Saad Bin Hamid

When AI Can Do the Risk Work, What Is a GRC Platform Actually For?

AI is making some of the most visible work in governance, risk and compliance remarkably easy to reproduce. But that does not necessarily mean GRC platforms themselves are becoming commodities. I started thinking about this after encountering what felt like a sudden proliferation of relatively inexpensive GRC platforms. The demos

When Privacy Risk Becomes Physical Risk

What happens when the data stays the same, but the world around it doesn’t? Most enterprise data is spectacularly boring. Names. Employee IDs. Phone records. Travel history. Building-access logs. Authentication timestamps. Backups. Cloud regions. Nobody collecting any of this is usually thinking about geopolitics. HR needs to manage