# GRC spending in Indian firms shifts from people to platforms 2026-08-17T09:19:50+00:00 | Governance | Indian Opinion Desk Corroboration: 1 independent outlet The first half of 2026 has seen governance, risk and compliance (GRC) shift from a support function to one that shapes business transformation, according to a mid-year trends report from Sprinto, as reported by ciso.economictimes.indiatimes.com. Privacy, once a legal exercise, has become an operational priority with the Digital Personal Data Protection Act moving into implementation phase. Boards now demand live risk dashboards over quarterly presentations, with the RBI and SEBI requiring active oversight of technology and cybersecurity risks. Artificial intelligence has created a significant blind spot, as few organisations know how many AI systems make decisions across their business. Sprinto co-founder Raghuveer Kancherla said the challenge is building governance that continuously tracks AI systems. Compliance budgets are moving away from solely hiring talent toward platforms that automate governance. Gartner predicts legal, risk and compliance functions will double technology spending by 2027, driven by demand for automated assurance and AI governance capabilities. ## Coverage - ciso.economictimes.indiatimes.com This story was synthesised by AI from the source linked above. Tags: Digital Personal Data Protection Act, Gartner, RBI, SEBI, Sprinto Canonical: https://indianopinion.org/grc-spending-in-indian-firms-shifts-from-people-to-platforms/ License: Summary and commentary (c) Indian Opinion, reusable with attribution. Facts belong to the linked sources. Cite: https://indianopinion.org/grc-spending-in-indian-firms-shifts-from-people-to-platforms/#story-in-brief Review state: restored archive article, accurate at time of publication, not offered to search indexes. How this brief was made: an AI model read the report linked above and wrote this summary and analysis, which were published automatically. Published briefs are sampled every hour by an automated quality check; the editor verifies its findings and approves corrections, and corrected briefs carry a dated correction line. We do no original reporting. Methodology: https://indianopinion.org/ai-use-policy/