March 15–18, 2027 · Bellagio Hotel & Casino
Governance, Risk, Compliance & Identity
For GRC, audit, and compliance leaders whose existing control frameworks were not built for AI agents executing ERP transactions. Adapt your SOD controls, audit cycles, and access governance models to cover agent-initiated transactions running continuously in your SAP environment.
Who this track is for
- GRC Management (CRO, CCO, VP, Director, Manager, Control Systems Manager)
- GRC Systems Management (VP, Director, Administrator, Developer, Architect)
- Risk Management (CRO, VP, Director, Risk Analyst)
- Audit (Chief Auditor, VP, Director, Auditor, Audit Analyst)
- Compliance (CCO, Director, VP, Manager, Specialist)
- Governance (CGO, General Counsel, VP, Director)
Hot Topics
- AI agent governance as a GRC mandate
- AI Agent Hub as compliance control plane
- SOD & SoX for agent-initiated transactions
- ABAC vs. RBAC for machine-speed access control
- Continuous audit in an agentic environment
- SAP GRC for SAP HANA roadmap & capabilities
- Scenario planning for sanctions & emergency M&A
- Auditing AI agents: methods, evidence & standards
Questions This Track Answers
- Who is responsible when an AI agent creates an unauthorized transaction or violates SOD?
- We run quarterly control testing. If agents execute continuously, what happens to our audit cycle?
- How do we extend our GRC framework to cover agents we didn't configure or approve?
- Can static role-based access control govern AI agents — and if not, what replaces it?
- How do we build a scenario planning capability for sanctions, divestitures, and emergency M&A that runs continuously — not just as a periodic exercise?
- How do internal audit teams actually audit an AI agent — what evidence is required, how are decision logs structured, and what control standards apply?
Practical learning objectives
- Adapt your SOD controls, audit cycles, and access governance models to cover agent-initiated transactions running continuously in your SAP environment.
Sample Sessions
Proposed sessions only — not confirmed; titles and formats are subject to change.
SAP GRC for SAP HANA: Roadmap and Capabilities
Breakout Session
Premium session length — top 2 sessions in 2026 at 85–86 attendees
Governing the Agent Lifecycle: Embedding GRC into Autonomous Processes
Breakout Session
AI Agent Hub as the GRC Control Plane
Breakout Session
Navigating SOD and SoX Compliance in SAP S/4HANA
Breakout Session
Continuous Audit and AI-Based Control Testing
Breakout Session
Real-Time Enterprise Risk Sensing and Scenario Planning
Breakout Session
SAP Access Control and Cloud Identity Access Governance: Current State and Roadmap
Breakout Session
Scenario Planning for Sanctions, Divestitures, and Emergency M&A: Building a Continuous Risk Capability
Roundtable
Auditing the Agents: Methods, Evidence Standards, and Control Testing for AI Processes
Workshop / Lab
Plan your trip with the hotel and travel guide.

