GRC 20/20 Research, LLC

SAI360 Global Connect Tour 2025, DALLAS
2025-06-04 00:00 - 2025-06-05 23:59 (America/Chicago)
REGISTER

We are excited to extend a personal invitation to you for our exclusive Global Connect Tour 2025 – next stop, Dallas!

Where: Marriott Dallas Uptown (Hotel room rate $259/night)

Dates: June 4-5, 2025

This event will begin with an intimate customer gathering in the heart of Dallas on day 1. Join us and network with other SAI360 customers, hear about their customer journeys, and meet key members of the SAI360 senior management team.

GRC 20/20 Analyst will be presenting at the event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Event Host

SAI360 is giving companies a new perspective on risk management. By integrating Governance, Risk, Compliance (GRC) software and Ethics & Compliance Learning resources, SAI360 can broaden your risk horizon and increase your ability to identify, manage, and mitigate risk. See risk from every angle.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

ProSight Governance, Compliance, and Operational Resiliency (GCOR) Virtual Conference
2025-06-09 00:00 - 2025-06-12 23:59 (America/Chicago)
REGISTER

The Velocity and Constancy of Change

In banking, change is constant. To keep pace, it’s essential to continually revisit your strategy, update your skills, and refresh your operations to get ahead of oncoming risks. At this conference, you’ll learn best practices from a community of your peers from across the industry on topics ranging from regulation to artificial intelligence to fraud. Industry leaders and expert guest speakers will share their real-world experience managing the challenges many risk and compliance professionals are facing.The conference features sessions tailored to the needs of large, regional, mid-tier, and community banks and credit unions. Attendees will gain valuable insight into how best to address risks, large and small, and safeguard their institutions.

Please note, many sessions will be CPE eligible, regulated per NASBA guidelines.

Developed by ProSight Councils and Committees

Thanks to the support of various ProSight councils (ORM, ERM, Mid-Tier, Community Bank) and committees (Compliance, Technology Risk, Third-Party Risk, Culture & Conduct), this conference has been built to help you find solutions to advance your practices, regardless of your institution asset size and maturity level.

In addition to trending governance, compliance, and operational resilience topics, our sessions will focus on top operational and enterprise risks:

Concentration Risk

Data Governance & Management

Enterprise Governance

Fraud

AI’s impact

Issues Management

Natural Disasters- Insurance Implications

Risk Appetite

Third-party Risk Management

Regulatory Priorities

Reputation Risk

Quantum Computing

And many more pressing developments and challenges

Why Attend?

Learn best practices on a wide array of topics. GCOR events are hosted by the financial industry’s leading experts and practitioners.

Earn CPE credits. Gather continuing professional education towards your accreditations and certifications.

Explore new tools and vendors.GCOR is partially sponsored by established and emerging vendors offering the latest risk management tools and systems.

Efficiency and convenience. Don’t pack your bags, 2025’s conference is being offered virtually. Attend live or watch the recordings at your leisure.

Stay current with what is happening in the industry. Content is sourced and guided by our councils of current chief risk officers and senior managers in banking.

GRC 20/20 Analyst will be presenting at the event . . .

AI in Risk and Compliance: Navigating Innovation and Oversight

Tuesday, June 10, 2025 4:00 PM to 5:00 PM · 1 hr. (America/New_York)

1.0 CPE Hour(s) l 1.0 CEU(s)

As artificial intelligence (AI) becomes increasingly integral to business operations, organizations face the dual challenge of harnessing its potential while mitigating associated risks. This session brings together two leading experts in governance, risk, and compliance (GRC): Michael Rasmussen of GRC 20/20 Research and Renee Murphy of Verdantix. Together, they will explore the evolving landscape of AI in risk and compliance, offering insights into effective strategies for responsible AI adoption.

Learning Objectives:

Explore best practices, based on the NIST AI Risk Management Framework, for developing comprehensive AI governance structures that ensure ethical and legal compliance

Identify the implications of new regulations, like the EU’s Artificial Intelligence Act, and how to align organizational practices proactively

Define how to assess, monitor, and govern AI technologies across vendor ecosystems to ensure compliance and resilience

Evaluate the role of AI in improving risk identification and mitigation, taking into account both the benefits and challenges of AI-driven risk management tools

Michael Rasmussen will be presenting alongside Jimmy Lin of SAI360 and Renee Murphy of Verdantix

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Session Host/Sponsor

SAI360 is giving companies a new perspective on risk management. By integrating Governance, Risk, Compliance (GRC) software and Ethics & Compliance Learning resources, SAI360 can broaden your risk horizon and increase your ability to identify, manage, and mitigate risk. See risk from every angle.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

GRC Summit London 2025
2025-06-10 00:00 - 2025-06-12 23:59 (Europe/London)
REGISTER

What to Expect:

The GRC Summit, hosted by MetricStream, is a leading annual event that brings together top experts from government and business to explore the latest strategies in Governance, Risk, and Compliance (GRC). Join over 250 professionals to gain insights from thought leaders, engage in interactive discussions, and discover best practices in risk management, compliance, cyber risk, ESG, and more. Elevate your GRC programs and learn how to transform risk into a strategic advantage.

Explore MetricStream’s Products and Solutions In-Depth.

Learn from Global Thought Leaders and Experts.

Engage Deeply in Our Interactive Workshops.

Gain Insights from Real-World GRC Case Studies.

Access Exclusive Insights from Keynote Presentations.

Stay Ahead of Evolving Compliance Requirements.

Keep Up-To-Date with The Latest Trends in GRC.

Network with Top Industry Professionals.

Connect around operational resilience, risk management, compliance, cyber risk, ESG and much more. Move beyond just managing risk to embracing and ultimately thriving on risk.

GRC 20/20 Analyst will be presenting at the event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Event Host

MetricStream is a global SaaS leader of GRC solutions that empower organizations to thrive on risk by accelerating growth via risk-aware decisions. We connect governance, risk management and compliance across the extended enterprise. Our ConnectedGRC and three product lines – BusinessGRC, CyberGRC, and ESGRC – are based on a single, scalable platform that supports you wherever you are on your GRC journey. MetricStream is headquartered in San Jose, California, with an operations and R&D center in Bangalore, India, and sales and operations support around the globe.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Risk and Resilience by Design: Building the Future-Proof Enterprise, LONDON
2025-06-10 13:00 - 17:30 (Europe/London)
REGISTER

In today’s dynamic business environment, where disruptions are becoming more frequent and unpredictable, risk and resilience must be built by design, not by reaction. Organizations that embed resilience into their core business strategy—rather than treating it as a reactive, compliance-driven exercise—are better equipped to navigate operational, cyber, and supply chain risks. This requires a shift from traditional risk management approaches to proactive, integrated frameworks that align risk, resilience, and performance objectives. By leveraging AI, automation, and real-time data analytics, businesses can anticipate threats, monitor risks dynamically, and continuously strengthen their resilience posture. The key to future-proofing operations lies in creating a resilience roadmap that not only mitigates risks but enables businesses to thrive in the face of uncertainty.

Key Takeaways:

Why risk and resilience by design is essential for sustainable business growth in a dynamic risk landscape

How to embed resilience into business strategy and critical business processes from the outset

The role of AI, automation, and analytics in enabling proactive risk monitoring and decision-making

Best practices and lessons learned from industry leaders to build a measurable, future-proof resilience roadmap

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host

MetricStream is a global SaaS leader of GRC solutions that empowers organizations to thrive on risk by accelerating growth via risk-aware decisions. They connect governance, risk management and compliance across the extended enterprise.

Their ConnectedGRC and three product lines – BusinessGRC, CyberGRC, and ESGRC – are based on a single, scalable platform that supports you wherever you are on your GRC journey. MetricStream is headquartered in San Jose, California, with an operations and R&D center in Bangalore, India, and sales and operations support around the globe. More information is available at www.metricstream.com.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Supplier Risk Resolution: Monitor and Manage Risk at the Scale of Your Supply Chain, COPENHAGEN
2025-06-17 13:00 - 16:00 (Europe/Copenhagen)
REGISTER

Join us for an in-person workshop with fellow Procurement and Supplier Risk professionals. You will gain a best-practice perspective on third-party risk management; from information to action.

Guided by respected Analyst Michael Rasmussen, you will explore stakeholder-sensitive ways to align risk controls and reporting with strategic priorities. All backed by a demonstrable ROI; commercially and in support of broader objectives.

You will discuss a range of assessment, monitoring and remediation techniques designed to safeguard your business effectively. Whatever your existing level of risk visibility and data management, you will hear how other companies incorporate continuous controls into supplier workflows.

Learn how to clarify your risk goals, identify data requirements, communicate with stakeholders, monitor emerging concerns and address compliance gaps efficiently at the scale of your supply chain. Supported by reporting that reflects your business objectives.

Agenda

Part 1: Supplier Risk Management by Design

Why risk management matters, how companies get it wrong and ways Procurement can lead the way in supplier GRC.

Why supplier risk management matters for Procurement

Suppliers in disarray: how companies mismanage third parties (and why they’re exposing themselves to risk)

Current drivers & trends pressuring companies in third party management

Procurement’s role in governance, risk management, and compliance

Part 2: The Blueprint for Effective Risk Resolution

A best-practice look at defining your risk strategy, engaging your stakeholders, aligning to objectives and planning for success.

Blueprint for effective risk resolution

Assemble your supplier risk committee: aligning stakeholders around effective controls

Develop your supplier risk charter: defining a structure to govern third party relationships

Plan for success: document your processes to deliver strategic risk management

Part 3: Managing Suppliers and their Data

Great data management is at the heart of supplier risk oversight. Explore actionable ways to keep up-to-date risk visibility central to your data strategy.

Managing suppliers from onboarding to offboarding

Risk-aware supplier identification & onboarding

Continuous monitoring of evolving risks

Communicating with suppliers to maintain risk controls

Objective-driven metrics & reporting

Supplier re-evaluation and offboarding

Part 4: Using Technology to Resolve Risks at Scale

Enable your strategy by selecting a solution that directly supports your goals, then assemble a value-driven business case that aligns with broader priorities.

The power of technology-enabled oversight

A blueprint for managing supplier information (with risk at its core)

Types of supplier risk data and how they can be integrated into your processes

Components and requirements for supplier information architecture

The broad range of technology available (and what best serves your business)

Building your business case: articulating the value of supplier risk management

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host/Sponsor

apexanalytix revolutionized recovery audit with advanced analytics and the introduction of firststrike overpayment and fraud prevention software. Today, apex also leads the world in supplier management innovation with apexportal and smartvm, now the most widely used supplier onboarding and compliant master data management solution in global procure to pay processes. With over 250 clients in the Fortune 500 and Global 2000, apex is dedicated to providing companies and their suppliers with the ultimate supplier management experience. To support our commitment to innovation, we have built a highly experienced team of associates in key markets around the globe. Together we value performance, honor a diversity of perspectives, experiences and cultures, nurture candor, give back to the communities where we live and work, and have fun working together. For more information, visit www.apexanalytix.com or join our LinkedIn apexanalytix Community.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Agility 2025 UK by LogicGate, London
2025-06-18 00:00 - 23:59 (Europe/London)
REGISTER

Koin us this year at Agility 2025 to discover innovative solutions to GRC’s biggest challenges, learn from the people driving our industry forward, and uncover real-world use cases that can grow and mature your GRC programs.

Agility is LogicGate’s annual conference where they bring together industry leaders and like-minded professionals in risk, cybersecurity, and compliance management to explore the industry’s most critical topics.

Discover innovative solutions to GRC’s biggest challenges, learn from the people driving our industry forward, and uncover real-world use cases that can grow and mature your GRC programs.

Join us at Agility 2025 to discover innovative solutions to GRC’s biggest challenges, learn from the people driving our industry forward, and uncover real-world use cases that can grow and mature your GRC programs.

EXPLORE. Keynotes explore industry-specific content that matters to you and your organization’s challenges.

CONNECT. Network with industry leaders within the audit, risk, and cybersecurity space during the event.

LEARN. See new innovations , get your questions answered, and learn how your peers execute.

CPE CREDITS. Your attendance may earn professional development credits at the same time.

Join us at a unique and exciting venue at Lord’s Cricket Ground for a day of insightful sessions and networking.

GRC 20/20 Analyst Presenting at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

LogicGate offers modern risk management technology empowering businesses to proactively transform risk enterprise-wide. Because risk is a team sport, we created the Risk Cloud Platform® — the most nimble and collaborative GRC solution out there. Rapidly adapt to changing business conditions. Confidently innovate and build new processes as you go. Collaborate on risk across your entire organization. Risk Cloud® gives you an interconnected view of risk across the organization that you just can’t get from point solutions. After all, great companies are built not by avoiding risks — but by choosing the right ones.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Compliance & Ethics Management by Design, LONDON
2025-06-19 12:00 - 18:30 (Europe/London)
REGISTER

GAN Integrity invites you to connect with your peers for an interactive workshop led by Michael Rasmussen, GRC 20/20 Analyst. This session is dedicated to exploring cutting-edge compliance and ethics management strategies in today’s dynamic regulatory and risk environment, with actionable insights into leveraging technology and AI to drive integrity and efficiency.

Why Attend?

Organizations today face a complex and ever-changing landscape of ethical, regulatory, and legal challenges, compounded by rapid business evolution and the transformative impact of AI. Traditional compliance programs often fall short in meeting the expectations of boards, stakeholders, and regulators.

This workshop equips attendees with practical strategies and frameworks to address these challenges and drive meaningful organizational improvements.

Attendees will be able to take back to their organization’s approaches to:

Master effective compliance management by defining ownership, ensuring process consistency, and building a full compliance lifecycle.

Leverage AI as a force for good to enhance compliance and ethics programs while navigating common challenges and pitfalls.

Drive agility and resilience by balancing innovation with compliance requirements and facilitating ongoing monitoring.

Strength communication and accountability across employees, stakeholders, regulators, and boards to deliver strong governance and assurance.

Track, measure and resolve compliance activities through critical workflows, task management, and performance metrics.

Agenda

Part 1: Why Compliance Matters

Compliance in Disarray: how organizations mismanage compliance

Compliance Exposure: how mismanaged compliance expose the organization to risk

Current drivers & trends pressuring organizations in compliance management

Different ways organizations approach compliance management

What Effective Compliance Management Achieves: Compliance role in governance, risk management, and compliance

The role of Compliance in AI Governance

Part 2: The Blueprint for Effective Compliance

Compliance Governance Committee: bringing together the range of compliance management roles and responsibilities in the organization

Compliance Management Charter: defining a structure to govern compliance across the organization

How to Develop a Compliance Management Strategic Plan

Part 3: Compliance Management Lifecycle

Compliance obligation identification

Ongoing compliance and business context monitoring

Compliance communications & attestations

Compliance monitoring & assessment

Employee engagement in compliance and ethics

Third-party risk management and compliance’s role

Compliance forms & approvals

Compliance metrics & reporting

Compliance evaluation, benchmarking & assurance

Part 4: Compliance Management Architecture

Types of compliance management information and how it integrates into compliance processes

Components and requirements for a compliance information architecture

Kinds of compliance management technologies and what best serves the organization

Capabilities and requirements of compliance management platforms

Compliance Management Business Case: Articulating the Value of Effective Compliance Management

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host/Sponsor

GAN Integrity gives compliance teams a better way to do their good work. With a flexible platform that unifies compliance, ethics, and third-party risk management across the enterprise, coupled with deep domain expertise, we make it easy for compliance teams to see everything, adapt to anything, and get all the help they need. That’s why leading companies worldwide — from manufacturing to energy to financial services — rely on GAN Integrity.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Corporate Risk Minds 2025
2025-06-23 00:00 - 2025-06-24 23:59 (Europe/Berlin)
REGISTER

Focus on risk management!In times of war, inflation and staltering supply chains, risk management has a duty to get your own company through the storm with a sense of proportion and direct it into calmer waters. To keep up with the pace of current transformations and crises, many organizations need to modify their risk management. Take a look at the risk and compliance trends and their potential impact on how organizations handle all aspects of a robust risk management process and how an effective risk management program can provide a competitive advantage for their company. For 13 years, Corporate Risk Minds, the largest industry meeting on the subject of risk management, is back for you in Berlin – the conference for decision-makers from medium-sized and large companies as well as hidden champions. A unique mix of case studies and discussion formats on strategic and operational challenges of risk management in industrial companies offers you and more than 480 participants the platform for exchange, networking and learning! Don’t miss the opportunity to meet your colleagues under one roof.We look forward to welcoming you in Berlin!

GRC 20/20 Analyst Presenting at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Baird's GRC Networking and Content Reception
2025-06-25 18:00 - 22:00 (Europe/London)
INVITE ONLY

The evening is designed to bring together a range of players of varying scale and sub-vertical focuses (for example – Supply Chain, RegTech, ESG / ESHQ and GRC Technology) to create new networking connections and, if relevant, explore potential opportunities for collaboration in an informal setting. Baird will be hosting a panel discussion on the theme of De-regulation and its impact on GRC vendors (along with some good food and drinks).

GRC 20/20 Analyst Participating at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Seminar Host

Since 1919, Baird has guided families, businesses, communities and institutions toward their financial goals. Being privately held enables us to prioritize long-term planning and investment – for our clients and the firm – without having to weigh those against the quarterly expectations of outside shareholders. Today Baird offers wealth management, investment banking, asset management, fixed income and equity sales and trading, equity research, public finance and private equity services. This balance of cyclical and counter-cyclical businesses provides financial strength and stability across market environments and enables us to consistently reinvest in our ability to serve clients. We manage or oversee more than $455 billion in client assets and employ more than 5,200 Associates around the world. And, because nearly 80% of our associates are Baird stockholders, you can trust we all share a personal stake in your success. For more than 20 consecutive years, Baird has been one of the FORTUNE 100 Best Companies to Work For®, making us a workplace of choice for some of the most talented, passionate people in financial services. It also enables us to emphasize cultural compatibility in those we hire, many of whom stay their entire careers. All of this helps ensure the quality and consistency of our advice for clients and the timeless values that make the Baird Difference every day for our clients, our Associates and the communities we share.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

#RISK North America 2025, NEW YORK CITY
2025-07-09 00:00 - 2025-07-10 23:59 (America/New_York)
REGISTER

Join us at #RISK New York July 9-10, 2025, at Fordham Law School, for a two-day deep dive into the latest trends and challenges in Governance, Risk & Compliance (GRC), AI, Privacy, security and more!

#RISK New York provides a platform for organizations to address the cumulative nature of risk, unite disparate GRC specialists, amidst a compelling ‘deep dive’ agenda led by subject matter experts and thought leaders. This is your opportunity to connect, learn, prepare and gain insights from real-world examples and case-studies… Join us in New York, July 9-10, 2025.

Benefits of Attending

Deep Dives into Critical Topics. Gain in-depth knowledge on areas like, operational risk, financial risk, regulatory risk and emerging threats like AI-related risks.

Expert-Led Sessions and Panels. Learn from industry veterans and renowned risk & GRC professionals through interactive sessions, case studies, and insightful panels.

Unparalleled Networking Opportunities. Connect with peers, build valuable relationships, and exchange insights with leading risk practitioners.

Sharpen Your Skillset. Enhance your understanding of risk frameworks, methodologies, and best practices.

Stay Ahead of the Curve. Gain insights into emerging trends and regulatory changes that will impact your risk landscape.

Keynote & Host Michael Rasmussen

Michael Rasmussen

Michael Rasmussen is an internationally recognized thought leader and pioneer in governance, risk management, and compliance (GRC). With over 30 years of experience, he has extensive expertise in enterprise GRC strategy and processes supported by robust information and technology architectures. Known as the “Father of GRC,” Michael was the first to define and model the GRC market in February 2002 while at Forrester, setting the foundation for the modern understanding of GRC.

About GRC World Forums

Our in-person events and livestream experiences provide learning, networking and benchmarking opportunities to governance, risk and compliance professionals.

For speakers & contributors we provide a platform and global audience.

For viewers, attendees and readers our content provides invaluable insight and analysis.

For vendors we optimise every stage of the ‘marketing funnel’

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

2025 State of the GRC Market: Hitchhiker’s Guide to the GRC Galaxy
2025-07-21 10:00 - 12:00 (America/Chicago)
Don’t Panic. But also — don’t forget your towel.

The GRC market for solutions and services has become its own galaxy: vast, confusing, filled with unexpected threats, and occasionally prone to entire segments being destroyed to make way for regulatory hyperspace bypasses. For those trying to navigate this expanse — whether you’re a risk manager, compliance officer, technology buyer, or investor — the 2025 Hitchhiker’s Guide to the GRC Galaxy is your essential orientation briefing.

It’s no longer just GRC vs. RegTech vs. RiskTech; it’s an ecosystem of over 600 solutions that GRC 20/20 actively maps and monitors. Some are sleek, interstellar platforms trying to span the enterprise; others are best-of-breed asteroids tackling highly specific use cases like AI ethics, ESG disclosures, or third-party risk intelligence. GRC 20/20 covers:

68 vendors covered in deep and rigorous analysis — including client feedback, technical evaluations, and market differentiation.

345 more are monitored loosely.

A few hundred others orbit at the edges — niche, emerging, or narrowly scoped, but relevant to the expanding universe of governance, risk, and compliance.

And yes, some of these solutions feel like they were designed by the Vogons themselves: overcomplicated, bureaucratic, and liable to blow up your budget without warning.

A New Era of Market Segmentation & GRC 7.0

In this 2025 research briefing, we boldly go beyond old taxonomies to unveil a completely new GRC market segmentation framework — one that actually makes sense in today’s interplanetary chaos of compliance, risk, and organizational complexity.

We’ll also unveil GRC 7.0: GRC Orchestration — the next evolutionary stage in the GRC lifecycle. Where GRC 6.0 focused on business integration and no-code agility, GRC 7.0 is about real-time coordination. Orchestration aligns fragmented data, systems, and stakeholders into a single, responsive engine that helps you reliably achieve objectives, address uncertainty, and act with integrity — even when the Galactic Civilizations of Regulation unexpectedly change course. It leverages agents AI to deliver on business integrated GRC, it leverages digital twins for risk and regulatory change scenario modeling, and so much more.

The Risk of Doing Nothing (or of Ignoring the Imminent Arrival of a Bureaucratic Constructor Fleet)

If your current GRC program relies on spreadsheets, static policy portals, or the hope that regulators won’t notice the gaps in your third-party risk assessments — now might be the time to read the small print on interstellar demolition orders.

Geopolitical risk is shifting faster than hyperspace travel. Regulations evolve while you’re still printing last quarter’s compliance reports. AI governance, ESG accountability, and data privacy are no longer fringe concerns — they’re core business issues with real-time implications. Your business is expanding; your risk perimeter is dissolving; and your stakeholders are expecting insight, not excuses.

This is the now-or-never moment. Organizations that act can harness GRC as a strategic, forward-looking capability. Those that don’t may soon find themselves metaphorically (or literally) vaporized.

What You’ll Learn (besides the answer to life, the universe, and everything)

How the GRC market has expanded, shifted, and converged across 600+ solutions

A first look at GRC 20/20’s 2025 segmentation framework and taxonomy refresh

A deep dive into the rise of GRC Orchestration — GRC 7.0 — and what it means for your organization

Key trends by geography, industry, buyer role, and organization size

RFP and inquiry intelligence from 2024 and into 2025 — what buyers are asking for and why

Where the market is heading and what matters most to buyers in 2025

Who Should Attend

This briefing is your towel for the GRC galaxy. It’s designed for:

Executives and risk leaders scoping or scaling GRC strategy and technology

GRC technology and service providers trying to position and compete

Investors analyzing the ever-expanding market

Curious minds who understand that when it comes to risk, the worst strategy is hoping the Vogons will just go away

Cost & Access

GRC Advisor Subscribers

Included for all employees; log in under your account to register free.

Individual Access

Pre-Event (before July 13): $495

Post-Event (after July13): $595

Group Access (All Employees)

Pre-Event (before July 13): $995

Post-Event (after July 13): $1095

Outline: 2025 GRC Market Research Briefing

I. GRC Defined — Past to Present

GRC 1.0 through 6.0

Introduction of GRC 7.0 – Orchestration

II. The New GRC Taxonomy

Enterprise Platforms vs. Domain-Specific Solutions

Emerging Cross-Domain Categories

The Interstellar Index of GRC Sub-Segments

III. Trends, Drivers & Disruption

Velocity of Risk: From Cyber to Sanctions

Regulation on the Move: ESG, AI, Privacy

Business Complexity & the Extended Enterprise

Inquiry & RFP Insights

IV. Market Segments Deep Dive

Enterprise GRC Platforms

Strategy & Performance Alignment

Risk & Resilience

Compliance & Obligation Management

Audit, ESG, Ethics, Controls, Incidents, and more

Domain-Specific GRC (AI, IT, HR, Finance, Legal, Privacy, Quality, Health & Safety)

In short, if you’re trying to make sense of the GRC universe — or avoid being unceremoniously flattened by an interstellar compliance audit — this is the guidebook you need. Hitch a ride with GRC 20/20 and get the clarity, structure, and foresight your organization needs in 2025.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Connected Compliance: Aligning Risk, Resilience, and Integrity
2025-07-22 10:00 - 11:00 (America/Chicago)
REGISTER

Join us for a practical discussion on how to evolve your compliance program into a strategic enabler, and how connected compliance enhances resilience, uncovers risk insights faster, and builds trust across stakeholders.

Highlights

Learn how to break down silos between risk, compliance, audit, and legal

Discover ways to link compliance outcomes to organizational resilience and strategy

Discover real-world examples of connected compliance in action

Learn steps to assess and mature your program using the GRC Capability Model

In today’s rapidly evolving risk landscape, compliance programs can no longer operate in silos. To effectively protect the organization and drive performance, leaders must embrace a connected approach—one that integrates compliance into enterprise risk management, business continuity, and organizational integrity.

Join us for a practical discussion on how to evolve your compliance program into a strategic enabler. We’ll explore how connected compliance enhances resilience, uncovers risk insights faster, and builds trust across stakeholders. Learn how forward-thinking organizations are aligning people, processes, and platforms to manage uncertainty and embed integrity into every decision.

SPEAKER:

Laura Jacobus, Strategic Advisor, Mitratech

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor

Mitratech is a trusted, global technology partner empowering corporate legal, risk & compliance, and HR professionals to maximize productivity, control expense, and mitigate risk by deepening operational alignment, and increasing collaboration & visibility across their organization. With Mitratech’s proven portfolio of end-to-end solutions, organizations worldwide are able to proactively identify and implement best practices and standardize processes across all lines of business to manage risk and ensure business continuity. Mitratech partners with more than 10,000 companies worldwide, from small nimble teams needing tech-enablement, to the largest organizations in the world trying to centralize, streamline and collaborate across their legal and risk functions. Mitratech’s user base spans more than 160 countries. Innovate now by visiting: www.mitratech.com

Webinar Host

OCEG (formerly the Open Compliance and Ethics Group) is a global, nonprofit think tank and community. We inform, empower, and help advance our 120,000+ members on governance, risk management, and compliance (GRC). Independent of specific professions, we provide resources, education, and certifications to drive leadership and strategy through the application of the OCEG GRC Capability Model™ and Principled Performance®. An OCEG differentiator, Principled Performance enables the reliable achievement of objectives while addressing uncertainty and acting with integrity. Our members include c-suite, executive, management, and other professionals from small and midsize businesses, international corporations, nonprofits, and government agencies. Founded in 2002, OCEG has locations around the globe.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

The Risk Factor: Why AI Belongs at the Center of ERM Strategy
2025-07-31 11:00 - 12:00 (America/New_York)
REGISTER

Emerging risks are rising fast—but most traditional ERM strategies weren’t built for today’s pace. From surfacing risk signals sooner to interpreting shifting stakeholder sentiment, AI is unlocking new ways to strengthen enterprise resilience. If you’re evaluating how emerging technologies fit into your risk strategy, this session explores why AI should be at the core of the modern ERM function.

Join us to hear insights from Michael Rasmussen, GRC Analyst and Pundit at GRC 20/20 Research and Hardik Mehta, Global Head of Risk & Statutory Compliance at J.P. Morgan Chase along with our host Chris Shaw, SVP of Risk Solutions at Signal AI, for a thought-provoking conversation on how AI is reshaping the future of enterprise risk.

Why you can’t miss this webinar:

Discover where AI fits into a modern ERM framework

Hear how risk leaders are thinking about real-time risk intelligence

Explore how tech can bridge gaps in fragmented risk functions

Register now to explore how artificial intelligence and machine learning are being used to detect, analyze, and mitigate emerging risks before they escalate.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Signal AI, a Reputation and Risk intelligence company, helps businesses make sense of the outside world. Using the proprietary AI-powered External Intelligence platform, organizations can spot critical signals in the external noise, allowing them to get ahead of risk and opportunity and make confident decisions. Our platform crunches huge amounts of information from the world’s content and provides timely insight into trends, patterns, and unknown unknowns to help business leaders make more informed decisions. Signal AI serves over 40% of the Fortune 500, including Deloitte, Google, and Spotify, and is building an innovative, inclusive, and enduring company to transform the way businesses make decisions.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Turning GRC and Audit into Strategic Advantage
2025-08-13 14:00 - 15:00 (America/New_York)
REGISTER

This webinar explores why checkbox compliance is no longer enough—and how it can create a false sense of security. Join industry experts from Compyl, 360 Advanced, and Michael Rasmussen as they discuss how aligning a mature GRC program with a strategic audit partner leads to real risk reduction and long-term value.

We will cover:

The risk of relying on checkbox frameworks and how they leave gaps in your real-world security posture

Why today’s audits should inform strategic decisions, not just verify controls

How GRC platforms and audit firms can work in sync to surface meaningful data, uncover blind spots, and guide long-term success

What executive stakeholders actually want to hear when you say you’re “compliant”

WHERE

This is a virtual webinar. After you register, you’ll receive a private access link via email to join the session on Wednesday, August 13th at 2:00 PM EDT.

WHY

Attendees will walk away with a clearer understanding of why checkbox compliance falls short—and how to build a GRC program that truly supports security, risk reduction, and business goals. You’ll also learn how partnering with the right audit firm can bring strategic insights to your organization, turning audits from a burden into a competitive advantage.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

We believe cyber risk management has evolved from an IT problem into a business problem. Because of this shift, security executives must adapt how they communicate risk to the board. But since risk is hard to frame in the context of a business initiative, security executives need help putting risk into business terms that the board can use to make informed, strategic decisions to drive growth. Additionally, security teams are often seen as the team that says “no”, shutting down projects and initiatives due to risk, which limits growth and results in missed opportunities. At ZenGRC, we aim to make risk management more strategic, pulling it up from tactical “check-the-box” work to something more valuable to both the company and the security team. There’s an opportunity for security executives to go beyond just protecting their company and secure their role as a more valuable, strategic member of the team. We can help by giving them the business context they need to report risk to their board in a way that is easy to understand and act upon.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Federal Data Confidence and Regulatory Assurance Webinar
2025-08-14 13:00 - 14:00 (America/New_York)
REGISTER

Is FedRAMP compliance a requirement for you? Join industry premier experts to discover whether your GRC program meets the same rigorous federal data classification requirements that regulators demand from your organization. Learn how to eliminate compliance blind spots and align with evolving standards like Executive Order M-24-15 and FedRAMP 20x initiatives.

Speakers

Jon Leitner, Chief Revenue Officer, ZenGRC

Michael Rasmussen, GRC Pundit & Analyst, GRC 20/20, GRC Report

Michael Parisi, CGO, Steel Patriot Partners

Mike Schreiner, COO, Paramify

Dr. Stephanie Carter, Federal Service Lead, Insight Assurance

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

We believe cyber risk management has evolved from an IT problem into a business problem. Because of this shift, security executives must adapt how they communicate risk to the board. But since risk is hard to frame in the context of a business initiative, security executives need help putting risk into business terms that the board can use to make informed, strategic decisions to drive growth. Additionally, security teams are often seen as the team that says “no”, shutting down projects and initiatives due to risk, which limits growth and results in missed opportunities. At ZenGRC, we aim to make risk management more strategic, pulling it up from tactical “check-the-box” work to something more valuable to both the company and the security team. There’s an opportunity for security executives to go beyond just protecting their company and secure their role as a more valuable, strategic member of the team. We can help by giving them the business context they need to report risk to their board in a way that is easy to understand and act upon.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Riding the Compliance Carousel: Managing Emerging Regulatory Risks & New Rules, LONDON
2025-09-03 14:00 - 18:30 (Europe/London)
REGISTER

Riding the Compliance Carousel: Managing Emerging Regulatory Risks & New Rules.

Join GRC expert, Michael Rasmussen and Corlytics for an exclusive workshop designed for compliance and risk executives, addressing the growing challenges of regulatory complexity. Discover actionable strategies and best practices for identifying, assessing, and implementing effective compliance frameworks in today’s fast-changing environment. The workshop will highlight the critical role of technology and AI in streamlining compliance management and enhancing organisational agility.

Who’s attending?

Risk and compliance leaders from a wide range of financial services industries, including G-SIFI, Banks, Asset Management, Insurance, and Payments, will attend the workshop.

Location

London, Wednesday 3 September 2025 2pm – 6:30pm

Register below if you would like to join this event

Agenda

2:00pmWelcome and IntroductionsTea & coffee available2:30pmPart 1: The Strategic Importance of Compliance & Regulatory Change ManagementTopics: understanding the impact of regulatory evolution, best practices for adapting to changes and mitigating compliance risks3:00pmPart 2: Achieving Excellence in Compliance & Regulatory Change ManagementTopics: Horizon Scanning, Obligation Identification, Regulatory Mapping and Policy Change Management.3:30pmPart 3: The Future of Compliance – Leveraging AI for Efficiency & AgilityTopics: AI’s role in improving compliance strategy, decision-making, efficiency and risk mitigation.4:00pmCorlytics Overview: Shaping the Future of RegTechIntroduction to Corlytics’ end-to-end Regulatory Change Platform and Client Case Study. 5:00pmNetworking and drinks

GRC 20/20 Instructor

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host

Corlytics is a global RegTech consolidator, a leader in regulatory intelligence, content and automated policy compliance and attestation. Delivering a platform that manages the entire regulatory risk value chain, Corlytics provides assurance on never-ending regulatory changes to compliance, risk, legal and audit teams globally.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

The State of Third-Party Risk Management in 2025
2025-09-04 10:00 - 11:00 (America/Chicago)
REGISTER

Join us as we explore the current state of the TPRM ecosystem – its pressures, imbalances, and opportunities through the lens of new research and deep industry experience.

Highlights

Learn why nearly 70% of TPRM programs remain understaffed, managing less than half their vendor base

Learn how increasing regulatory scrutiny is reshaping the role of compliance in third-party risk

Determine where organizations are struggling with manual tools and fragmented oversight

Learn how AI adoption is gaining cautious momentum and what early adopters are doing differently

Determine what resilient TPRM looks like in 2025 and how to start rebalancing your own ecosystem

The Third-Party Risk Ecosystem is Under Pressure. Are You Positioned to Withstand It?

From regulatory upheaval to resource strain, third-party risk management (TPRM) is facing a watershed moment.

In this exclusive session, GRC visionary Michael Rasmussen and Mitratech’s Henry Umney unpack the current state of the TPRM ecosystem – its pressures, imbalances, and opportunities through the lens of new research and deep industry experience.

Grounded in insights from Rebalancing the Risk Ecosystem: The 2025 Mitratech TPRM Study, this conversation dives into a risk environment where the canopy is expanding, but the roots remain undernourished.

Why Attend?

Third-party risk is no longer a back-office issue – it’s a front-line business imperative. This is your opportunity to hear directly from two of the most respected voices in the space as they explore what’s next for organizations navigating a complex, evolving, and deeply interdependent risk environment.

Register now to secure your spot and get a free copy of the full 2025 TPRM Study after the session.

SPEAKERS:

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

Henry Umney, Managing Director GRC Strategy, Mitratech

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor

Mitratech is a trusted, global technology partner empowering corporate legal, risk & compliance, and HR professionals to maximize productivity, control expense, and mitigate risk by deepening operational alignment, and increasing collaboration & visibility across their organization. With Mitratech’s proven portfolio of end-to-end solutions, organizations worldwide are able to proactively identify and implement best practices and standardize processes across all lines of business to manage risk and ensure business continuity. Mitratech partners with more than 10,000 companies worldwide, from small nimble teams needing tech-enablement, to the largest organizations in the world trying to centralize, streamline and collaborate across their legal and risk functions. Mitratech’s user base spans more than 160 countries. Innovate now by visiting: www.mitratech.com

Webinar Host

OCEG (formerly the Open Compliance and Ethics Group) is a global, nonprofit think tank and community. We inform, empower, and help advance our 120,000+ members on governance, risk management, and compliance (GRC). Independent of specific professions, we provide resources, education, and certifications to drive leadership and strategy through the application of the OCEG GRC Capability Model™ and Principled Performance®. An OCEG differentiator, Principled Performance enables the reliable achievement of objectives while addressing uncertainty and acting with integrity. Our members include c-suite, executive, management, and other professionals from small and midsize businesses, international corporations, nonprofits, and government agencies. Founded in 2002, OCEG has locations around the globe.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Risk and Control by Design: Navigating Provision 29 of the UK Corporate Governance Code, LONDON
2025-09-04 10:00 - 16:00 (Europe/London)
REGISTER

The Park Plaza London Riverbank, 18 Albert Embankment, London SE1 7TJ

The upcoming implementation of Provision 29 in the UK Corporate Governance Code marks the most significant regulatory change in over a decade.

Boards of UK-listed companies must now affirm the ongoing effectiveness of both their risk management and internal control frameworks, and report on them with clarity, confidence, and accountability starting in 2026.

Protecht invites you to a special session with internationally renowned GRC expert Michael Rasmussen, designed to help you cut through the complexity and understand what these changes mean in practice.

We will explore how to create an agile, business-integrated approach to risk and control management that aligns with corporate objectives, empowers decision-makers, and withstands scrutiny from boards, regulators, and investors alike.You’ll leave with a clear understanding of Provision 29 and how to embed it in your organisation’s risk and control frameworks.

Spaces are going quickly: don’t miss your chance to join us.

What you will learn

Through expert-led sessions, peer collaboration, and hands-on activities, attendees will:

Understand the strategic implications of Provision 29, and how it differs from other global frameworks (e.g., SOX), focusing on ongoing effectiveness not point-in-time compliance.

Build a risk-informed internal control framework that supports strategy, performance, and operational resilience.

Explore how to embed risk management into business operations, not just within risk or compliance functions.

Learn to identify and assess material risks and controls, clarify ownership, and establish meaningful accountability across the three lines of defence.

Evaluate how to architect the information and technology infrastructure to enable continuous monitoring, real-time insights, and integrated assurance.

Who will benefit?

This workshop is essential for senior leaders, board advisors, GRC professionals, internal control managers, risk and compliance officers, and audit personnel seeking to proactively respond to the updated UK Corporate Governance Code.

Agenda overview

Session 1: What is Risk & Control by Design?

Understanding risk and internal control in the context of business strategy and operations

Unpacking Provision 29: board accountability, assurance requirements, and risk/control effectiveness

How risk and control intersect across governance, compliance, and performance

Workshop exercise: Mapping Provision 29 into your organisation

Session 2: Breaking Down Silos – Building a Federated Model

Creating an integrated view of risk and internal control across the enterprise

Designing collaborative risk/control governance structures (e.g., Risk & Control Committees)

Aligning risk and control functions across the three lines of defence

Workshop exercise: Creating your federated risk and control blueprint

Session 3: The Risk & Control Lifecycle – From Identification to Assurance

Risk-informed control design: top-down strategic risks and bottom-up operational insights

Control rationalisation: reducing duplication and aligning controls with material risks

Assurance strategies for Provision 29: continuous monitoring, independent validation, and reporting

Workshop exercise: Designing a control lifecycle aligned to risk

Session 4: Architecting for Visibility, Agility, and Accountability

Workshop exercise: Developing an integrated risk and control information architecture

Information and technology architecture for risk and control management

Defining a risk and control taxonomy with business relevance

Reporting on effectiveness: dashboards, metrics, and board-level insights

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host/Sponsor

Redefining the way the world thinks about risk. While others fear risk, we embrace it. With offices in Los Angeles, Sydney and London, Protecht has been redefining the way people think about risk, compliance and resilience for over 20 years. Through our people, we enable smarter risk taking by our customers to drive their resilience and sustainable success. We do this by channeling our passion for enterprise risk management into knowledge and expertise that drive every aspect of our training, thought leadership, products and services, and by building true relationships with our customers as we support their risk management journey. We help our customers increase performance and achieve strategic objectives through better understanding, monitoring and management of risk. We provide a complete solution of world-class risk management, compliance, training, framework, advisory and consulting services to businesses, regulators and governments across the world.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Workiva Amplify Americas, WASHINGTON DC
2025-09-08 09:00 - 2025-09-10 15:00 (America/New_York)
REGISTER

Ready for Anything!

Change is constant—new regulations, increased investor scrutiny, emerging technologies, more responsibilities. We tackled all this and more at Amplify 2024.

Amplify is the conference to discover new and better ways of addressing the challenges we’re all facing. Amplify is where you can get the facts on the latest legislation one day, and discover transformative ways of working together the next—all while getting the tools you need to advance your career.

Thousands of passionate accounting, finance, ESG, audit and risk professionals joined forces for 3 days packed with best practices, thought-provoking sessions, and peer networking. They got an exclusive look at the latest innovations from Workiva and our partners and met the brightest minds in the business. All this while earning a few CPE credits along the way!

GRC 20/20 Presenter at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

Workiva is on a mission to power transparent reporting for a better world. We build and deliver the world’s leading cloud platform for assured integrated reporting to meet stakeholder demands for action, transparency, and disclosure of financial and non-financial data. Workiva offers the only unified SaaS platform that brings customers’ financial reporting, Environmental, Social, and Governance (ESG), and Governance, Risk, and Compliance (GRC) together in a controlled, secure, audit-ready platform. Our platform simplifies the most complex reporting and disclosure challenges by streamlining processes, connecting data and teams, and ensuring consistency. Learn more at workiva.com.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Archer Summit 2025
2025-09-15 00:00 - 2025-09-18 23:59 (America/Chicago)
REGISTER

Experience the education, inspiration, and fun of Archer Summit.

Lay the foundation for success at Archer Summit 2025. Set against the iconic skyline of Chicago, this premier gathering of global risk innovators and business leaders will be your blueprint for the future. Over three inspiring days, we’ll construct new ideas, analyze data frameworks, share best practices, and learn from each other — all while experiencing the vibrant architectural beauty of Chicago.

Endless Opportunities for Growth

FIND INSPIRATION. Connect with industry leaders, embrace the future of risk, and elevate your productivity with cutting-edge digital risk management—all set against Chicago’s iconic architectural backdrop. Discover the latest in customer and product innovations as we build the future of risk management together in the Windy City!

EXPLORE THE POSSIBILITIES. Connect with Archer partners and explore solutions and products designed to maximize the value of your Archer investment. Whether you’re into hands-on training or insightful sessions, there’s something for everyone!

NETWORK WITH THE BEST. Expand your professional network and dive into dynamic discussions with fellow risk professionals about the challenges and solutions shaping the industry. Connect with Archer risk management experts from around the world, all while soaking in the vibrant energy of Chicago!

GET ACTIONABLE IDEAS. Whether you’re a fresh face in the Archer scene or a seasoned pro, Archer Summit’s got the groove to amp up your skills. Immerse yourself in the vibrant talks from dynamic Archer leaders and industry experts, all set to inspire and energize you.

GROW YOUR CAREER. Prepare to elevate your expertise at Archer Summit! This is your blueprint for success—a prime opportunity to reinforce your foundation and refine your skills. Build on new knowledge, strengthen your existing framework, and join industry-focused user groups and training sessions to construct a stronger, more resilient future.

HAVE FUN. Let’s build the excitement! We’re kicking off with a vibrant Welcome Reception to celebrate our Archer community and wrapping up with an unforgettable customer appreciation event. Immerse yourself in Chicago’s dynamic spirit as we celebrate the Archer community!

GRC 20/20 Analyst will be presenting at the event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host

Archer empowers organizations to manage multiple dimensions of risk on one platform with on-premises and SaaS offerings, and quickly implement industry-standard processes and best practices for advanced risk management maturity, informed decision-making and enhanced business performance. Archer has been recognized as a Leader in the most recent Gartner Magic Quadrant reports for IT risk management, IT vendor risk management tools and business continuity management program solutions, worldwide.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Risk & Resilience Virtual Summit
2025-09-16 00:00 - 23:59 (America/New_York)
REGISTER

The Diligent Risk & Resilience Virtual Summit is the ultimate virtual forum for leaders seeking to transform risk into opportunity. Featuring expert insights, forward-looking strategies, and actionable takeaways, this virtual event explores how to fortify your organization’s resilience against an evolving risk landscape. From navigating new challenges to leveraging resilience as a strategic advantage, this summit offers unparalleled guidance to help your organization thrive.Register

Is AI transforming your approach toRisk and Resilience?

Discover how at the Risk & Resilience Virtual Summit. Explore actionable AI applications and forward-thinking strategies to ensure your organization stays ahead of emerging challenges. Register now!

Exclusive insights.Gain exclusive insights into the state of resilience in 2025 from leading experts.

Discover. Discover how to integrate cyber resilience into the core of your organization’s strategy.

Learn. Learn how audit functions are evolving into strategic enablers for better decision-making.

Explore. Explore cutting-edge approaches to managing and mitigating risk across your organization.

Earn Continuing Education Credit. Earn CLE, CE, and CPE credit hours while gaining valuable knowledge and strategies for your GRC programs.

Keynote | The resilience blueprint: Turning risk into a strategic advantage

Speaker

Michael RasmussenGRC Analyst & Pundit, GRC 20/20 Research

Discover how leading organizations are reframing risk management from a reactive discipline to a proactive enabler of growth and innovation. This session sets the tone for a resilient future — one where uncertainty becomes opportunity.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host . . .

Diligent created the modern governance movement. As the leading governance, risk and compliance (GRC) SaaS company, we serve 1 million users from over 25,000 customers around the globe. Our innovative platform gives leaders a connected view of governance, risk, compliance and ESG across their organization. Our world-changing idea is to empower leaders with the technology, insights and connections they need to drive greater impact and accountability – to lead with purpose. Our employees are passionate, smart, and creative people who not only want to help build the software company of the future, but who want to make the world a more sustainable, equitable and better place. Headquartered in New York, Diligent also has offices in Washington D.C., London, Galway, Budapest, Vancouver, Bengaluru, Munich, Singapore and Sydney. Learn more at diligent.com.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

From Risk Management to Risk Intelligence: Evolving Your TPRM Approach
2025-09-16 13:00 - 14:00 (Europe/Zurich)
REGISTER

In a world of growing interdependencies, managing third-party risk requires more than checklists and compliance. It calls for real-time intelligence, automation, and strategic insight.

Join us for a high-impact webinar to explore how leading organizations are evolving their Third-Party Risk Management (TPRM) strategies supported by expert insights and award-recognized technology.

We’re honored to welcome Michael Rasmussen, globally renowned GRC analyst, as our guest speaker. Michael will open the session with a thought-provoking look at today’s TPRM landscape highlighting emerging risks, overlooked blind spots, and how businesses can stay ahead.

Nikolai Tsenov, our Head Strategy & Business Development, will then showcase how Swiss GRC’s TPRM software, recently named a 2025 Best of Technology Awards finalist by WirtschaftsWoche, enables organizations to:

Efficiently onboard and classify third parties

Assess inherent risk and service criticality

Apply smart tiering, due diligence, and exit strategies

Integrate with external intelligence (e.g. cyber scores, ESG data, creditworthiness, company profiles)

This session will be moderated by Yahya Mohamed Mao, our Head Marketing & Communications. It’s ideal for professionals in risk, compliance, procurement, and IT who want to move beyond traditional risk management and harness the power of risk intelligence.

Reserve your spot now and learn how to turn risk data into strategic action with expert insights and award-recognized technology.

Speakers

Michael Rasmussen, GRC Analyst & Pundit @ GRC 20/20 Research, LLC

Nikolai Tsenov, Head Strategy & Business Development @ Swiss GRC

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Recognized as the leading software company in Switzerland for GRC (Governance, Risk & Compliance) solutions, Swiss GRC has built a wealth of expertise and experience over the years, resulting in the continuous improvement of the GRC Toolbox — a comprehensive software solution that encompasses modules such as Risk Management, Internal Controls Management, Business Continuity Management, Information Security Management, Data Protection Management, Audit Management, Compliance Management, Third-Party Risk Management, Contract Management, and Business Process Management. Reflecting its guiding principle of ‘Global Reach, Local Excellence’, Swiss GRC is expanding its global footprint within the DACH and MEA/APAC regions. With a growing global influence, Swiss GRC prioritizes the appreciation of local peculiarities and demands as essential elements of its operations. This expansion initiative encompasses the establishment of offices in Germany, the United Kingdom, and the United Arab Emirates.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Policy & Procedure Management by Design, NEW YORK CITY
2025-09-24 13:00 - 17:00 (America/New_York)
REGISTER

Blueprint for an Effective, Efficient & Agile Policy Management Program

Workshop Abstract:

In today’s hyper-connected and rapidly evolving business environment, policies are the foundation of organizational integrity, culture, and control. But most organizations struggle with fragmented, inconsistent, and outdated policies that create exposure — not protection. Policy mismanagement is no longer a back-office nuisance; it’s a governance, risk, and compliance (GRC) failure waiting to happen.

Policy Management by Design delivers a structured, strategic, and scalable approach to policy governance. It defines how policies should be developed, maintained, communicated, and enforced in alignment with the organization’s values, risks, objectives, and regulatory obligations. This workshop equips attendees with the blueprint to design and implement a modern, enterprise-wide policy management architecture — one that is responsive to regulatory change, agile in times of disruption, and deeply embedded in business operations.

Policies must be in place so the organization can:

Reliably achieve objectives

Manage and control uncertainty

Uphold ethical values and behavioral expectations

Safeguard people, processes, and systems

Comply with legal, regulatory, and contractual obligations

Defend the organization in times of scrutiny or litigation

Build and reinforce a culture of integrity and accountability

Yet policy management today is often ad hoc, uncoordinated, and misaligned with how the organization actually operates. Many organizations lack a clear inventory of current policies, operate with conflicting documents, and face the growing risk of rogue policies authored without oversight or legal review — all of which can create unintended legal duties and reputational harm.

The complexity of modern organizations — across jurisdictions, business units, and third-party relationships — demands an intelligent, integrated, and orchestrated approach. This includes policy standardization, clear governance, consistent voice, and digital traceability. It also includes tracking attestation, linking policies to risks, controls, and issues, and adapting policies dynamically in response to regulatory and operational change.

This hands-on, interactive workshop provides the methodology, tools, and peer collaboration needed to design and scale a robust policy management program — whether at the enterprise level or within specific departments.

Workshop Objectives

Attendees will take back to their organization practical approaches to:

Define a complete lifecycle for managing policies

Establish governance, ownership, and accountability for policy content

Standardize policy format, language, and metadata

Communicate and embed policies across business units and third-party relationships

Track policy attestations and comprehension

Deliver targeted training linked to policies and roles

Monitor policy metrics and conformance

Identify policy gaps, inconsistencies, and misalignment

Map policies to objectives, risks, obligations, controls, and incidents

Build an integrated policy information and technology architecture

Benefits to Attendees

Understand how to build a policy management lifecycle that is sustainable and responsive

Implement a governance framework that aligns policy authorship with business needs and compliance expectations

Explore technology enablers that support automation, distribution, and tracking of policies

Design a policy environment that reinforces culture, accountability, and operational performance

Improve visibility and control over policy content, ownership, and effectiveness

Build the business case to support investment in policy management improvements

Who Should Attend?

Chief Compliance Officers

Chief Risk Officers

Ethics and Culture Leaders

Legal and Corporate Counsel

Policy Managers and Administrators

Internal Audit, HR, and Operational Risk Professionals

Anyone responsible for policy oversight, authorship, distribution, or accountability

Workshop Agenda

Part 1: Policy by Design – Why Policies Matter

The real-world impact of policy failures

The role of policy in governance, ethics, risk, and compliance

Policy chaos: what happens when organizations lack control

Case studies of successful policy governance

Part 2: Policy Governance – Blueprint for Oversight

Building a policy committee and collaboration model

Drafting a Policy Management Charter

Writing a “Meta-Policy” – the policy on policies

Creating a style and voice guide for consistency

Interactive peer discussion and framework application

Part 3: Policy Management Lifecycle – From Creation to Retirement

Determining when a policy is needed (or not)

Authoring, reviewing, approving, and maintaining policies

Communicating, training, and tracking comprehension

Managing policy exceptions and monitoring compliance

Measuring effectiveness and updating the policy portfolio

Interactive exercises with sample policy scenarios

Part 4: Policy Management Architecture – Orchestrating Information & Technology

Designing the information architecture to connect policies with risks, controls, and compliance

Evaluating and selecting technology architecture to automate and scale policy workflows

Building the business case for investment in policy GRC technology and process

Final discussion and roadmap building

This workshop empowers you to create a policy management framework that is adaptive, defensible, and aligned — a blueprint for ensuring that your policies do what they are supposed to do: guide decisions, support integrity, reduce liability, and build organizational trust.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

At COMPLY, we pride ourselves on being the champion for compliance professionals. Through technology, consulting and education, we help clients navigate the ever-changing regulatory environment, end to end. Our deep industry expertise – which includes expansive knowledge in technology enablement and regulatory compliance protocols and processes (SEC, FINRA, FCA, State) – supports more than 5,000 clients in more than 60 countries, including investment banks, private funds (including private equity firms and hedge funds), broker-dealers, registered investment advisers, insurance, and other financial services firms.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Global RegTech Summit USA 2025, NEW YORK CITY
2025-09-25 00:00 - 23:59 (Europe/London)
REGISTER

Meet the people who matter in RegTech

Don’t miss the largest RegTech event where compliance leaders converge. Secure your place for our second edition in New York and shape the future of RegTech.

Why Attend?

Unmatched Networking. Connect with global RegTech leaders, expand your network, and unlock new opportunities.

Engage with Experts. Interact with compliance, risk management, technology, and financial crime prevention leaders. Gain insights, learn best practices, and stay updated on RegTech trends and challenges.

Make Powerful Connections. Connect with RegTech buyers, sellers, investors, and innovators. Foster partnerships, explore investments, and collaborate with like-minded professionals.

Explore Innovations. Experience industry innovations at our Demo Stage, addressing regulatory challenges and enhancing compliance and risk management efficiency.

Gain Strategic Insights. Learn how financial institutions tackle compliance challenges and gain a competitive edge through collaborations with RegTech innovators. Acquire insights on regulatory requirements, industry standards, and emerging trends.

GRC 20/20 Analyst will be presenting at the event . . .

Michael will be moderating the following sessions . . .

12:25 – 1:10pm – Reg Change in the Financial Sector: Navigating the Evolving Regulatory Landscape

2:20 – 3:00pm – RegTech and the Regulators: Striking the Balance Between Innovation and Risk

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

FinTech Global is the world’s leading provider of FinTech information services, B2B media products and industry events. We inform, promote and connect FinTech buyers, sellers, investors and innovators worldwide. We serve a network of over 300,000 FinTech professionals from market-leading organisations.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

The future of GRC in Financial Services: From compliance overload to strategic resilience
2025-09-25 16:00 - 17:00 (Europe/London)
REGISTER

Financial services organizations are drowning in a sea of compliance mandates: new regulations, updated expectations, expanding audit requirements, and relentless scrutiny from regulators and stakeholders alike. But is compliance the destination, or merely the starting point?

In this session, we move beyond checkbox compliance to explore how financial institutions can reframe GRC as a strategic enabler of resilience, trust, and performance. Join internationally recognized GRC authority Michael Rasmussen as he dives into how financial services firms can evolve from reactive control functions to proactive, orchestrated ecosystems of governance, risk, and compliance.

We will challenge conventional thinking and spotlight how GRC 7.0 is redefining the future of GRC in banking, insurance, asset management, and beyond.

This is not about doing more compliance. It’s about doing smart GRC that aligns with business objectives, adapts to uncertainty, and strengthens the organization’s ability to navigate the unknown.

Key takeaways:

Reframe Compliance as Strategic Enablement. Understand how to shift GRC from a reactive compliance burden to a proactive driver of performance, resilience, and trust in financial institutions.

Explore the Pillars of GRC 7.0 in Finance. Learn how intelligent automation, agentic AI, and integrated risk architecture are transforming the way financial services approach governance, risk, and compliance.

Align GRC with Business Objectives and Risk Appetite. Discover how to embed GRC into decision-making by connecting risk capacity, regulatory thresholds, and enterprise goals into a unified strategy.

Navigate Global Regulatory Complexity with Confidence. Gain practical insight into managing compliance across overlapping international regulatory frameworks while maintaining agility and accountability.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Decision Focus develops software for Governance, Risk and Compliance. Since 2004, Decision Focus has provided the world’s enterprises with software and services. We’ve taken our years of knowledge and experience to implement new software for Risk and Compliance which is has become leading in enterprise GRC.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

SureCloud’s Customer Connect 2025, LONDON
2025-09-30 00:00 - 23:59 (Europe/London)
REGISTER

We’re thrilled to invite you to SureCloud’s flagship customer event, designed to bring our user community together for a day of practical insights, peer learning, platform previews and future-focused GRC thinking.

Whether you’re in compliance, risk, security, or operations — if you use SureCloud, this event is built for you.

We’re also honoured to be joined by Michael Rasmussen, globally recognised as the father of GRC, for an exclusive 90-minute keynote on the future of governance, risk and compliance in a changing world.

Spaces are limited – secure your place now.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

Keep your business secure and compliant with SureCloud. Everything you need today and tomorrow, in our integrated GRC platform, that everyone can use. SureCloud GRC is built on our industry-first Dynamic Risk Intelligence technology, designed to empower you to proactively manage your GRC landscape by understanding the story within your data. This allows you to analyze, predict, and respond to risks before they become critical issues. The future of GRC delivered today. Our industry-first Dynamic Risk Intelligence technology enables you to be more proactive by revealing the full story and sequence of events across your programs with unparalleled visibility and certainty. It empowers you to anticipate and address potential risks before they escalate, ensuring you’re always ahead of risk and compliance challenges. Leveraging advanced event-driven architecture and event sourcing, SureCloud GRC captures and analyzes every detail in real-time, giving you the tools to take proactive control and provide long-term business assurance.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Digital Risk & Resilience Management by Design, LONDON
2025-10-01 00:00 - 23:59 (Europe/London)
REGISTER

Blueprint for Business-Integrated, Agile, and Context-Aware Risk & Resilience Programs

Organizations are increasingly defined by the digital ecosystems in which they operate — complex, distributed, andinterdependent. In this reality, digital risk and resilience go far beyond IT security and business continuity. They encompass the integrity, reliability, and adaptability of the entire digital operating model, across infrastructure, data, systems, third parties, and AI-driven automation. In the GRC 7.0 era, managing digital risk is not just about defense — it is about orchestration, foresight, and trust.

In this workshop, Michael Rasmussen, internationally recognized authority on GRC and the pioneer of the GRC market, delivers a strategic blueprint for orchestrating digital risk and resilience. Attendees will learn how to architect and operationalize a next-generation digital risk and resilience strategy — one that is integrated across business operations, embedded in governance frameworks, and empowered by agentic AI and digital twin modeling.

What You Will Learn:

Digital Risk Management. Understand the intersection of digital risk with enterprise risk, IT risk, cyber risk, and third-party risk. Learn how to develop a strategy that aligns digital risk with organizational performance and integrity objectives.

Digital Resilience Management. Discover how to move from reactive continuity to proactive digitalresilience — anticipating disruption, adapting in real time, and maintaining digital trust across interconnected processes and systems.

360° Situational Awareness. Learn how to build a semantic information architecture that provides dynamic, real-time visibility into digital risk, controls, resilience metrics, and compliance posture across the business.

Technology Architecture for Digital Trust. Explore the architecture of GRC 7.0: the integration of digitaltwins, agentic AI, automation, and orchestrated workflows that enable scalable and adaptive digital riskand resilience capabilities.

Who Should Attend?

Digital Risk, GRC, and Cyber Resilience professionals

IT and Security leaders overseeing transformation and continuity

Business executives responsible for operational integrity and trust

Compliance, audit, and risk officers providing assurance on digital performance

Third-party and ecosystem risk managers responsible for digital interdependencies

Workshop Agenda

Part 1: Understanding Digital Risk & Resilience

Introduction and the orchestration of digital risk & resilience

Redefining resilience in a digital-first, always-on enterprise

Part 2: Designing a Blueprint for Digital Risk & Resilience

Embedding digital resilience into enterprise strategy and culture

Aligning digital objectives with governance, risk, and operational frameworks

Part 3: Operationalizing Digital Risk & Resilience

Process modeling, scenario simulation, and adaptive response

Leveraging digital twins and control frameworks for proactive resilience

Part 4: Technology Architecture for Orchestrated Digital Trust

Identifying enabling technologies for integrated digital risk and resilience

Building a roadmap and business case for intelligent, scalable deployment

This workshop will equip you with the strategies and frameworks to lead your organization toward digitally resilient, risk-intelligent operations — where trust is designed into the architecture, and digital risk is orchestrated, not just managed.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

Keep your business secure and compliant with SureCloud. Everything you need today and tomorrow, in our integrated GRC platform, that everyone can use. SureCloud GRC is built on our industry-first Dynamic Risk Intelligence technology, designed to empower you to proactively manage your GRC landscape by understanding the story within your data. This allows you to analyze, predict, and respond to risks before they become critical issues. The future of GRC delivered today. Our industry-first Dynamic Risk Intelligence technology enables you to be more proactive by revealing the full story and sequence of events across your programs with unparalleled visibility and certainty. It empowers you to anticipate and address potential risks before they escalate, ensuring you’re always ahead of risk and compliance challenges. Leveraging advanced event-driven architecture and event sourcing, SureCloud GRC captures and analyzes every detail in real-time, giving you the tools to take proactive control and provide long-term business assurance.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

Executive Panel: Simplifying Operational Risk and Leveraging AI in a Dynamic Risk & Regulatory Environment to Amplify Outcomes
2025-10-02 10:00 - 11:00 (America/Chicago)
REGISTER

Join us as we explore how forward-thinking CROs and Heads of Risk are streamlining operational risk management to enable agility, informed decision-making, and measurable business impact.

Highlights

Learn practical steps to streamline operational risk frameworks

Learn about aligning risk insights with strategic business decisions

Learn approaches to staying resilient amid regulatory shifts and emerging threats

Learn about leveraging data, automation, and AI to enhance visibility and responsiveness

In today’s rapidly evolving risk and regulatory landscape, complexity can cloud judgment and slow down decision-making. Operational risk leaders are under pressure to move beyond compliance and enable business resilience, agility, and growth.

Join this exclusive panel of Chief Risk Officers (CROs) and Heads of Risk as they share real-world strategies for simplifying operational risk management to drive better business outcomes. Learn how top organizations are rethinking traditional approaches—breaking down silos, leveraging technology, and embedding risk awareness across the enterprise.

Whether your goal is to strengthen your existing risk program or lead a transformative initiative, this session promises to offer actionable insights and peer perspectives.

Speakers:

Gaurav Kapoor, Co-founder & Vice Chairman, MetricStream

Arindam Majumdar, Chief Risk Officer, Bank OZK

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor

MetricStream simplifies Governance, Risk, and Compliance (GRC) with purpose-built AI-first Risk, Compliance, Audit, CyberGRC, Third-party Risk, and Resilience products on a single low-code / no-code GRC cloud platform. Trusted by over 1 million GRC professionals across 35+ countries, our industry-specific products and AI agents help businesses successfully manage audits, avoid compliance violations and fines, reduce risk exposure, and strengthen resilience. MetricStream is headquartered in San Jose, California, with operations and offices around the globe. More information is available at www.metricstream.com

Webinar Host

OCEG (formerly the Open Compliance and Ethics Group) is a global, nonprofit think tank and community. We inform, empower, and help advance our 120,000+ members on governance, risk management, and compliance (GRC). Independent of specific professions, we provide resources, education, and certifications to drive leadership and strategy through the application of the OCEG GRC Capability Model™ and Principled Performance®. An OCEG differentiator, Principled Performance enables the reliable achievement of objectives while addressing uncertainty and acting with integrity. Our members include c-suite, executive, management, and other professionals from small and midsize businesses, international corporations, nonprofits, and government agencies. Founded in 2002, OCEG has locations around the globe.
Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

AI in GRC Showcase : How E-V-E AI Can Automate Any Risk & Compliance Domain
2025-10-07 15:00 - 16:00 (Europe/London)
REGISTER

The Future of GRC Automation with AI

Join us for an engaging session exploring how AI is transforming Governance, Risk, and Compliance (GRC). We’ll dive into the challenges of today’s regulatory landscape (DORA, NIS2, GDPR, ESG) and showcase how AI is reshaping compliance from manual assessments to automated, intelligent workflows.

We are honored to feature Michael Rasmussen — internationally recognized as the “Father of GRC”. With over 30 years of experience, Michael pioneered the concept of GRC while at Forrester Research in 2002, laying the foundation for how organizations approach strategy, process, and technology today. As a leading authority, author, and advisor, his insights continue to shape legislation, regulatory frameworks, and corporate best practices worldwide.

The session will also include a live demonstration of the E-V-E AI in action—covering control mapping, cross-framework harmonization, continuous monitoring, and real-world use cases in financial services, critical infrastructure, and third-party risk management.

This ONLINE WEBINAR combines expert thought leadership with practical demonstrations, offering participants a unique perspective on the future of GRC automation.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

E-V-E GRC: AI Compliance for Faster, Smarter Risk & Audit Readiness For GRC teams facing regulatory complexity, vendor risk, and contract reviews — E-V-E delivers speed, precision, and continuous assurance. We automate compliance across frameworks such as DORA, NIS2, ISO 27001, and contract compliance — or any other framework your organization needs.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook

GRC Insights Breakfast with Michael Rasmussen, STOCKHOLM
2025-10-10 08:30 - 12:00 (Europe/Stockholm)
INVITE ONLY

Join us for a morning of knowledge and networking at Deloitte’s exclusive GRC Insights Breakfast event.

Start your day with breakfast while gaining valuable insights from international GRC leaders. Hear insights from Michael Rasmussen, internationally recognized authority and thought leader, and Sophie Holgersson and Daniel Jørgensen from Deloitte as they share their expertise and perspectives on the evolving landscape of Governance, Risk, and Compliance including the impact of AI Governance in an era of rapid technological advancement. Engage in thought-provoking discussions, ask questions, and network with peers. Don’t miss this opportunity to elevate your understanding of GRC and connect with professionals in the field.

This is your chance to:

Gain Expert Insights: Hear insights from Michael Rasmussen, as he shares his visionary perspective on the evolving landscape of Governance, Risk, and Compliance – including the critical role of AI Governance in today’s business environment. Learn about the latest trends, challenges, and opportunities directly from the expert.

Discover Deloitte’s view: Hear from Daniel Jørgensen about Deloitte’s strategies for GRC and AI Governance and how that can drive resilience, innovation, and strategic advantage for your business. Discover practical approaches and innovative solutions and understand how Deloitte’s perspective can be applied to your business to improve risk management, compliance, and governance practices.

Network with Industry Peers: Connect with like-minded professionals and industry peers and exchange ideas and experiences, that foster collaborations. Expand your network and build valuable relationships with others who share your commitment to excellence in governance and compliance.

Engage in Interactive Discussions: Participate in a dynamic Q&A session where you can explore key challenges and opportunities in GRC and AI Governance and ask questions to deep dive into the topics that matter most to you.

Don’t miss this opportunity to elevate your GRC expertise and take away actionable insights and stay ahead in an increasingly complex regulatory and technological environment. Register today and be part of this transformative event!

Once your spot for the event is secured, a confirmation will be sent out to your inbox.

Agenda:

08:30 Welcome by Deloitte, breakfast and networking

09:00 Presentation, Michael Rasmussen

09:40 Deloitte’s Point of view on GRC, Daniel Jørgensen

10:15 Questions and wrap-up, Daniel Jørgensen

10:30 Break and Mingle

11:00 Podcast Recording on AI for GRC and GRC for AI, Michael Rasmussen and Daniel Jørgensen

12:00 Thank you for today!

Speakers:

Michael Rasmussen. Michael Rasmussen is an internationally recognized thought leader and pioneer in governance, risk management, and compliance (GRC). With over 30 years of experience, he has extensive expertise in enterprise GRC strategy and processes supported by robust information and technology architectures. Michael was the first to define and model the GRC market in February 2002 while at Forrester, setting the foundation for the modern understanding of GRC.

Daniel Jørgensen. Daniel Jørgensen is a Partner in Controls Advisory at Deloitte. With a strong focus on data and technology, he helps organizations design and implement governance frameworks that enhance risk management and ensure control effectiveness across enterprise-wide GRC, AI, and Automation programs. Passionate about leveraging emerging technologies to solve business-critical challenges, Daniel supports clients from strategy development to hands-on implementation, ensuring they stay ahead in an evolving regulatory and technological landscape.

Sophie Holgersson. Sophie is a Partner that leads Deloitte Sweden’s services within risk management and internal controls. She has extensive experience from leading group-wide advisory projects within risk management and internal controls, aiming to design, implement and evaluate frameworks, organization and ways of working related to risk management and internal controls as well as leading internal audit engagements.

Exclusive 1 on 1 GRC Insight session

We offer an exclusive opportunity for a 1 on 1 GRC insight session together with our GRC experts. The session will be filled with discussions about the current landscape, vision, challenges, priorities, and future developments of GRC technologies. The session will last approximately one hour and is scheduled to take place following the main agenda. If you wish to participate in the 1 on 1 session, please register via the landing page. Please note that the number of spots for the 1 on 1 session is limited. Further details to be shared.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Seminar Hosts . . .

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you’re searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you.

Share this:
Click to email a link to a friend (Opens in new window)
Email

Click to print (Opens in new window)
Print

Click to share on LinkedIn (Opens in new window)
LinkedIn

Click to share on X (Opens in new window)
X

Click to share on Facebook (Opens in new window)
Facebook
