This session explores how forward-thinking teams are using AI to enhance compliance, automate decision-making, and improve visibility—while building the frameworks needed to manage model risk, data privacy, and regulatory exposure.

Join OneTrust and Deloitte to learn how leading enterprises are striking the right balance between innovation and control in an increasingly AI-driven landscape.

About this exercise

The GRF Business Resilience Council's ORF Tabletop Exercise series challenges teams to test resilience, refine incident response, and share best practices through panel-led discussions with real-time inputs and data aggregation. Participants deepen their understanding of service dependencies and their ability to adapt and maintain operations across threat types.

AI agents are now making decisions, touching sensitive systems, and acting on your organization's behalf, often faster than any human can review. Attackers are moving at that same machine speed, and non-human identities already outnumber your workforce many times over. CSA has been tracking this shift as the AI Vulnerability Storm, a wave of AI-discovered exploits arriving faster than most security teams can patch. The old perimeter was never built to govern any of this, and the next incident is not a matter of if, but when.

Implementing Zero Trust principles is essential to deploying AI safely at scale. It replaces implicit trust with continuous verification, which is exactly what autonomous agents and machine identities require. CSA has spent years helping define what that looks like in practice. Our Zero Trust Advancement Center (ZTAC), Certificate of Competence in Zero Trust (CCZT), and research like our AI Vulnerability Storm briefings all contribute to that foundation. That same research and expert network informs the agenda for CSA's FREE two-day virtual AI Security Summit 2026: Zero Trust, where practitioners can learn alongside the people doing this work.

If you're responsible for securing AI initiatives, modernizing identity, or leading Zero Trust strategy in an increasingly autonomous enterprise, this is the event you can't afford to skip. Register free today.

Artificial intelligence is changing more than cyberattacks. It is reshaping how organizations build trust, manage risk, and operate security programs. 

 Join Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard, and Dr. Yonesy Núñez, six-time CISO and security executive at Surf AI, for a discussion on how cybersecurity leadership is evolving in an era of machine-speed threats, expanding third-party ecosystems, and agentic technologies.  

Drawing on decades of experience leading security programs at organizations including DTCC, Wells Fargo, Citi, and Jack Henry, Núñez shares lessons on building resilient security organizations, engaging boards and regulators, and preparing for a future where trust, context, and automation increasingly define competitive advantage.  

Topics include AI's impact on cybercrime, the future of third-party risk management, agentic security, board-level cyber leadership, and what separates resilient organizations from reactive ones.

The answer is here. AI Governance Europe 2026 brings together the executives responsible for overseeing AI across financial services—from risk and compliance to legal, technology and data. Discover how leading organisations are building governance frameworks that balance innovation, accountability and regulatory compliance.

Artificial intelligence agents are changing how organizations interact with enterprise applications, data repositories and business processes. As adoption accelerates, leaders must determine how agent identities should be governed, what permissions agents require and how those activities can be monitored effectively.

Unlike traditional access models focused exclusively on human users, AI environments often involve a combination of user identities, agent identities, workloads and system accounts. Organizations need practical ways to limit access, monitor activity and reduce the risk of unintended actions.

Join RSM professionals as they discuss how AI agents are transforming enterprise access models and why Model Context Protocol (MCP) is becoming an important mechanism for connecting agents to enterprise systems and data. Through practical implementation examples, governance principles and a live demonstration, attendees will learn how organizations are addressing authorization, access controls and enterprise-data governance in AI-enabled environments.