Events

Today’s organizations operate in an extended enterprise, a complex web of third-party relationships that directly impact performance, compliance, and reputation. Yet many organizations still manage third-party risk through disconnected processes, manual workflows, and siloed systems, limiting visibility and making it difficult to respond to change. The reality is that third-party risk doesn’t stop at onboarding.…

Continue reading Governing the Extended Enterprise: Modernizing Third-Party Risk for a Dynamic World

In today’s digital enterprise, identity governance is no longer just a compliance exercise—it underpins operational continuity, financial integrity, and stakeholder trust. Yet traditional identity and access governance models often operate as fragmented, periodic controls that struggle to keep pace with cloud ecosystems, AI-driven workflows, and non-human identities. Join GRC 20/20 founder Michael Rasmussen, globally recognized…

Continue reading From Compliance to Confidence: Modern Identity Governance and Risk Management

Event details  Most organisations are being pulled in two directions. Boards want clearer accountability, faster insight, and confidence that controls are actually working. At the same time, risk and assurance teams are expected to deliver more, often with leaner capacity and higher scrutiny. In this session, we’ll unpack what’s changing in the market, and what…

Continue reading Risk & Assurance at a Crossroads: What’s Changing and What “Good” Looks Like with Micheal Rasmussen, GRC20/20

Blueprint for Risk & Internal Control Effectiveness Under Provision 29 The implementation of Provision 29 under the UK Corporate Governance Code marks the most significant shift in UK risk and control expectations in over a decade, and organisations that treat it as a mere compliance exercise will fall short. In this webinar, globally recognised GRC…

Continue reading UK Corporate Governance Code by Design

For something called Governance, Risk, and Compliance, the industry spends most of its energy on compliance. Risk is the reason these programs exist, yet it remains the hardest thing to define, measure, and operationalize. Most organizations have risk registers, risk assessments, and risk scores, and still cannot confidently answer the simplest question their board will…

Continue reading The Missing Letter in GRC: Why We Manage Controls but Still Struggle to Manage Risk

Event details  Risk and assurance becomes strategic when it runs in the same rhythm as performance. In too many organisations, strategy lives in one place, performance reporting in another, and risk and assurance sit off to the side, producing activity, not insight. The result is familiar: leadership gets reports, but not a clear line of…

Continue reading The Golden Thread in Practice: Turning Risk & Assurance into Performance Management with Micheal Rasmussen, GRC20/20

Financial risks are evolving faster than traditional audit and monitoring approaches can keep pace. As organizations face increasing complexity, regulatory scrutiny, and uncertainty, periodic reviews alone may leave critical risks and control gaps undetected. Join Michael Rasmussen, one of the industry’s leading voices on governance, risk, compliance, and assurance, as he explores how organizations are…

Continue reading Building Resilient Financial Risk Oversight in an Era of Constant Change

Most organisations preparing for Provision 29 have controls frameworks in place. The problem is that those frameworks were built for a different purpose. Spreadsheets, disconnected tools, and siloed risk and audit data were never designed to support a formal board declaration, and the fragmentation that was once just inefficient is now a genuine governance liability. The first…

Continue reading Provision 29: From Limping Along to Board-Ready