Join the Vantacon livestream today

Part game, part masterclass. Watch two top security leaders make on-the-spot calls in a high-stakes tabletop exercise centered on an AI governance incident. As injects evolve and tradeoffs sharpen, you’ll get a front-row seat to how they think under pressure.

The best insight at any conference usually happens in the hallway, not on stage. This session moves it into the room. A moderator-guided discussion turns the audience into the panel, surfacing how peers are actually solving the problems everyone is quietly wrestling with. Come with a question you haven't been able to answer — you'll likely leave with three ways others have solved it.

Nobody agrees on what AI governance means yet, and that's raising big questions. Do you need AI to govern AI? Is it a new discipline or just governance with a new name? Is the bigger risk your employees or your vendors? These questions are drawing lines in the sand across the security and compliance community. Two sharp voices take sides in a series of rapid-fire debates, and you vote on every one. Come ready to pick a side.

Every GRC program passes the audit. Only some become something the business genuinely relies on. Three GRC leaders pull back the curtain on the decisions, habits, and unconventional moves that transformed their programs and their careers. Less theory, more what they actually did differently.

Shake off the post-lunch lull with David Kwong — magician, mentalist, and New York Times crossword constructor. Expect sleight of hand, wordplay, and a few puzzles you'll be solving together, whether you meant to or not.

Some of the biggest risks facing your company don't have a framework, a control mapping, or a precedent to point to. Seasoned risk practitioners share how they make defensible decisions in that gap — how they scope the unknown, document their reasoning, and hold the line when leadership pushes back. Short, practical playbooks followed by open Q&A.

In a market where every company claims to be AI-powered, product differentiation gets copied in a quarter. Trust doesn't. This session makes the case that the companies winning enterprise deals aren't the ones with the best models — they're the ones whose customers believe them. A practitioner walks through how to build trust as a durable competitive advantage rather than a cost center.

The GRC role is being rewritten in real time by AI, automation, and rising executive expectations. Hiring managers and senior practitioners discuss where the job is heading, which skills will separate good from great, and what to start building now. If you're thinking about your next move — or the next five years — this is the session to sit in on.

What happens when a GRC team gets programmatic access to their own compliance data? A Vanta customer walks through an application they built on the MCP: why they built it, how it came together, and the measurable impact on their controls and their team's time. A candid look at what's possible when GRC starts building instead of just buying.