Digital transformation has created increasingly interconnected and data-intensive environments. In this context, Digital Twins (DTs) provide continuous monitoring and simulation capabilities, while governance, risk, and compliance (GRC) supports organizational decision-making. Sustaining GRC activities can require substantial specialist time and resources to collect, integrate, and interpret relevant information, while delays and fragmentation may reduce information timeliness and completeness and affect decision quality. The present study proposes a conceptual AI-enabled GRC layer built on existing DTs. Organized into operational, tactical, and strategic sublayers, it applies a recurring sense-simulate-decide-act-reassess cycle with feedback within and between levels, within approved authority limits, while preserving traceability from normative sources and organizational context through approved internal arrangements and configured elements to decisions, actions, outcomes, evidence, and reassessment. The proposed mechanisms are expected to reduce information-integration effort and support more timely and better-informed decisions. The main contribution is a multilevel GRC architecture connecting strategic direction, tactical coordination, and operational execution while preserving human authority, organizational accountability, and normative traceability.
.png)
.png)
