for the Age of AI Agents
Neviar Rawlinson
Founder, GRC Explained
neviarr
Neviar shares lessons from building and testing a GitHub-based Governance as Code proof of concept, including machine-readable control definitions, automated tests, version-controlled changes, and evidence workflows.
The session explores how these engineering principles can support AI governance through control verification, exception handling, change management, and accountable human decisions. It distinguishes what the prototype demonstrates from proposed applications to AI governance—and explains why a passing test alone does not establish trustworthy assurance.
11:55 AM–12:35 PM | Networking Break
Take a break and connect with fellow attendees.
12:35–1:20 PM | Expert Panel
Panel topic and participants will be announced soon.
1:20–1:50 PM | The Governed AI Playbook: Building the Paved Road for Safe, Scalable AI Adoption
Princess David Okoro
Security GRC Manager, Trainline; Founder, The AI GRC Desk
princessdavidokoro
As organizations move from standalone chat tools to connected assistants and autonomous workflows, governance needs to evolve with them.
Princess introduces a practical 5C approach: Context, Connections, Capability, Cadence, and Controls. Learn how to define the use case, evaluate data access and permissions, set capability boundaries, establish human review and ownership, and specify monitoring, escalation, and stop criteria.
Leave with a structured way to challenge an AI use case before it scales.
1:50–2:20 PM | Practitioner Session
Speaker and session details will be announced soon.
2:20–2:30 PM | Break
2:30–3:00 PM | Practitioner Session
Speaker and session details will be announced soon.
3:00–3:30 PM | AI Governance Gap: Lessons From Building It in Practice
Cassie Bidmead
GRC Lead, Cottage Health
cassie82177
Cara Winston
Senior GRC Analyst, Cottage Health
carawins
How does a healthcare GRC team turn AI governance requirements into operational processes while supporting innovation?
Cassie and Cara share their experience developing an AI Charter, AI Inventory, intake form, and tiered AI vendor risk questionnaires. Explore how they established responsibilities, engaged stakeholders, assessed risk, and approached ongoing monitoring, along with the challenges they encountered and what they would do differently.
3:30–3:45 PM | Closing
Francois will have a BIG announcement to make and giveaway.
Register free to join us on November 21.
Bring your questions, connect with fellow practitioners, and leave with ideas you can put to work.
Additional speakers and panel details will be announced as confirmed. Agenda subject to change.