PRANAY SINGH SURI

Governance, Risk, and Compliance (GRC) teams often operate in silos, disconnected from the hands-on efforts of cybersecurity teams such as red and blue teams. This disconnect can lead to misaligned priorities, overlooked risks, and inefficiencies in responding to threats. In this presentation, we'll explore strategies to bridge the gap between GRC and cybersecurity teams, emphasizing the importance of collaboration in building a unified, risk-aware culture. Attendees will learn actionable techniques to align compliance frameworks with security operations, foster communication between teams, and leverage shared tools and data for better outcomes. This talk will empower both GRC and cybersecurity professionals to break down silos and work together effectively.

Governance, Risk, and Compliance (GRC) is becoming increasingly complex in today's digital-first world. Traditional approaches often struggle to keep pace with the scale and speed of modern risks. Enter AI-powered GRC: a transformative approach that leverages machine learning to automate compliance, predict risks, and streamline governance processes. This presentation will explore how machine learning can revolutionize GRC by enabling real-time risk detection, automating control checks, and improving decision-making. We'll also address challenges like data quality and algorithmic transparency. Attendees will gain insights into cutting-edge tools, real-world use cases, and practical steps to integrate AI into their GRC strategies.

Large Language Models are becoming a core part of modern security tools, but they're also far easier to manipulate than many organizations realize. In this session, we break down the most common LLM attack techniques in simple, practical terms that anyone can follow. Together, we'll demonstrate how prompt injection, jailbreaks, indirect prompts, and function-call abuse actually happen, and why these attacks succeed even against models with strong guardrails. Our goal is not to teach exploitation, but to help defenders understand the real risks behind AI-powered systems. We'll walk through clear examples, explain the security gaps LLMs introduce, and share straightforward ways teams can reduce exposure without needing machine-learning expertise. This talk is fast-paced, beginner-friendly, and designed to give security engineers, GRC professionals, and analysts a realistic understanding of how attackers take advantage of AI systems today.

SOC and ITGC audits are often viewed as tedious compliance checklists, but they are actually critical to building trust and maintaining accountability within secure organizations. In this session, we will take you behind the scenes of real audit engagements to show how access, change, and operational controls are tested and why they matter far beyond passing an audit. Drawing from our combined experience in cybersecurity, governance, and risk, we will share lessons learned, common pitfalls, and practical ways to design audit-ready environments that strengthen overall security posture. Attendees will gain actionable insights to prevent recurring findings, improve evidence collection, and bridge the gap between security and compliance teams. Whether you are a security engineer or a GRC professional, this talk will help you transform the way you approach audits from a yearly requirement to a continuous improvement opportunity.

Governance, Risk, and Compliance (GRC) is becoming increasingly complex in today's digital-first world. Traditional approaches often struggle to keep pace with the scale and speed of modern risks. Enter AI-powered GRC: a transformative approach that leverages machine learning to automate compliance, predict risks, and streamline governance processes. This presentation will explore how machine learning can revolutionize GRC by enabling real-time risk detection, automating control checks, and improving decision-making. We'll also address challenges like data quality and algorithmic transparency. Attendees will gain insights into cutting-edge tools, real-world use cases, and practical steps to integrate AI into their GRC strategies.