Corporate Risk Management by Design: Navigating Provision 29 of the UK Corporate Governance Code, LONDON

Why attend

Provision 29 places a new onus on boards to attest to the effectiveness of risk management and internal controls—and to evidence that assurance. This full-day programme brings together internationally recognised GRC authority Michael Rasmussen, CRISAM GRC practitioners, and a real-world case from Nordex to show how to design governance, risk, and control systems that are practical, auditable, and embedded in day-to-day decision-making.

You’ll leave with a clear, actionable view of what Provision 29 requires in practice and how to operationalise it across your organisation.

What you’ll learn

• How Provision 29 changes expectations for risk and internal control effectiveness statements
• Design principles for a business-integrated risk and control framework
• Practical approaches to evidence, assurance mapping, and board reporting
• How to align risk/control processes with strategy, performance, and accountability
• Lessons from a global rollout of CRISAM GRC at scale

Who should attend

Board members and company secretaries • CROs, CFOs, COOs • Heads of Risk, Internal Audit, Compliance, and Internal Control • Enterprise Architects and Transformation Leaders • Risk and Control Owners

Your day at a glance:

Agenda

9:00–10:00 — Arrival, registration & coffee

10:00–10:30 — Welcome & opening remarks (CRISAM GRC)

10:30–11:15 — Nordex Case Study — Scaling CRISAM GRC Across a Global Organisation

11:30–13:00 — Michael Rasmussen WorkshopPart 1: Risk & Control by Design – The New Governance ImperativePart 2: Breaking Silos – Building a Federated & Business-Integrated Model

13:00–14:00 — Lunch & networking

14:00–16:30 — Michael Rasmussen WorkshopPart 3: The Risk & Control Lifecycle – From Identification to Integrated AssurancePart 4: Architecting for Visibility, Agility, and Accountability

16:30–19:00 — CRISAM GRC Ltd. Launch Party — networking

(Subject to minor adjustments.)

Speakers

• Michael Rasmussen — GRC strategist and analyst known for advancing “Risk Management by Design,” advising organisations worldwide on integrating governance, risk, and compliance.
• CRISAM GRC — Practitioners behind the CRISAM GRC platform and methodology for integrated risk and control management.
• Nordex — Guest presenters sharing insights from deploying CRISAM GRC across a global enterprise.

Outcomes you can take back to your organisation

• A structured blueprint for embedding Provision 29 in your risk and control framework
• A draft effectiveness statement template and example assurance map
• A practical checklist for board reporting and evidence readiness
• Implementation lessons from a large-scale CRISAM GRC rollout

Reserve your seat now and join us for a focused, hands-on day—and the CRISAM GRC Ltd. launch celebration.

---

GRC 20/20 Presenter . . .

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

As a leading provider for AI-supported GRC solutions and thanks to the unique user experience (UX), renowned companies from all industries rely on CRISAM.