March 15–18, 2027 · Bellagio Hotel & Casino

Governance, Risk, Compliance & Identity

For GRC, audit, and compliance leaders whose existing control frameworks were not built for AI agents executing ERP transactions. Adapt your SOD controls, audit cycles, and access governance models to cover agent-initiated transactions running continuously in your SAP environment.

Who this track is for

  • GRC Management (CRO, CCO, VP, Director, Manager, Control Systems Manager)
  • GRC Systems Management (VP, Director, Administrator, Developer, Architect)
  • Risk Management (CRO, VP, Director, Risk Analyst)
  • Audit (Chief Auditor, VP, Director, Auditor, Audit Analyst)
  • Compliance (CCO, Director, VP, Manager, Specialist)
  • Governance (CGO, General Counsel, VP, Director)

Hot Topics

  • AI agent governance as a GRC mandate
  • AI Agent Hub as compliance control plane
  • SOD & SoX for agent-initiated transactions
  • ABAC vs. RBAC for machine-speed access control
  • Continuous audit in an agentic environment
  • SAP GRC for SAP HANA roadmap & capabilities
  • Scenario planning for sanctions & emergency M&A
  • Auditing AI agents: methods, evidence & standards

Questions This Track Answers

  • Who is responsible when an AI agent creates an unauthorized transaction or violates SOD?
  • We run quarterly control testing. If agents execute continuously, what happens to our audit cycle?
  • How do we extend our GRC framework to cover agents we didn't configure or approve?
  • Can static role-based access control govern AI agents — and if not, what replaces it?
  • How do we build a scenario planning capability for sanctions, divestitures, and emergency M&A that runs continuously — not just as a periodic exercise?
  • How do internal audit teams actually audit an AI agent — what evidence is required, how are decision logs structured, and what control standards apply?

Practical learning objectives

  • Adapt your SOD controls, audit cycles, and access governance models to cover agent-initiated transactions running continuously in your SAP environment.

Sample Sessions

Proposed sessions only — not confirmed; titles and formats are subject to change.

  • SAP GRC for SAP HANA: Roadmap and Capabilities

    Breakout Session

    Premium session length — top 2 sessions in 2026 at 85–86 attendees

  • Governing the Agent Lifecycle: Embedding GRC into Autonomous Processes

    Breakout Session

  • AI Agent Hub as the GRC Control Plane

    Breakout Session

  • Navigating SOD and SoX Compliance in SAP S/4HANA

    Breakout Session

  • Continuous Audit and AI-Based Control Testing

    Breakout Session

  • Real-Time Enterprise Risk Sensing and Scenario Planning

    Breakout Session

  • SAP Access Control and Cloud Identity Access Governance: Current State and Roadmap

    Breakout Session

  • Scenario Planning for Sanctions, Divestitures, and Emergency M&A: Building a Continuous Risk Capability

    Roundtable

  • Auditing the Agents: Methods, Evidence Standards, and Control Testing for AI Processes

    Workshop / Lab

Browse Sample Sessions
Registration & Pricing

Plan your trip with the hotel and travel guide.