Optro launches AI risk management tools amid governance gaps

Optro has introduced a series of new product capabilities aimed at strengthening enterprise risk management as organisations accelerate their use of artificial intelligence.

The announcement follows the company’s recent rebrand, which reflects its focus on delivering a unified view across information security, compliance, risk and audit. The latest updates come amid growing concern that governance frameworks are not keeping pace with the speed of AI adoption.

“Cyber risk now moves at machine speed, and legacy GRC tools can no longer keep up,” said Happy Wang , Chief Product and Technology Officer at Optro. "By leveraging AI to predict cyber risk, surface real-time insights, and accelerate mitigation, we help organizations shift from reactive reporting to proactive risk defense—building a true system of action that is ready for the AI era."

Findings from Optro’s latest Risk Intelligence report highlight a widening gap between AI deployment and oversight. While 85% of organisations report integrating AI into core operations or deploying it across multiple functions, only a quarter say they have full visibility into employee use of AI. Just 34% describe their AI programmes as strategic and continuously improving.

Against this backdrop, the company’s updated platform introduces new capabilities designed to address visibility, control and response gaps. A unified AI layer aims to connect policies, technical systems and human oversight into a single framework, allowing organisations to monitor risks and enforce compliance more consistently.

Additional functionality focuses on cyber risk monitoring, providing organisations with clearer insights into how specific vulnerabilities affect overall security posture and financial exposure. By linking technical risk data to business outcomes, the platform is positioned to support more informed decision-making.

The update also expands continuous control monitoring, using AI-driven recommendations and pre-built templates to automate oversight processes. This is intended to reduce reliance on manual workflows, improve consistency in compliance activities and enable earlier identification of potential issues.

The changes reflect broader industry trends, where fragmented systems and limited integration continue to constrain risk management efforts. As AI adoption accelerates, organisations are increasingly under pressure to align governance structures with operational realities.