AI in GRC: Friend or Foe?
Security Boulevard, Tuesday, October 20th, 2026
Hyperproof's CEO argues AI is a useful GRC co-pilot but can't replace systems of record, human accountability or auditable review.
Hyperproof founder and CEO Craig Unger argues AI is both an asset and a risk in governance, risk and compliance, depending on how it is deployed.
AI is useful for automating repetitive evidence work and cross-framework mapping, but it does not provide a version-controlled source of truth, so policy versioning and audit trails still need a formal GRC platform.
AI cannot set risk appetite, buyers increasingly want a named person accountable for AI-assisted decisions, and auditors will want to know how conclusions were reached.
In this vendor-authored post, he advises folding AI governance into existing risk operations.