Philippine enterprises are navigating one of the most demanding regulatory environments in Southeast Asia. BSP's evolving AI governance expectations, the SEC's CASP dual-oversight regime, AFASA, the Konektadong Pinoy Act (RA 12234), and the National Cybersecurity Plan 2023–2028 are all in motion simultaneously. Manual GRC cannot keep pace — and organizations that treat this as a…
Most organisations preparing for Provision 29 have controls frameworks in place. The problem is that those frameworks were built for a different purpose. Spreadsheets, disconnected tools, and siloed risk and audit data were never designed to support a formal board declaration, and the fragmentation that was once just inefficient is now a genuine governance liability. The first…
Malaysian enterprises are navigating one of the most demanding regulatory environments in Southeast Asia. Bank Negara Malaysia's Risk Management in Technology (RMiT) framework and its sharpening expectations on AI governance, the Securities Commission's evolving digital asset and capital markets oversight, the long-anticipated modernization of the PDPA, NACSA's National Cybersecurity Policy, and the accelerating pace of…
A blueprint for business-integrated, agile, and context-aware risk and resilience programs, built for organisations that can no longer afford to leave resilience to chance. Four parts. One blueprint for built-in resilience. A working session — not a lecture. You leave with a drafted governance model, a lifecycle map, and a business case tailored to your organisation.…
The future of enterprise risk management is intelligent, connected, and adaptive. This session introduces GRC 7.0 – GRC Orchestrate, the next evolution of governance, risk, and compliance. We will explore how Digital Twins of the enterprise—virtual models of organizational processes, systems, and third-party ecosystems—can simulate risk scenarios, identify vulnerabilities, and support resilient planning. Combined with…
