Harnessing AI & ML for Transformative GRC: Value, Architecture, and Security

This session will open on the premises that everyone is champing at the bit to embed AI & ML into everything they do including GRC workflows—and with a warning not to put the cart before the horse when rushing into ML model selection, data collection and production deployment.

Andrew Robinson (6clicks Cofounder) will unpack how machine-learning compliance and control mapping accelerates compliance, natural-language generation streamlines policies, and conversational AI delivers insights on demand.

Andrew Lawrence (6clicks CTO) will then unpack the technical model: a secure Retrieval-Augmented Generation pipeline, tenant-scoped vector database under RBAC, context filtering, Azure OpenAI service, what’s happening with MCP and alternatives to LLMs.

Finally, Andrew Robinson will rein in the discussion with security architecture built on ISO/IEC 42001 (and ATLAS) principles, private-hosting for data and AI sovereignty, and safe Continuous Control Monitoring integrations reminding the audience that AI/ML must be scrutinised and secured.