SureCloud Launches Stay Cool at Gartner ERAC 2026

Nearly half of UK enterprises are managing 5 or more major regulatory frameworks and standards at once, and after a positive year of decline the global average cost of a data breach has now risen to its highest figure yet at $4.9 million, according to IBM's 2026 Cost of a Data Breach Report.

Whilst supply chains grow everyday and sit as the backbone of each business, investment in TPRM programmes is dropping with responsibilities ever stretched between security and procurement.

Finally AI tools are spreading through the business faster than any risk register can track. Organisations with high levels of shadow AI absorb close to $670,000 more per breach than those with proper controls in place.

Nick says that all of this is something programme leaders know how to solve, they just don’t have the capacity to get ahead of it.

“To deal with the rising temperatures, modern GRC capability should scale with the volume of work arriving, rather than with the size of the team processing it." Rafferty wrote.

Since Gracie AI launched in May, SureCloud has extended its capability to meet this need:

1. An expanded Skills library. Gracie AI now ships with more than 85 out-of-the-box Skills codifying the most common GRC tasks, from SOC2 review to monte carlo analysis that can be activated within a workflow, or at a click of a button. Whatever a user’s specialism or wherever a business sits in their GRC journey, they have more time back to focus on the growing heat.

2. Build-your-own Personas. Personas were fixed at launch but now customers can build their own around roles, job titles and permissions, capturing a specific team member's expertise and keeping it inside the business even as people move on. Personas look across your user context, record context and carry market context to inform your decisions with insight and suggest recommendations.

3. Confidence-scored actions. Each Skill output or action performed now carries a confidence score, giving teams a clear signal to trust a given result before they acts on it, or approve Gracie AI to act for them.
   

SureCloud is exhibiting at the conference booth 117, showcasing these updates and announcing their new campaign ‘The Temperature is Rising’ to draw attention to these issues.

Their first step towards helping leaders ‘stay cool’, announcing a free 12-month AI Governance application for the first 50 attendees who visit and talk to SureCloud about their experience with rising GRC temperatures.

In return, customers will be able to record their AI use cases, and models, conduct screening and assessments aligned to the EU AI Act, track remediation and use Gracie AI and an AI Governance Persona knowledgeable in the NIST AI RMF, emerging US state laws, and the EU AI Act interpreting records and spotting risk gaps, without the need for consulting.

Visit the Stay Cool hub for practical guidance on today’s GRC pressures, plus further campaign content and event appearances to come. When the temperature is rising, Stay Cool.

Founded in 2006, SureCloud Ltd. has two decades of experience as a leading provider of Governance, Risk, and Compliance (GRC) solutions. Headquartered in the UK, with offices in the US, SureCloud supports a global portfolio of organisations with its event-driven platform that connects risk, compliance, audit, third-party risk, and data privacy in one place. Whether addressing cyber risk, regulatory concerns or third-parties, SureCloud has a proven record of using Gracie AI and its virtual GRC team to reason and act across an organisation’s whole programme, allowing their full-time staff to do more with less, and do it better.

Media contact

Daniel Spicer. daniel.spicer@surecloud.com