If the GRC is fed by an intelligent, constantly updated system – this can dramatically improve risk management in an AI enabled world.
Many existing controls may be redundant and key IT and business process controls need to be identified and tested in the new world. Controls by design and effective architecture in AI systems will facilitate this. Testing of the full population of key controls, continuously, with surfacing of out of tolerance issues to control owners daily will become the norm for both financial and non-financial controls.

