Hybrid event offers actionable insights for GRC and internal audit professionals
San Diego, CA, USA—ISACA and The Institute of Internal Auditors (The IIA) will jointly present the 13th annual Governance, Risk, and Control (GRC) Conference on 17-19 August 2026, in San Diego, CA, and virtually, gathering the leading minds in GRC to provide professionals with world-class content, innovative ideas and practical guidance for today’s risk and governance environment.
Sessions are designed to equip GRC professionals to manage emerging technologies, evolving regulatory demands, and complex enterprise risk environments. The diverse slate of speakers will cover topics including enterprise AI governance, vendor risk management, agentic AI in GRC, cloud security, ethical innovation, privacy governance programs, quantum computing, and more.
GRC Conference 2026 will feature three keynote presentations—Tarah Wheeler, CEO of the cybersecurity compliance company Red Queen Dynamics, cybersecurity expert and white hat hacker; Maria-Kristina Hayden, founder and CEO at OUTFOX and an internationally recognized expert on cyber hygiene and resiliency; and Jim Carroll, futurist, author and innovation expert.
Two pre-conference workshops are being held in-person on Sunday, 16 August, including “Beyond the Hype: Auditing and Governing Generative AI at Scale,” with instructors Andrew Guasp, Director Standards and Professional Guidance – AI & IT at The IIA, and William Truett, Senior Manager Standards and Professional Guidance – IT at The IIA, and “Demystifying Cyber Risk: Integrating Cybersecurity into Enterprise GRC,” with instructor Dustin Brewer, Senior Director of Professional Services at BlueVoyant. A post-conference workshop will be held in person on Wednesday, 19 August, with speaker AJ Yawn, lead GRC engineer at Rippling, speaking on “Resiliency by Design: Stress-Testing Your GRC Framework for the Next Decade,” presented jointly by ISACA and The IIA.
Attendees can earn up to 16 hours of continuing professional education (CPE) credits for attending the conference, and an additional 12 CPE credits for attending pre- and post-conference workshops. Registration for in-person attendance will close on 14 August. For more information about GRC Conference 2026, visit the event pages at ISACA or The IIA.
About ISACA
ISACA® (www.isaca.org) champions the global workforce advancing trust in technology. For more than 55 years, ISACA has empowered its community of 195,000+ members with the knowledge, credentials, training and network they need to thrive in fields like information security, governance, assurance, risk management, data privacy and emerging tech. With a presence in more than 190 countries and with more than 230 chapters worldwide, ISACA offers resources tailored to every stage of members’ careers—helping them to thrive in a rapidly changing digital landscape, drive trusted innovation and ensure a more secure digital world. Through the ISACA Foundation, ISACA also expands IT and education career pathways, fostering opportunities to grow the next generation of technology professionals.
About The Institute of Internal Auditors
The Institute of Internal Auditors (The IIA) is an international professional association that serves more than 265,000 global members and has awarded more than 220,000 Certified Internal Auditor® (CIA®) certifications worldwide. Established in 1941, The IIA is recognized throughout the world as the internal audit profession's leader in standards, certifications, education, research, and technical guidance. For more information, visit theiia.org.
Media Contacts:
Emily Ayala, +1.847.385.7223, communications@isaca.org
Sarah DuBois, +1.952.688.2588, sarah.dubois@theiia.org