Join us for an exclusive preview of preliminary findings from OCEG™'s comprehensive 2025 GRC Technology Strategy Survey, sponsored by Origami Risk, where GRC professionals shared their strategic priorities, technology adoption plans, and investment decisions for the coming years. Highlights Join us for an exclusive preview of preliminary findings from OCEG™'s comprehensive 2025 GRC Technology Strategy…
Join us as we explore how advanced analytics and risk quantification are delivering measurable benefits for organizations, from solid data foundations and process readiness to cutting-edge risk insights. Highlights Compliance and risk management isn’t just about avoiding pitfalls. It’s about creating advantage. Today’s leaders are asking critical questions: Where should we place our next bets?…
As financial institutions move from DORA compliance deadlines into a new phase of implementation and supervision, 2026 will mark a pivotal shift from proving readiness on paper to demonstrating it in practice. Regulators across Europe are already signaling heightened expectations for testing, third-party risk management, and cross-border operational resilience. Yet for many organizations, key challenges…
Join us to get ahead of AI and third-party risk, gain clearer risk oversight, and reduce risk blind spots. Highlights AI adoption is accelerating, but new research shows that most organizations still have major blind spots, especially around third-party AI exposure, unclear ownership of AI governance, and increasing board expectations for oversight. While many teams believe they’re prepared,…
Your risk and compliance environment changes constantly. AI, geopolitical, economic, operational, and security risks are top business priorities. The programs you’ve relied on may not be enough for this newly dynamic risk and compliance world. This webinar focuses on new approaches to GRC that will improve your programs – in 2026 and beyond. Join the GRC…
Join this webinar to learn the top Third-Party Risk Management trends for 2026 and how leading teams are preparing. Highlights As organizations rely more heavily on third parties, the risk landscape is shifting faster than many TPRM programs can adapt. In 2026, security, risk, and compliance leaders will need to navigate increasing regulatory pressure, growing…
For too long, GRC has been seen as the department of “no”—a necessary but reactive cost center. But as organizations face increasing security, regulatory, and AI-driven pressures, the companies that win in the next decade will be the ones that elevate trust from a compliance requirement to a competitive differentiator. In this session, Drata CISO…
Join Strike Graph CEO Justin Beals and renowned GRC analyst Michael Rasmussen for a strategic discussion on how AI is reshaping governance, risk, and compliance programs at scale. As security and compliance leaders face mounting regulatory pressures—from CMMC mandates to evolving frameworks like SOC 2 and ISO 27001—AI-powered automation is no longer optional. But deploying…
As operating environments become more volatile, leaders are under increasing pressure to demonstrate that risk management and resilience capabilities work in practice. Join iluminr founders Josh Shields and Marcus Vaughan for a conversation with GRC analyst and CEO of GRC 20/20, Michael Rasmussen, on how Capability Intelligence supports stronger assurance, oversight, and decision-making. Michael will…
Organizations no longer operate in isolation—they depend on a complex network of suppliers, outsourcers, agents, service providers, and partners. This extended enterprise amplifies both opportunity and exposure. In 2026, third-party risk has become one of the most critical dimensions of resilience, shaped by regulatory scrutiny, sustainability obligations, cyber dependencies, and geopolitical disruptions. This session will…
Risk and resilience programs frequently stall because they are managed in isolation: strategy in one conversation, risk registers in another, and operational recovery plans somewhere else entirely. Leading organizations structure risk and resilience differently. They treat it as an enterprise capability that supports leadership decisions, sharpens strategic objectives, and strengthens operational execution. In this webinar, Michael Rasmussen, The GRC Pundit…
Learning Objectives: For years, audit has been the primary entry point for many organizations adopting GRC technology. But the market is changing. Organizations increasingly need connected visibility across audit, compliance, cyber, internal control, and risk functions, rather than separate systems and siloed workflows. In this webinar, Michael Rasmussen will explore how the market is evolving…
Today’s organizations operate in an extended enterprise, a complex web of third-party relationships that directly impact performance, compliance, and reputation. Yet many organizations still manage third-party risk through disconnected processes, manual workflows, and siloed systems, limiting visibility and making it difficult to respond to change. The reality is that third-party risk doesn’t stop at onboarding.…
In today’s digital enterprise, identity governance is no longer just a compliance exercise—it underpins operational continuity, financial integrity, and stakeholder trust. Yet traditional identity and access governance models often operate as fragmented, periodic controls that struggle to keep pace with cloud ecosystems, AI-driven workflows, and non-human identities. Join GRC 20/20 founder Michael Rasmussen, globally recognized…
Event details Most organisations are being pulled in two directions. Boards want clearer accountability, faster insight, and confidence that controls are actually working. At the same time, risk and assurance teams are expected to deliver more, often with leaner capacity and higher scrutiny. In this session, we’ll unpack what’s changing in the market, and what…
Blueprint for Risk & Internal Control Effectiveness Under Provision 29 The implementation of Provision 29 under the UK Corporate Governance Code marks the most significant shift in UK risk and control expectations in over a decade, and organisations that treat it as a mere compliance exercise will fall short. In this webinar, globally recognised GRC…
For something called Governance, Risk, and Compliance, the industry spends most of its energy on compliance. Risk is the reason these programs exist, yet it remains the hardest thing to define, measure, and operationalize. Most organizations have risk registers, risk assessments, and risk scores, and still cannot confidently answer the simplest question their board will…
Event details Risk and assurance becomes strategic when it runs in the same rhythm as performance. In too many organisations, strategy lives in one place, performance reporting in another, and risk and assurance sit off to the side, producing activity, not insight. The result is familiar: leadership gets reports, but not a clear line of…
Financial risks are evolving faster than traditional audit and monitoring approaches can keep pace. As organizations face increasing complexity, regulatory scrutiny, and uncertainty, periodic reviews alone may leave critical risks and control gaps undetected. Join Michael Rasmussen, one of the industry’s leading voices on governance, risk, compliance, and assurance, as he explores how organizations are…
Most organisations preparing for Provision 29 have controls frameworks in place. The problem is that those frameworks were built for a different purpose. Spreadsheets, disconnected tools, and siloed risk and audit data were never designed to support a formal board declaration, and the fragmentation that was once just inefficient is now a genuine governance liability. The first…
