GRC isn’t dead - it’s the backbone. As AI, cloud and SaaS race ahead, the job is to modernise without losing the rigour that protects customers, revenue and reputation. In this panel, we unpack how to build guardrails, not roadblocks. Guests: • Jason Plumridge — Thales Cyber Services • Abhi Shahi — ING Bank • Thomas Charlton — Brennan IT We cover: Balancing innovation with governance (sandboxing, tiered controls, ethical AI guardrails) Vendor & third-party AI risk: reassess when tools quietly add AI From spreadsheets to continuous control monitoring (when it’s worth it) Getting to “just-right” maturity—right-sized to industry, risk and budget Why automation rises but human judgement still carries the day