{"id":70366,"date":"2026-08-30T12:53:12","date_gmt":"2026-08-30T10:53:12","guid":{"rendered":"https:\/\/swissgrc.com\/en\/?p=70366"},"modified":"2026-09-17T14:51:25","modified_gmt":"2026-09-17T12:51:25","slug":"ai-governance-grc-convergence-or-silo","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/","title":{"rendered":"Does AI Governance Merge with GRC or Create a New Silo"},"content":{"rendered":"<div id=\"sgce-a\" class=\"sgce-article\">\n<p class=\"rc-lede\">In June 2026, Gartner published its first Magic Quadrant for AI Governance Platforms, assessing 13 vendors. An independent analysis of that publication finds that artificial intelligence is dissolving the boundaries that previously separated AI governance, data and analytics governance, business process governance, IT governance and classic GRC. For those responsible for governance, risk and compliance, this raises a structural question: should AI governance be integrated into the existing GRC function, or built up as a separate discipline alongside it. Regulation and standards already offer some initial guidance.<\/p>\n<div class=\"rc-tldr\">\n<div class=\"rc-tldr-label\">In short<\/div>\n<p>The AI Act, ISO\/IEC 42001 and FINMA Supervisory Notice 08\/2024 all point in the same direction: AI governance should be integrated into existing governance, risk management and control structures rather than built as a separate silo. AI-specific requirements around data quality, explainability and model risk call for additional expertise within the existing GRC function, not necessarily a new organisational unit.<\/p>\n<\/div>\n<nav class=\"rc-toc\" aria-label=\"Contents\">\n<div class=\"rc-toc-label\">Contents<\/div>\n<ol>\n<li><a href=\"#a1-what-does-the-first-magic-quadrant-for-a\">What Does the First Magic Quadrant for AI Governance Platforms Show?<\/a><\/li>\n<li><a href=\"#a2-how-does-the-ai-act-regulate-the-relatio\">How Does the AI Act Regulate the Relationship Between AI Risk Management and Existing Processes?<\/a><\/li>\n<li><a href=\"#a3-what-does-iso-iec-42001-offer-as-a-stand\">What Does ISO\/IEC 42001 Offer as a Standalone Standard for AI Management Systems?<\/a><\/li>\n<li><a href=\"#a4-where-do-swiss-supervisors-and-legislato\">Where Do Swiss Supervisors and Legislators Stand on AI Governance?<\/a><\/li>\n<li><a href=\"#a5-how-can-this-integration-be-implemented-\">How Can This Integration Be Implemented in Practice?<\/a><\/li>\n<\/ol>\n<\/nav>\n<h2 id=\"a1-what-does-the-first-magic-quadrant-for-a\">What Does the First Magic Quadrant for AI Governance Platforms Show?<\/h2>\n<p>In June 2026, Gartner assessed 13 vendors of AI governance platforms for the first time, confirming a distinct market for software that manages AI risk.<\/p>\n<p>An independent analysis of the publication places the finding in a broader context: artificial intelligence is dissolving the boundaries that previously separated AI governance, data and analytics governance, business process governance, IT governance and GRC. This points less to a new, isolated discipline than to an extension of existing governance tasks to cover AI-specific questions. For organisations with an established GRC system, the relevant question is therefore less about adding another platform and more about which existing processes should absorb AI risk.<\/p>\n<h2 id=\"a2-how-does-the-ai-act-regulate-the-relatio\">How Does the AI Act Regulate the Relationship Between AI Risk Management and Existing Processes?<\/h2>\n<p>Article 9 of the AI Act requires a continuous risk management system throughout the lifecycle of high-risk AI systems, but explicitly allows this system to be integrated into processes that already exist.<\/p>\n<p>Under <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-9\" target=\"_blank\" rel=\"noopener nofollow\">Article 9(10)<\/a>, providers already subject to risk management obligations under other Union law may integrate the relevant aspects into their existing processes rather than building a parallel system. Article 17 additionally obliges providers of high-risk AI systems to maintain a quality management system, and Article 10 sets out specific requirements for data governance and data quality: datasets must be relevant, representative, free of errors and complete, as far as this is possible. The legislator itself therefore applies an integration logic, even though the substantive requirements are new for many GRC functions. This stance contrasts with the public debate about the AI Act stifling innovation or imposing overregulation.<\/p>\n<h2 id=\"a3-what-does-iso-iec-42001-offer-as-a-stand\">What Does ISO\/IEC 42001 Offer as a Standalone Standard for AI Management Systems?<\/h2>\n<p>ISO\/IEC 42001:2023 is the first international standard to set requirements for establishing, implementing, maintaining and continually improving an AI management system.<\/p>\n<p>Like other management system standards, ISO\/IEC 42001 is designed as a system that can be certified on its own, but it can equally be docked onto existing GRC structures, for example an existing information security or quality management system. This dual compatibility mirrors the logic of the AI Act: AI governance requires its own specialist building blocks, but does not need to be anchored organisationally apart from the rest of risk management. For those responsible for GRC, the decision therefore shifts from structure to resources: who contributes the expertise needed to handle intelligent risks, and which existing process carries the evidence.<\/p>\n<h2 id=\"a4-where-do-swiss-supervisors-and-legislato\">Where Do Swiss Supervisors and Legislators Stand on AI Governance?<\/h2>\n<p>In Supervisory Notice 08\/2024, FINMA does not call for a standalone AI governance structure but for the extension of existing governance, risk management and control systems, while the Federal Council is moving towards sector-specific AI regulation.<\/p>\n<p>FINMA bases its <a href=\"https:\/\/www.finma.ch\/en\/news\/2024\/12\/20241218-mm-finma-am-08-24\/\" target=\"_blank\" rel=\"noopener nofollow\">Supervisory Notice 08\/2024<\/a> on findings from ongoing supervisory activity and states that most financial institutions are still at an early stage of development. Every supervised institution must reconsider the effect of AI use on its risk profile and adapt its governance, risk management and control system to the applicable regulatory framework. As Switzerland has no AI-specific legislation, FINMA follows a risk-based approach that covers operational, data, IT and cyber risk as well as legal and reputational aspects.<\/p>\n<p>The Federal Council has decided to ratify the Council of Europe&#8217;s AI Convention and to adapt Swiss law accordingly; Federal Councillor Albert R\u00f6sti signed the Convention on behalf of Switzerland. The Federal Department of Justice and Police, together with the Federal Department of the Environment, Transport, Energy and Communications and the Federal Department of Foreign Affairs, is to prepare a consultation draft by the end of 2026 setting out measures on transparency, data protection, non-discrimination and oversight. Legislative amendments are intended to be as sector-specific as possible, while any cross-sector rules should be limited to core areas touching on fundamental rights. The current maturity level of institutions is described in detail in FINMA&#8217;s survey on the use of artificial intelligence.<\/p>\n<h2 id=\"a5-how-can-this-integration-be-implemented-\">How Can This Integration Be Implemented in Practice?<\/h2>\n<p>The first step is to take stock of the AI applications already in use and map them to existing risk registers, controls and data protection processes.<\/p>\n<p>The function responsible for GRC should complete this mapping within the current planning cycle before deciding on a separate AI governance function. Only after that can it be assessed which AI-specific gaps require additional expertise, for example around data quality under Article 10 of the AI Act or the explainability of model decisions. In most cases, these gaps can be closed through new roles and review steps within the existing structure, rather than through an additional silo.<\/p>\n<div class=\"rc-callout\">\n<p>A separate AI governance function is worthwhile only once the existing GRC structure demonstrably cannot cover the AI-specific requirements.<\/p>\n<\/div>\n<div class=\"rc-bridge\">\n<div class=\"rc-bridge-mark\"><\/div>\n<div>\n<div class=\"rc-bridge-label\">Related<\/div>\n<h3>A shared data foundation for AI risk<\/h3>\n<p>AI GRC maps AI risk into the same risk register already used for other risk types. It links requirements from the AI Act to existing controls and evidence.<\/p>\n<p><a href=\"https:\/\/swissgrc.com\/en\/ai-grc\/\">AI GRC <span class=\"rc-pfeil\" aria-hidden=\"true\"><\/span><\/a><\/div>\n<\/div>\n<aside class=\"rc-takeaways\">\n<div class=\"rc-takeaways-label\">For practice<\/div>\n<h2>Key points<\/h2>\n<ul>\n<li>Article 9(10) of the AI Act explicitly permits integrating AI risk management into existing processes.<\/li>\n<li>ISO\/IEC 42001 can be certified as a standalone system or docked onto existing management systems.<\/li>\n<li>FINMA requires supervised institutions to extend existing governance, risk management and control systems rather than build a new structure.<\/li>\n<li>The Federal Council is moving towards sector-specific AI regulation, with a consultation draft from the Federal Department of Justice and Police due by the end of 2026.<\/li>\n<li>Taking stock of the AI applications already in use is the practical first step before any structural decision.<\/li>\n<\/ul>\n<\/aside>\n<section class=\"rc-faq\">\n<div class=\"rc-faq-head\">\n<div class=\"rc-faq-label\">FAQ<\/div>\n<h2>Frequently asked questions<\/h2>\n<\/div>\n<div class=\"rc-faq-list\">\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Does a company need to set up a new department for AI governance?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>No. The AI Act, ISO\/IEC 42001 and FINMA Supervisory Notice 08\/2024 all point towards integrating AI governance into existing governance, risk management and control structures. A standalone AI governance function is worthwhile only once the existing GRC structure demonstrably cannot cover the AI-specific requirements.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What does Article 9 of the AI Act require regarding risk management for high-risk AI systems?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>Article 9 of the AI Act requires a continuous risk management system throughout the lifecycle of high-risk AI systems. Under Article 9(10), providers already subject to risk management obligations under other Union law may integrate these aspects into existing processes rather than building a parallel system.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">Can ISO\/IEC 42001 be certified on its own, or only as an addition to existing systems?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>Like other management system standards, ISO\/IEC 42001:2023 is designed as a system that can be certified on its own, but it can equally be docked onto existing GRC structures, for example an existing information security or quality management system. This dual compatibility mirrors the integration logic of the AI Act.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What role does FINMA Supervisory Notice 08\/2024 play for Swiss financial institutions?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>FINMA does not require a standalone AI governance structure but the extension of existing governance, risk management and control systems. Every supervised institution must reconsider the effect of AI use on its risk profile and follow a risk-based approach, since Switzerland has no AI-specific legislation.<\/p>\n<\/div>\n<\/details>\n<details class=\"rc-faq-item\">\n<summary><span class=\"rc-faq-frage\">What is the first practical step in embedding AI governance into GRC?<\/span><span class=\"rc-faq-mark\" aria-hidden=\"true\"><\/span><\/summary>\n<div class=\"rc-faq-answer\">\n<p>The first step is to take stock of the AI applications already in use and map them to existing risk registers, controls and data protection processes. Only after that can it be assessed which AI-specific gaps require additional expertise, before deciding on a separate AI governance function.<\/p>\n<\/div>\n<\/details>\n<\/div>\n<\/section>\n<section class=\"rc-sources\">\n<div class=\"rc-sources-label\">Sources<\/div>\n<ol>\n<li><a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-9\" target=\"_blank\" rel=\"noopener nofollow\">Article 9, risk management system for high-risk AI systems<\/a><span class=\"rc-source-pub\">AI Act Service Desk, European Commission<\/span><\/li>\n<li><a href=\"https:\/\/www.finma.ch\/en\/news\/2024\/12\/20241218-mm-finma-am-08-24\/\" target=\"_blank\" rel=\"noopener nofollow\">Supervisory Notice 08\/2024 on governance and risk management in AI<\/a><span class=\"rc-source-pub\">FINMA<\/span><\/li>\n<\/ol>\n<\/section>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The AI Act, ISO\/IEC 42001 and FINMA Supervisory Notice 08\/2024 all point in the same direction: AI governance should be integrated into existing governance, risk management and control structures rather than built as a separate silo. AI-specific requirements around data quality, explainability and model risk call for additional expertise within the existing GRC function, not necessarily a new organisational unit.<\/p>\n","protected":false},"author":5,"featured_media":70367,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Bujar Surdulli","real_author_title":"AI Transformation Manager","real_author_bio":"Tracks how artificial intelligence enters the SwissGRC Platform and watches the AI Act turn abstract obligations into everyday automation. Each new model, such as Grace, raises the same question for him: what trace does it leave in a company's governance.","real_author_photo":70147,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[105],"tags":[161,162,163,164,165],"class_list":["post-70366","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-regulation-supervision","tag-ai-act-risk-management","tag-iso-iec-42001","tag-finma-supervisory-notice-08-2024","tag-ai-governance-structure","tag-grc-integration"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"superadmin\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"AI Governance and GRC: Integration Instead of a New Silo\" \/>\n\t\t<meta property=\"og:description\" content=\"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-30T10:53:12+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-17T12:51:25+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"AI Governance and GRC: Integration Instead of a New Silo\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"superadmin\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#blogposting\",\"name\":\"AI Governance and GRC: Integration Instead of a New Silo\",\"headline\":\"Does AI Governance Merge with GRC or Create a New Silo\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/superadmin\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/08\\\/ai-governance-grc-convergence-or-silo-swissgrc.webp\",\"width\":1200,\"height\":630,\"caption\":\"Swiss GRC article image showing the logo and an abstract network graphic in deep teal, category Regulation & Supervision\"},\"datePublished\":\"2026-08-30T12:53:12+02:00\",\"dateModified\":\"2026-09-17T14:51:25+02:00\",\"inLanguage\":\"en-GB\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#webpage\"},\"articleSection\":\"Regulation &amp; Supervision, AI Act risk management, ISO\\\/IEC 42001, FINMA Supervisory Notice 08\\\/2024, AI governance structure, GRC integration\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/regulation-supervision\\\/#listItem\",\"name\":\"Regulation &amp; Supervision\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/regulation-supervision\\\/#listItem\",\"position\":2,\"name\":\"Regulation &amp; Supervision\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/regulation-supervision\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#listItem\",\"name\":\"Does AI Governance Merge with GRC or Create a New Silo\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#listItem\",\"position\":3,\"name\":\"Does AI Governance Merge with GRC or Create a New Silo\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/regulation-supervision\\\/#listItem\",\"name\":\"Regulation &amp; Supervision\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/superadmin\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/superadmin\\\/\",\"name\":\"superadmin\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#authorImage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/01\\\/logo-red.svg\",\"width\":96,\"height\":96,\"caption\":\"superadmin\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/\",\"name\":\"AI Governance and GRC: Integration Instead of a New Silo\",\"description\":\"Integrating AI governance into GRC: the AI Act, ISO\\\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/superadmin\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/superadmin\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/08\\\/ai-governance-grc-convergence-or-silo-swissgrc.webp\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#mainImage\",\"width\":1200,\"height\":630,\"caption\":\"Swiss GRC article image showing the logo and an abstract network graphic in deep teal, category Regulation & Supervision\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/ai-governance-grc-convergence-or-silo\\\/#mainImage\"},\"datePublished\":\"2026-08-30T12:53:12+02:00\",\"dateModified\":\"2026-09-17T14:51:25+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>AI Governance and GRC: Integration Instead of a New Silo<\/title>\n\n","aioseo_head_json":{"title":"AI Governance and GRC: Integration Instead of a New Silo","description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","canonical_url":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#blogposting","name":"AI Governance and GRC: Integration Instead of a New Silo","headline":"Does AI Governance Merge with GRC or Create a New Silo","author":{"@id":"https:\/\/swissgrc.com\/en\/author\/superadmin\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/en\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp","width":1200,"height":630,"caption":"Swiss GRC article image showing the logo and an abstract network graphic in deep teal, category Regulation & Supervision"},"datePublished":"2026-08-30T12:53:12+02:00","dateModified":"2026-09-17T14:51:25+02:00","inLanguage":"en-GB","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#webpage"},"articleSection":"Regulation &amp; Supervision, AI Act risk management, ISO\/IEC 42001, FINMA Supervisory Notice 08\/2024, AI governance structure, GRC integration"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/category\/regulation-supervision\/#listItem","name":"Regulation &amp; Supervision"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/category\/regulation-supervision\/#listItem","position":2,"name":"Regulation &amp; Supervision","item":"https:\/\/swissgrc.com\/en\/category\/regulation-supervision\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#listItem","name":"Does AI Governance Merge with GRC or Create a New Silo"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#listItem","position":3,"name":"Does AI Governance Merge with GRC or Create a New Silo","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/category\/regulation-supervision\/#listItem","name":"Regulation &amp; Supervision"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/en\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/en\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/en\/author\/superadmin\/#author","url":"https:\/\/swissgrc.com\/en\/author\/superadmin\/","name":"superadmin","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#authorImage","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/01\/logo-red.svg","width":96,"height":96,"caption":"superadmin"}},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#webpage","url":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/","name":"AI Governance and GRC: Integration Instead of a New Silo","description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/swissgrc.com\/en\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/en\/author\/superadmin\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/en\/author\/superadmin\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp","@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#mainImage","width":1200,"height":630,"caption":"Swiss GRC article image showing the logo and an abstract network graphic in deep teal, category Regulation & Supervision"},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/#mainImage"},"datePublished":"2026-08-30T12:53:12+02:00","dateModified":"2026-09-17T14:51:25+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/en\/#website","url":"https:\/\/swissgrc.com\/en\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"en-GB","publisher":{"@id":"https:\/\/swissgrc.com\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Swiss GRC | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"AI Governance and GRC: Integration Instead of a New Silo","og:description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","og:url":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/","og:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp","og:image:secure_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp","og:image:width":1200,"og:image:height":630,"article:published_time":"2026-08-30T10:53:12+00:00","article:modified_time":"2026-09-17T12:51:25+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"AI Governance and GRC: Integration Instead of a New Silo","twitter:description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","twitter:creator":"@SwissGRC","twitter:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/08\/ai-governance-grc-convergence-or-silo-swissgrc.webp","twitter:label1":"Written by","twitter:data1":"superadmin","twitter:label2":"Est. reading time","twitter:data2":"7 minutes"},"aioseo_meta_data":{"post_id":"70366","title":"AI Governance and GRC: Integration Instead of a New Silo","description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","keywords":null,"keyphrases":{"focus":{"keyphrase":"AI governance and GRC","score":0,"analysis":[]},"additional":[{"keyphrase":"AI Act risk management","score":0,"analysis":[]},{"keyphrase":"ISO\/IEC 42001","score":0,"analysis":[]},{"keyphrase":"FINMA Supervisory Notice 08\/2024","score":0,"analysis":[]},{"keyphrase":"AI governance structure","score":0,"analysis":[]},{"keyphrase":"GRC integration","score":0,"analysis":[]}]},"primary_term":null,"canonical_url":null,"og_title":"AI Governance and GRC: Integration Instead of a New Silo","og_description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":"AI Governance and GRC: Integration Instead of a New Silo","twitter_description":"Integrating AI governance into GRC: the AI Act, ISO\/IEC 42001 and FINMA guidance all point to embedding AI governance in existing structures rather than new","schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-17 12:52:06","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-08-31 14:17:10","updated":"2026-09-17 13:13:10","focus_keyword":"AI governance and GRC","additional_keywords":[{"word":"AI Act risk management","score":78,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":9},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"ISO\/IEC 42001","score":78,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":9},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"FINMA Supervisory Notice 08\/2024","score":78,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":9},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"AI governance structure","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}},{"word":"GRC integration","score":69,"items":{"introductionKeyword":{"score":3},"keyphraseLength":{"score":9},"keyphraseDensity":{"score":4},"functionWordsInKeyphrase":{"score":9},"textCompetingLinks":{"score":9},"imageKeyphrase":{"score":3}}}],"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/en\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/en\/category\/regulation-supervision\/\" title=\"Regulation &amp; Supervision\">Regulation &amp; Supervision<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tDoes AI Governance Merge with GRC or Create a New Silo\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/en\/"},{"label":"Regulation &amp; Supervision","link":"https:\/\/swissgrc.com\/en\/category\/regulation-supervision\/"},{"label":"Does AI Governance Merge with GRC or Create a New Silo","link":"https:\/\/swissgrc.com\/en\/ai-governance-grc-convergence-or-silo\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts\/70366","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/comments?post=70366"}],"version-history":[{"count":2,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts\/70366\/revisions"}],"predecessor-version":[{"id":70460,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts\/70366\/revisions\/70460"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/media\/70367"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/media?parent=70366"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/categories?post=70366"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/tags?post=70366"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}