How to add agentic AI to trustworthy GRC

Given the growing concern about AI hallucinations and groundedness, trustworthy agentic AI seems like a bigger stretch. Drata has been approaching the new paradigm in a measured way towards its vision of autonomous, continuous trust management. Its first step into the agentic arena is starting with using agentic AI to streamline Vendor Risk Management (VRM). This is a cumbersome process that spans multiple departments across vendors and clients.

Governance, Risk Management, and Compliance (GRC) is a complicated process that often spans multiple tools and processes and requires constant human supervision. I previously covered Drata’s efforts to bring automation to the GRC space. Now the company is exploring how autonomous trust management might take the next step toward specialized AI agents that can take action and not just assist. The bigger vision is to support continuous assurance as part of GRC that Drata is framing as GRC-A.

I recently connected ...