Compliance at the Speed of Innovation: Leveraging AI-Driven Automation for Real-Time Regulatory Read
Talkat KubeCon + CloudNativeCon Europe 2025 · on Friday, 2025-04-04· at 14:30· Level 1 | Hall Entrance N10 | Room G·
summary
Claims a shift from periodic audits to continuous compliance using OSCAL-based tooling and agentic GenAI; teams report building knowledge graphs and graph-RAG pipelines over ~5 years and open projects like OSCAL Compass, Auditry and nativecurity.org. Demonstrations include automated mapping, policy generation and CI/CD gating with OPA and Ansible, plus an IBM IT bench of 50 benchmark scenarios for agent testing. Agents speed evidence collection but do not deliver fully real-time attestations; audit trails and explainability are required for regulatory proof.
AI-written summary · about
chapters (13)
- 0:00Compliance as code intro
- 1:02Panelist introductions
- 3:50Compliance as code & OSCAL
- 5:59AI-driven compliance automation
- 8:09Proving AI trustworthiness
- 9:56NLP compliance challenges
- 12:06Cloud-native compliance
- 14:32AI-native compliance future
- 17:02Cultural shifts in compliance
- 19:32Measuring AI compliance speed
- 22:43Compliance modernization timelines
- 28:04CISO role with AI
- 29:50Closing & Q&A
related talks
32mCybersecurity meets Generative AI: Automating Your Compliance...
43mNext in Privacy Innovation: AI Agents that Make Governance Scalable
46mLeveraging AI and Automation in DevOps
35mImplementing AI RMF with Policy-as-Code Automation
33mGoverning the Ungovernable: Security and Compliance for AI Agents in Open Source Projec...
21mHyperautomating Compliance and Risk Intelligence in Finance
17mGuardrails First: Designing AI Agents for Security Operations
55mAccelerating auditing and compliance for generative AI on AWS