What to Expect in IBM OpenPages 9.2: The Next Step Toward AI-First GRC

As governance, risk, and compliance platforms evolve, IBM OpenPages continues to move toward becoming an AI-first GRC platform. Although version 9.2 has not yet been officially released, the direction of recent versions such as 9.0.x and 9.1.x gives us strong clues about what may come next.

Recent updates have emphasized embedded generative AI, automation, and improved user experiences for risk professionals. If the roadmap continues in the same direction, OpenPages 9.2 will likely deepen these capabilities and further transform how organizations manage risk and compliance.

In this blog, we explore the key areas where OpenPages 9.2 is expected to bring meaningful improvements.

1. AI-First GRC Experiences

Recent releases have introduced AI agents, AI-assisted annotations, and generative capabilities that can automatically create child objects such as actions or controls from AI-generated insights.

OpenPages 9.2 will likely expand this into end-to-end AI-driven workflows across risk, compliance, and audit functions.

What we may see:

• More specialized AI agents, such as:
  • Issue triage agents
  • Control quality validation agents
  • Risk similarity detection across taxonomies
• Stronger guardrails for AI governance, including better prompt management, monitoring, and telemetry.
• Improved explainability in AI-suggested risk scores, classifications, and remediation paths.

For GRC engineers, this shift means moving beyond traditional form configuration and focusing more on configuring AI prompts, policies, and AI-driven views.

2. Smarter Workflows with GRC Canvas

One of the most important innovations in recent versions is the GRC Canvas, a visual interface for designing processes, AI agents, and business workflows inside OpenPages.

In version 9.2, this canvas is likely to become the central orchestration layer for building and managing risk processes.

Expected improvements:

• Drag-and-drop workflow composition
• Visual nodes for:
  • Questionnaires
  • Approvals
  • AI agents
  • External integrations
• Environment promotion and version control for governance and compliance.
• Deeper integrations with external systems such as ticketing tools, messaging platforms, and data lakes.

This evolution moves OpenPages away from manual workflow configuration toward visual programming of the entire GRC operating model.

3. Enhanced UX, Views, and Data Density

Recent 9.1.x releases introduced several UI improvements including:

• Card-based layouts
• Compact views
• Nested grids
• Increased field limits per grid

These improvements help users view more information without overwhelming the interface.

In OpenPages 9.2, these improvements are expected to converge into a more consistent, workspace-centric user experience.

Likely UX enhancements:

• Role-based workspaces tailored for:
  • Risk owners
  • Control performers
  • Auditors
• Flexible grid configurations, including:
  • Conditional highlighting
  • Dynamic columns
  • Inline editing improvements
• Faster navigation across large and complex objects with many relationships.

The goal is simple: less navigation time and more time spent on risk analysis and decision-making.

4. Reporting, Periods, and Analytics

OpenPages has already expanded reporting capabilities in recent releases, including:

• Multiple reporting periods in the Activity Log
• Multi-report views
• More customizable dashboards

In version 9.2, reporting and analytics may become even more self-service and real-time.

Areas to watch:

• Advanced support for multiple reporting periods across modules such as issues, KRIs, and controls.
• Stronger integration with reporting platforms like IBM Cognos Analytics.
• Configurable drill-through dashboards and reusable reporting widgets.
• AI-assisted narrative generation for risk and compliance reports.

These features would enable risk teams to build dashboards and insights without heavy dependence on centralized BI teams.

5. Integration, APIs, and Platform Governance

OpenPages is increasingly positioning itself as a platform-ready GRC hub.

Earlier releases introduced GRC REST API v2, aligned with IBM Cloud API guidelines, along with SCIM-based identity management support.

In OpenPages 9.2, this platform approach will likely continue to expand.

Possible enhancements include:

• Expanded API coverage for workflows, AI agents, and GRC Canvas artifacts.
• Better observability, including structured event logs for:
  • Workflow transitions
  • AI calls
  • User actions
• Stronger integration with IBM’s broader ecosystem, including IBM watsonx for AI services.

These improvements would allow organizations to adopt DevSecOps practices for GRC, such as:

• CI/CD pipelines for configuration changes
• Policy-as-code