The GRC To-Do List: From POA&Ms to ConMon (and How to Actually Track Them)

November 5, 2026 | 2:00 PM ET

Every GRC program comes with a to-do list nobody hands you outright. Join IntelliGRC’s Steven Molter and Jeremy Lyles as they discuss practical approaches for managing POA&Ms, operational POAs, continuous monitoring activities, and evidence collection.

What You’ll Learn:

  • Initial implementation POA&Ms
  • Post-assessment POA&Ms
  • Operational POAs (3.12.2)
  • Continuous monitoring activities
  • Evidence collection best practices