#RISK Europe 2026, LONDON

#RISK Expo Europe 2026

November 10–11, 2026 | ExCeL London | London, United Kingdom

#RISK Expo Europe 2026 is a large, cross-functional conference and exhibition for professionals working across governance, risk management, compliance, information security, operational resilience, internal audit, financial crime, privacy, third-party risk, and related disciplines. Organized by GRC World Forums and Emerald, the event brings together senior practitioners, business leaders, technology providers, advisers, and policymakers to examine how organizations can respond to increasingly interconnected regulatory, operational, technological, and geopolitical risks.

Unlike events focused on a single professional discipline, #RISK is designed around the intersections between different areas of GRC and risk. Its agenda recognizes that cybersecurity, regulatory compliance, third-party dependencies, human behavior, financial crime, resilience, and technology governance cannot be managed effectively in isolation. The 2026 conference includes dedicated content stages covering information security, banking, financial services and insurance, and broader GRC topics, supported by workshops, breakout discussions, live demonstrations, and an extensive exhibition.

Key areas of discussion are expected to include:

• Artificial intelligence governance, cloud security, ransomware, data protection, and security culture
• Operational resilience, board-level risk reporting, financial crime, fraud, and regulatory change
• Risk-led governance and the transition beyond checklist-oriented compliance
• Third-party, supplier, procurement, and supply-chain risk
• Business continuity, crisis management, incident response, and protective security
• Emerging GRC, RegTech, cybersecurity, privacy, and risk technology

The organizers anticipate more than 100 exhibitors and partners, over 300 speakers, more than 50 themes, and at least 10 workshops, breakout sessions, and live demonstrations. This combination of educational programming and a substantial technology exhibition allows attendees to move from strategic discussions into practical exploration of the platforms, services, and methods available to address specific organizational challenges.

For attendees, #RISK provides opportunities to:

• Gain insight into emerging risks, regulations, technologies, and professional practices
• Hear practical experiences and case studies from risk, compliance, audit, security, and resilience leaders
• Compare approaches with peers from regulated and risk-intensive industries
• Explore GRC, RegTech, security, privacy, and risk-management technologies
• Participate in workshops, panels, demonstrations, and cross-functional discussions
• Build relationships with practitioners, advisers, technology providers, and other members of the European GRC community

The event is particularly relevant for organizations seeking to break down functional silos and develop a more coordinated approach to governance, risk management, compliance, security, and resilience. Attendees can use the two-day program to evaluate new ideas, identify potential technology and service partners, strengthen professional networks, and return to their organizations with practical approaches for improving decision-making and navigating a rapidly changing risk environment.

GRC 20/20 Attendee & Presenter . . .

If you ask my family what I do for a living, they might say that I “travel the world talking about risk.” And honestly, that wouldn’t be far from the truth. But the more formal introduction is that I am an analyst, researcher, storyteller, and, as the industry likes to remind me, the Father of GRC. More than 23 years ago, while at Forrester Research, I coined the acronym GRC and articulated it as a way to integrate governance, risk management, and compliance capabilities in strategy, process, and technology.

Today, through GRC 20/20 Research, I spend my days studying how organizations around the world navigate complexity and uncertainty. My job is to observe patterns, identify challenges, understand how strategy, process, and technology intersect, and help organizations evolve to be more effective, efficient, resilient, and agile. Along the way, I also founded GRC Report, a global news and insights platform focused entirely on governance, risk management, compliance, and business integrity news and insights around the world. It has become a place where practitioners, executives, policymakers, and technologists can see the GRC landscape through a global lens.

I also host two podcasts — Risk Is Our Business Podcast and Hitchhiker’s Guide to the GRC Technology Galaxy Podcast — because I believe conversation is one of the most powerful tools we have for changing how people think about risk and integrity. These podcasts allow me to explore big ideas with remarkable minds from around the world, and they keep me grounded in the reality that risk is not merely a function — it is the fabric of every decision and every ambition. In many ways, I am an explorer of uncertainty. As an industry analyst, I map and monitor the ever-expanding GRC galaxy — now tracking over 1,500 solutions and the professional services orbiting them. The universe of GRC is vast, dynamic, and constantly in motion, and I am endlessly fascinated by how organizations chart their course through it.

Conference Host . . .

#RISK, powered by GRC World Forums & Emerald is a premier collection of global events dedicated to exploring the multifaceted world of risk. From cybersecurity and data privacy to financial crime, regulatory compliance, and geopolitical uncertainties, #RISK provides a vital platform for professionals across industries to connect, learn, and build resilience in an increasingly complex and interconnected world.