About the AI Governance, Risk and Compliance (AI GRC) category
What belongs in this category
The AI Governance, Risk and Compliance (AI GRC) category is part of securing AI. It covers products that give risk, legal and compliance teams control over how AI is used: a register of AI systems and use cases, risk assessments for each, controls mapped to AI frameworks and laws, and the evidence auditors and regulators ask for. Entries may also track the AI that vendors build into their products.
AI GRC is the compliance view of AI. Policy and oversight for AI agents fit Agentic AI Governance, and technical discovery of AI assets in cloud and code fits AI Security Posture Management (AI-SPM). AI that assesses security evidence against controls fits AI Compliance Evidence and Control Assessment. Governance platforms that cover all risk and compliance fit Governance, Risk and Compliance (GRC). An AI GRC product can also enter Security for AI.
Related categories to enter
Each category is judged separately, so you can enter a product in every category that matches what it does, with a separate nomination for each. Tailor each nomination to that category's focus. Entering several related categories gives the product more than one chance to be recognized.
How entries are judged
An independent jury of security practitioners, analysts and CISOs scores each nomination on leadership, innovation and impact. Each nomination competes in its category against organizations of similar size and region, so a mid-sized firm is not ranked against a global enterprise. Your entry package, any sponsorship and public votes do not affect the jury's scores.
Strong entries in this category show:
- Leadership — the AI programs the product governs: AI systems and use cases registered, frameworks and laws covered, and customers, including regulated ones, that rely on it for audits.
- Innovation — an AI compliance problem solved in a new way, such as mapping one control to several AI laws, assessing vendors' AI, or keeping the AI register current without manual surveys.
- Impact — results for customers: AI systems registered and assessed, time to prepare for an AI audit cut, findings closed. Give figures from customers.
The jury awards Gold, Silver or Bronze, or a Finalist badge, and results are published on this site and announced to the 600,000+ member Cybersecurity Insiders community. Every approved nomination also enters the separate Community Choice award, decided by public votes.
How to enter
A vendor can enter its own product or service, and a PR agency can enter it on a client's behalf. The nomination form has a confidential field for detail that is shared with the judges and not published, such as customer names, deployment figures or roadmap. Deadlines, pricing and entry steps are on the How it Works page.
