GRC 20/20 Research, LLC

Audit & Beyond 2025
2025-10-21 00:00 - 2025-10-23 23:59 (America/Los_Angeles)
REGISTER

Your place for celebrating compliance, risk, and audit

Learn from the best-of-the-best

Sessions will be jam-packed with tangible insights you can put to use immediately — all delivered by experienced leaders in your field.

Discover new AI-centric technology

From products and solutions tackling agentic AI to automated assurance and greater data integration, there’s tons to uncover to level up your work.

Find your community

Build your network across industries and grow your career with our diverse knowledge-sharing audience. Meet industry experts and build relationships with other leaders as you engage in workshops, attend sessions, and enjoy unforgettable experiences in San Diego.

Enjoy immersive entertainment

When the sun goes down, the lights will shine on you! Kick back and relax as we bring you some of the best food, drinks, and entertainment in San Diego.

Explore the future of risk

Lock in your opportunity to connect with like-minded peers and learn innovative new practices. Register by July 22 to save $400.

AI is transforming GRC – are you ready?

Redefine the future of risk in the age of AI

Agentic AI is set to reshape how work is done across the three lines. As testing and assurance grow more automated, risk and compliance teams have a golden opportunity to become strategic advisors. Explore how to lead this shift at your organization. Let’s redefine risk—together.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host . . .

AuditBoard’s mission is to be the category-defining global platform for connected risk, elevating our customers through innovation. More than 50% of the Fortune 500 trust AuditBoard to transform their audit, risk, and compliance management.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Risk & Resilience Management by Design, SAN DIEGO
2025-10-21 00:00 - 2025-10-23 23:59 (America/Los_Angeles)
REGISTER

Blueprint for Business-Integrated, Agile, and Context-Aware Risk & Resilience Programs

Gone are the days when business operations were linear, local, and predictable. Today’s organizations face exponential change and increasing complexity driven by globalization, technology, regulatory intensity, distributed workforces, data proliferation, and accelerated competitive pressure. In this environment, managing risk and enabling resilience has become a strategic necessity.

Yet many organizations continue to treat risk management as a siloed compliance obligation and resilience as a disconnected business continuity function. The result? Gaps in preparedness, reactive responses, and missed opportunities to align risk-taking with performance and purpose.

Risk & Resilience Management by Design is a hands-on, interactive workshop that equips attendees with the frameworks, tools, and strategies needed to design and operationalize a risk and resilience program that is integrated, intelligent, and future-ready. This workshop delivers a structured and scalable approach to managing uncertainty and disruption in a way that protects performance, supports agility, and reinforces organizational trust.

Today’s business ecosystem demands 360° contextual awareness—of objectives, risks, interdependencies, and external threats. Organizations must move beyond checklists and departmental metrics to adopt a unified, federated approach that aligns risk, continuity, and resilience efforts across functions and operations.

This workshop empowers organizations to:

Understand and adapt to the evolving risk and resilience landscape

Connect risk management with business strategy, decision-making, and performance

Build a lifecycle-based approach to risk and resilience that reflects real-world complexity

Develop governance structures and technologies that foster coordination, ownership, and accountability

Deliver continuous assurance of resilience to boards, regulators, and stakeholders

Workshop Objectives

Attendees will take back practical approaches to:

Define a complete and continuous lifecycle for managing risk and resilience

Establish federated governance, strategic alignment, and cross-functional accountability

Align risk and resilience efforts with objectives, operations, and business change

Monitor and respond to both internal and external risks in real-time

Enable consistent and scalable risk/resilience processes across departments

Track critical risks, treatments, and resilience activities with transparency and traceability

Facilitate board- and regulator-ready assurance on organizational resilience

Identify and resolve material gaps, duplications, or inefficiencies in risk and resilience programs

Build a business case for risk and resilience investment tied to strategic outcomes

Leverage technology for risk visibility, scenario planning, monitoring, and reporting

Benefits to Attendees

Understand how to create a risk and resilience framework that is integrated, strategic, and scalable

Explore different models of risk/resilience maturity and identify what fits your organization

Build effective governance structures (committees, charters, plans) to unify efforts

Improve alignment between risk-taking, decision-making, and operational capability

Examine how to bring business continuity and operational resilience into the broader risk discussion

Learn how to benchmark effectiveness and communicate outcomes to leadership

Explore the role of enabling technology and data in a dynamic and proactive resilience program

Who Should Attend?

Chief Risk Officers & Risk Managers

Business Continuity & Resilience Leaders

Operational Risk and ERM Professionals

Compliance & GRC Executives

Internal Audit and Assurance Teams

Strategy, Transformation, and Program Managers

Technology Architects supporting GRC and BCM functions

Board Advisors and Governance Professionals

Workshop Agenda

Part 1: Risk & Resilience by Design – Why It Matters Now

Understanding how risk and resilience impact business strategy and performance

Exploring the disarray: silos, fragmentation, and blind spots in current practices

Risk exposure in a volatile world: where resilience gaps become existential threats

Current global trends, drivers, and regulatory mandates shaping risk/resilience integration

Interactive Exercise: Mapping risk and resilience maturity in your organization

Part 2: Risk & Resilience Governance – Building the Foundation

Establishing a federated governance model for integrated risk and resilience

Creating a Risk & Resilience Management Committee with cross-functional authority

Drafting a Risk & Resilience Charter that aligns mission, roles, and oversight

Developing a strategic plan that connects risk resilience to business objectives

Interactive Exercise: Designing your governance framework and charter elements

Part 3: Risk & Resilience Lifecycle – Managing in Context of Change

Risk and resilience lifecycle: from identification to assurance

Monitoring the external and internal environment for threats and disruptions

Conducting risk assessments, BIAs, and forward-looking scenario planning

Engaging business units in treatment planning and ongoing response preparedness

Reporting and evaluating: turning data into assurance and board-ready insights

Interactive Exercise: Building your risk and resilience lifecycle

Part 4: Risk & Resilience Architecture – Enabling Visibility & Agility

Designing an information architecture that supports holistic insight and action

Integrating data from operations, strategy, compliance, and continuity

Establishing taxonomies, workflows, and linkages between risks, objectives, and controls

Exploring technology architecture: what tools are needed, what to prioritize

Building the business case: articulating ROI and strategic value to leadership

Interactive Exercise: Mapping your risk and resilience information ecosystem

This workshop enables you to create a risk and resilience capability that is proactive, adaptive, and aligned with your organization’s mission. It provides the design blueprint needed to move beyond fragmented processes and into a state of readiness, reliability, and trust.

Your objectives are too important—and your risks too complex—to leave resilience to chance.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

AuditBoard’s mission is to be the category-defining global platform for connected risk, elevating our customers through innovation. More than 50% of the Fortune 500 trust AuditBoard to transform their audit, risk, and compliance management.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Understanding Third-Party Governance, Risk Management & Compliance (GRC) Solutions: Part of the OCEG™ GRC Technology Series
2025-10-21 10:00 - 11:00 (America/Chicago)
REGISTER

Join us as we explore the benefits of integrated Third-Party GRC solutions that provide governance, monitoring, and compliance management across the lifecycle of third-party relationships. We will walk through how these solutions address the challenges of managing complex third-party ecosystems, from onboarding to ongoing monitoring, audits, and offboarding.

Highlights

Discuss the top challenges organizations face in managing third-party objectives, risks, and compliance—such as siloed oversight, lack of real-time information, and difficulty scaling

Outline the processes that establish and maintain effective third-party governance, risk management, and compliance

Define the critical capabilities a Third-Party GRC solution must have, including integrated risk assessments, automated due diligence, issue management, compliance tracking, performance metrics, and audit trails

Describe how to build a business case for transitioning to an integrated Third-Party GRC platform, using a value framework of efficiency, effectiveness, resilience, and agility

Third-Party GRC solutions unify and automate the governance, risk, and compliance of an organization’s extended enterprise. They enhance transparency by providing real-time insights into third-party performance, risk, and compliance, ensuring that obligations are met and risks are effectively managed. These tools simplify assessments, enable dynamic reporting, and improve alignment with organizational objectives and regulatory requirements.

In this webinar, we will outline the benefits of a strong Third-Party GRC solution and demonstrate how it addresses your organization’s challenges across the third-party lifecycle.

Whether you are evaluating a Third-Party GRC solution for the first time, considering a change from your current system, or seeking to maximize the capabilities of your existing platform, this session will provide a clear path for building a business case for change.

Speakers:

Adelani Adesida, Managing Director, EMEA, Aravo

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor

Aravo delivers the market’s smartest third-party risk and resilience solutions, powered by intelligent automation. For more than 20 years now, Aravo’s combination of award-winning technology and unrivaled domain expertise has helped the world’s most respected brands accelerate and optimize their third-party management programs, delivering better business outcomes faster and ensuring the agility to adapt as programs evolve. With solutions built on technology designed for usability, agility, and scale, even the most complex organizations can keep pace with the high velocity of regulatory change. As a centralized system of record for all data related to third-party risk, Aravo helps organizations achieve a complete view of their third-party ecosystem throughout the lifecycle of the relationship, from intake through off-boarding and all stages in between and across all risk domains. Aravo is trusted by the world’s leading brands, helping them manage their risk and improve the performance of more than 6 million third parties, suppliers and vendors across the globe.

Webinar Host

OCEG (formerly the Open Compliance and Ethics Group) is a global, nonprofit think tank and community. We inform, empower, and help advance our 120,000+ members on governance, risk management, and compliance (GRC). Independent of specific professions, we provide resources, education, and certifications to drive leadership and strategy through the application of the OCEG GRC Capability Model™ and Principled Performance®. An OCEG differentiator, Principled Performance enables the reliable achievement of objectives while addressing uncertainty and acting with integrity. Our members include c-suite, executive, management, and other professionals from small and midsize businesses, international corporations, nonprofits, and government agencies. Founded in 2002, OCEG has locations around the globe.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Guardrails, Not Roadblocks: Employee Conflicts of Interest Monitoring in UK & EU Private Markets
2025-10-22 11:00 - 12:00 (Europe/London)
REGISTER

Private markets are no longer niche – they represent more than $15.5 trillion globally and £1.2 trillion in the UK.

With rapid growth, however, comes sharper regulatory focus.

From the FCA’s push on valuation transparency and improved data, to the EU’s first systemic stress test of non-bank financial institutions, firms face mounting pressure to get their house in order.

Couple that with FCA’s sector-wide strategic focus on combating market abuse, firms need to ensure they are getting basics right on conflicts of interest, insider information and conduct risk.

Join us for this webinar as we unpack:

Best practices for personal account dealing and insider information controls

How compliance culture and market abuse risk go hand in hand

Common pitfalls that create friction for front-office teams

How smart automation can transform oversight from a burden into a business enabler

You’ll leave with practical insights and real-world examples to strengthen your compliance guardrails – without slowing down growth.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host . . .

At COMPLY, we pride ourselves on being the champion for compliance professionals. Through technology, consulting and education, we help clients navigate the ever-changing regulatory environment, end to end. Our deep industry expertise – which includes expansive knowledge in technology enablement and regulatory compliance protocols and processes (SEC, FINRA, FCA, State) – supports more than 5,000 clients in more than 60 countries, including investment banks, private funds (including private equity firms and hedge funds), broker-dealers, registered investment advisers, insurance, and other financial services firms.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

The 360° View of Digital Risk: Gain Full Visibility into Resilience & Risk Across the Enterprise
2025-10-23 11:00 - 12:00 (America/New_York)
REGISTER

With today’s interconnected systems, organizations face unprecedented exposure to digital risk. Disruptions in supply chains, third-party failures, and regulatory change are just a few challenges that threaten operational continuity. Organizations must achieve a 360° view of risk across the business.

In this Risk@Work webinar, Michael Rasmussen will guide you through building an information and technology architecture that provides complete visibility of digital risks, resilience, and compliance. He will explain how to design dashboards, alerts, and insights that offer a real-time view of risk exposure. From tracking vendor risk to monitoring regulatory change, you’ll walk away with a clear strategy to enable data-driven decision-making across the enterprise.

You’ll learn how to:

Build an information architecture that delivers real-time, continuous monitoring of risk and resilience.

Achieve 360° visibility with comprehensive situational awareness of digital risks, threats, and disruptions.

Use risk intelligence to drive proactive and agile responses to digital disruptions.

Create dashboards that offer clear, actionable insights for leadership teams.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Webinar Host . . .

Riskonnect is the leading integrated risk management software solution provider. Our technology empowers organizations with the ability to anticipate, manage, and respond in real-time to strategic and operational risks across the extended enterprise. More than 2,400 customers across six continents use our unique risk-correlation technology to gain previously unattainable insights that deliver better business outcomes. Riskonnect has more than 500 risk management experts in the Americas, Europe, and Asia. To learn more, visit www.riskonnect.com.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Policy Management: Considerations, Outcomes, and Technology Choices
2025-10-23 12:00 - 18:30 (America/New_York)
REGISTER

Policies are the backbone of governance, risk, and compliance — they set expectations, shape culture, and protect organizations. Yet many companies struggle with outdated or fragmented policies. With new advancements in policy management tools, buyers are asking: What outcomes should we expect, and how do we choose the right solution?

In this webinar, Michael Rasmussen, the “Father of GRC,” will share key success factors for modern policy management. Drawing from GRC Orchestration and Policy Management by Design, he’ll cover both sides of the buying journey:

Internal considerations — defining objectives, governance structures, and measurable outcomes for policy management.

External considerations — the right questions to ask providers to compare capabilities, ensure scalability, and avoid costly missteps.

Attendees will gain actionable guidance to strengthen policy management programs, evaluate vendor solutions, and make defensible technology decisions aligned with strategy and compliance obligations.

Learning Objectives

Define policy outcomes and align them with governance, compliance, risk, and culture.

Clarify internal governance, ownership, and accountability structures.

Learn how to evaluate vendor solutions across integration, automation, usability, and adaptability.

Build a business case that links policy management investments to risk reduction, stronger governance, and organizational trust.

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host/Sponsor

GAN Integrity gives compliance teams a better way to do their good work. With a flexible platform that unifies compliance, ethics, and third-party risk management across the enterprise, coupled with deep domain expertise, we make it easy for compliance teams to see everything, adapt to anything, and get all the help they need. That’s why leading companies worldwide — from manufacturing to energy to financial services — rely on GAN Integrity.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

A Visionary Outlook on TPGRC Challenges in 2026
2025-10-23 13:00 - 14:00 (Europe/Paris)
REGISTER

Regulations are tightening, expectations around ESG are accelerating, and third-party ecosystems are becoming more complex. In this context, Third Party Governance, Risk and Compliance (TPGRC) is no longer just a checkbox — it’s a strategic priority.

Join us for an exclusive webinar where we’ll share our vision for TPGRC in 2026 and explore the emerging trends, challenges, and opportunities shaping the way organizations manage third-party risk and compliance.

On the agenda:

TPGRC 2026: Vision & Perspectives

How press monitoring enhances Third Party Evaluation

Key concerns when deploying a TPGRC platform

How Aprovall helps you tackle today’s and tomorrow’s TPGRC challenges

Whether you’re just starting your journey or already structuring your third-party risk strategy, this session will give you valuable insights to help you make informed decisions and build a robust and future-ready TPGRC framework.

Speakers

Laurent Luce | Product Marketing Manager, Aprovall

Dorian Ceyrat | Chief Revenue Officer, Aprovall

Mickael Rasmussen | CEO, GRG2020

Cheraz Ramdani| Pre-Sales Consultant, Aprovall

Tinatin Laoshvili | Partner | Accenture

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Aprovall is a leading third-party governance, risk management, and compliance (TPGRC) solution, empowering organisations to strengthen third-party relationships and manage complex, evolving procurement processes. Our end-to-end platform, Aprovall360, provides seamless, frictionless third-party lifecycle management with a flexible, customizable approach aligned to industry standards. Founded in 2008, Aprovall supports the entire third-party lifecycle—from evaluation and onboarding to monitoring and off-boarding, across key domains such as legal, finance, cybersecurity, ethics, environment, and human rights. Trusted by over 1,800 public and private entities globally, Aprovall delivers the visibility, efficiency, and resilience essential for long-term success.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

G[P]RC Summit Africa
2025-10-28 00:00 - 23:59 (Africa/Johannesburg)
REGISTER

The Future of GRC with integrated Performance and Strategy

The business environment in Africa is changing faster than ever – organizations are constantly challenged to become more strategic, more compliant, and more resilient to stay prepared for the future. The recent geo-political events and risks calls for the need for greater resilience, unified governance, and more connected operations. Top African organizations are adapting towards digital transformation strategies so they can thrive in the future digital economy. Organizations now realise that they can successfully transform their business models with GPRC – GRC integrated with Performance and Strategy. Enabling their businesses to holistically manage governance, performance, strategy, risk, and compliance, and operate efficiently as a connected enterprise – an organization that is connected and aligned across its business channels and functions. Through GPRC digital transformation, organizations have been able to connect and streamline operations, strengthen business resilience, and position themselves for future growth.

GPRC Summit Africa host sponsored by Corporater and organised by Ejtemaat bringing together GRC experts, CEOs, senior level executives, and key decision makers from across Africa and other regions and industries to discuss technology, insights, and trends shaping the future of enterprise business management.

The inaugural summit in Africa will feature keynote presentations, panels, and 3 workshops designed to provide expert insights centered around the theme of “The Future of GRC with integrated Performance and Strategy.” World-renowned GRC experts and C-level executives will share their insights on the latest trends, GRC-related challenges faced by today’s top organizations, and solutions designed to enable organizations to achieve stronger performance and alignment in mission-critical priorities. The summit will also cover strategic insights, best practices, and advice on strategy execution, performance measurement and optimization, and digital business transformation.

The GPRC Summit Africa is an exclusive, invitation-only, one-day event hosted in Johannesberg, South Africa on 28 October 2025.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host . . .

The G[P]RC Summit is the world’s largest summit on GPRC: GRC integrated with Performance and Strategy – bringing together C-level executives, GRC experts, and industry and academia professionals from across the world to share insights, innovative solutions, and best practices needed to drive organisational success and resilience in an increasingly complex and interconnected business environment. This year’s theme, “Driving Success: Integrating GRC with Strategy Execution in a Hyperconnected World,” focuses on empowering organizations to navigate challenges and seize opportunities through a holistic, connected approach. Join us in Riyadh on 19 – 20 January or in Dubai on 22 – 23 January 2025, to gain insights from industry leaders and take your GRC strategy to the next level. Ready to transform your approach? Register at https://gprcsummit.com/and secure your spot.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

GRC Leadership Roundtable Dinner
2025-10-30 17:00 - 20:00 (Africa/Johannesburg)
INVITE ONLY

We’re looking forward to welcoming you to the Cura Roundtable Dinner next week! It’s set to be an evening of great conversation, meaningful connections, and delicious food.

Date: Thursday, 30 October 2025

Time: 17:00 – 20:00 SAST

Venue: The Grillhouse Rosebank – Shop 70, The First Hyatt Shopping Centre, Rosebank, 2196

This exclusive evening of insight, conversation, and connection with fellow leaders in the GRC space is designed to foster open dialogue around the evolving challenges and subtle shifts shaping GRC practices across Africa.

Special Feature: Fireside chat and rapid-fire Q&A with Michael Rasmussen, a global GRC authority diving into what’s next for data-driven governance.

The conversation will be moderated by Kudzai Chaka, Compliance Risk Management Expert whose sharp facilitation will ensure a dynamic and thought-provoking exchange.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

The intuitive, flexible GRC platform that delivers efficiency and value – your way. Driven by the belief that technology should be an enabler—not a barrier—we created the CoreStream GRC platform: a flexible, no-code solution that empowers organizations to design their perfect GRC system with our expert team. You tell us what you need, and we deliver it—quickly and without unnecessary complexity. Using pre-built, customizable features, it’s as intuitive and versatile as building with Lego bricks – the solutions are limitless. With seamless scalability, an intuitive interface, and rapid implementation, CoreStream GRC turns GRC from an administrative burden into a powerful enabler for your business. Trusted by leading organizations like the BBC, Deloitte, NHS, PwC Middle East and Shell Energy, CoreStream GRC consistently delivers real, measurable value for all your risk, and compliance management needs.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

COMPLYConnect | London 2025
2025-11-04 16:00 - 20:00 (Europe/London)
REGISTER

Join us for an exclusive gathering of compliance leaders as we explore the evolving landscape of oversight, culture, and non-financial misconduct. Hear first-hand from industry leaders, discover the latest insights from our global survey, and connect with peers over drinks in a relaxed setting.

Why Attend?

Expand Your Network – Meet and mingle with the COMPLY Community of regulatory compliance professionals based in London.

Discuss the hottest topics in regulatory compliance – Explore the FCA’s focus on non-financial misconduct, and what it means for your accountability and employee monitoring programmes, and your compliance culture.

Explore key Innovations – Learn about innovative ways your peers are leveraging COMPLY’s technology.

Agenda at a glance

4:00 – 4:30 PM: Registration and welcome refreshments

4:30 – 4:45 PM: Welcome Remarks

4:45 – 5:15 PM: The State of Compliance 2025: explore the results of our recent global survey of 600+ compliance leaders, with expert insights from GRC commentators.

5:15 – 6:00 PM: Redefining Risk: How Modern Compliance Teams are Rethinking Accountability, Culture and Non-Financial Misconduct: our panel of industry experts will discuss the FCA’s focus on non-financial misconduct, and how it relates to accountability frameworks, compliance culture and employee code of ethics monitoring. Expect practical insights on the tools and systems you can leverage to meet the regulatory challenge.

6:00 – 8:00 PM: Drinks, Canapes, and Networking

Seats are limited for this exclusive event. Register now to secure your spot!

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host . . .

At COMPLY, we pride ourselves on being the champion for compliance professionals. Through technology, consulting and education, we help clients navigate the ever-changing regulatory environment, end to end. Our deep industry expertise – which includes expansive knowledge in technology enablement and regulatory compliance protocols and processes (SEC, FINRA, FCA, State) – supports more than 5,000 clients in more than 60 countries, including investment banks, private funds (including private equity firms and hedge funds), broker-dealers, registered investment advisers, insurance, and other financial services firms.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

UK Corporate Governance Code by Design, LONDON
2025-11-06 08:00 - 16:30 (Europe/London)
REGISTER

Blueprint for Risk & Internal Control Effectiveness Under Provision 29

The upcoming implementation of Provision 29 in the UK Corporate Governance Code marks the most significant shift in UK risk and control expectations in over a decade. For the first time, boards of UK-listed companies will be required to affirm and disclose the ongoing effectiveness of their risk management and internal control frameworks—not just at a point in time, but continuously, in practice and in principle.

This is not just a compliance obligation. It’s a call to rethink how organizations embed risk and control into strategy, operations, and decision-making.

UK Corporate Governance Code by Design delivers a structured, strategic, and scalable approach to operationalizing Provision 29. This interactive workshop equips attendees with a practical blueprint to design, implement, and sustain a modern risk and control framework—one that is aligned to objectives, responsive to change, and credible in the eyes of regulators, investors, and the board.

Provision 29 is not SOX. It is broader, more principles-based, and embedded in corporate governance and performance expectations. Risk and control must no longer live in isolation—they must become part of how the business thinks, decides, and operates.

This workshop helps organizations:

Understand the intent and expectations of Provision 29

Integrate risk and internal control with strategy, performance, and culture

Establish clear ownership and accountability across all lines of the business

Build a resilient and agile control environment that can adapt and evolve

Deliver board-ready assurance that is meaningful, timely, and defensible

Workshop Objectives

Attendees will leave with practical approaches to:

Interpret the strategic implications of Provision 29 in the broader governance landscape

Map risk and internal control to objectives, value drivers, and accountability structures

Embed a risk-informed approach across operations—not just within second-line functions

Clarify roles and responsibilities across the Three Lines Model

Design risk and control lifecycles that align with materiality, agility, and business change

Develop information and technology architectures that enable real-time monitoring, integrated reporting, and effective board assurance

Demonstrate ongoing effectiveness with data, context, and clarity

Benefits to Attendees

Gain clarity on the key components of Provision 29 and how they compare to other regimes (e.g., SOX, UK SOX, COSO)

Build a risk and control framework that is adaptive, forward-looking, and performance-linked

Understand what regulators, shareholders, and boards expect from “effectiveness” and how to evidence it

Learn how to engage business leaders, internal audit, compliance, and IT in a common model

Explore how GRC technology, taxonomy, and data can support visibility, ownership, and accountability

Walk away with a practical roadmap to begin implementing risk and control by design

Who Should Attend?

Board Members & Company Secretaries

Chief Risk Officers & Risk Managers

Internal Control and Assurance Leads

GRC Professionals & Compliance Officers

Internal Auditors

Operational Risk & Strategy Leaders

Transformation & Program Leaders

IT and GRC Technology Architects

Workshop Agenda

Part 1: Risk & Control by Design – The New Governance Imperative

Understanding the role of internal control in today’s governance expectations

Unpacking Provision 29: key requirements, intentions, and implications

Differences between UK Corporate Governance Code and SOX-style programs

Why effectiveness must be continuous, dynamic, and demonstrable

Interactive Exercise: Mapping Provision 29 into your organization’s risk and control landscape

Part 2: Breaking Silos – Building a Federated & Business-Integrated Model

Creating enterprise-wide alignment of risk and control responsibilities

Connecting control functions across the Three Lines

Designing federated oversight through Risk & Control Committees, shared taxonomies, and common assurance models

Interactive Exercise: Building your federated risk and control governance blueprint

Part 3: The Risk & Control Lifecycle – From Identification to Integrated Assurance

Designing a practical risk-informed control lifecycle

Rationalising and aligning controls with strategic and operational risks

Monitoring effectiveness through key indicators, thresholds, and events

Building assurance models that combine first-line accountability with second- and third-line validation

Interactive Exercise: Mapping your control lifecycle across business functions

Part 4: Architecting for Visibility, Agility, and Accountability

Defining your risk and control taxonomy for relevance and consistency

Designing information architectures that connect objectives, risks, controls, issues, and assurance

Leveraging GRC technology for automation, data integration, and board-level reporting

Reporting effectiveness with confidence: what boards and investors expect to see

Interactive Exercise: Designing your integrated risk and control information ecosystem

This workshop empowers you to build a risk and internal control environment that is aligned, adaptive, and accountable — a design blueprint that turns Provision 29 into an opportunity for performance, resilience, and trust.

Let us help you go beyond compliance — and lead with confidence.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

Mitratech has a 35-year history as a leader in providing technology and services that empower organizations to manage risks, increase efficiency, control costs, and scale for the future.

The lines continue to blur across Legal & Claims, Risk & Compliance, and Human Resources (HR)— and Mitratech is the trusted partner in driving clarity and collaboration across all these functions with cloud-based, automation-driven solutions.

Scalable, flexible, and highly configurable by design, Mitratech’s Governance, Risk and Compliance suite offers end-to-end, top-to-bottom risk and compliance management capabilities, spanning policy management, enterprise risk management, data privacy, AI governance, third-party risk management, and more.

Whether organizations are just starting to implement GRC processes or looking to deploy next-generation programs across their full enterprise, Mitratech simplifies the process with cross-industry applications, convenient out-of-the-box templates, and relevant analytics to empower data-driven business outcomes.

Mitratech serves over 24,000 organizations worldwide, spanning more than 160 countries.

For more information, please visit: www.mitratech.com

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Automating Compliance: How AI Orchestrates Integrity & Culture
2025-11-06 16:00 - 17:00 (Europe/London)
REGISTER

Organizations today are caught in a perfect storm of increasing regulatory demands, shifting global requirements, and mounting pressure for real-time assurance. Traditional compliance programs—built on manual processes, static reports, and disconnected workflows—can no longer keep pace. The future of compliance lies in orchestration: intelligently integrating governance, risk management, and compliance (GRC) with automation and AI to deliver continuous monitoring, proactive insights, and business-aligned outcomes.

In this webinar, Michael Rasmussen, the “Father of GRC,” explores how GRC Orchestration and modern technologies transform compliance from a reactive obligation into a strategic capability. We’ll examine how AI augments compliance workflows, enables real-time assurance, and helps organizations stay ahead of evolving regulations. From digital twins and agentic AI to automated controls and continuous monitoring, this session provides a roadmap for embedding compliance into the fabric of business decision-making.

Learning Objectives

‍Understand the role of orchestration in modern compliance. Explore how GRC Orchestration integrates governance, risk, and compliance into cohesive workflows that span business units, technology systems, and third-party ecosystems.‍

Identify how AI transforms compliance and risk management. Learn practical applications of AI for automating compliance tasks, improving control monitoring, and delivering real-time assurance across complex organizations.‍

Apply best practices for regulatory agility. Gain insights into building a compliance program that can anticipate and adapt to shifting regulations, leveraging automation to reduce burden and improve responsiveness.‍

Reframe compliance as strategic value, not just obligation. Recognize how orchestrated compliance enhances organizational resilience, trust, and performance while reducing the costs of manual oversight.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Decision Focus develops software for Governance, Risk and Compliance. Since 2004, Decision Focus has provided the world’s enterprises with software and services. We’ve taken our years of knowledge and experience to implement new software for Risk and Compliance which is has become leading in enterprise GRC.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Gameday Ready, LONDON
2025-11-07 09:00 - 13:00 (Europe/London)
REGISTER

The threats that matter most rarely arrive alone.One opens the door. Another walks through it.

With the rapid adoption of AI – from operations to cyber warfare, the next severe but plausible event won’t just disrupt your company’s services… and it won’t be a scenario you’ve experienced before.

Gameday Ready equips cyber and resilience teams with insights and frameworks to navigate uncharted crisis territory.

In this immersive event, you’ll:

Gain early intelligence on emerging threat patterns from industry executives who are at the forefront of managing threats and incidents including dark AI.

Practice decision-making through simulations that will provide you the insight you need to prepare your teams.

Develop strategic relationships with peers facing similar regulatory and reputational pressures.

Register today and mark your calendar! We’ll be in touch with event updates and additional details in the coming weeks.

Agenda

01:00 pm: Event ends

09:00 am: Registration

09:30 am: Welcome and opening remarks

09:40 am: Microsimulation Experience

10:30 am: Break

10:45 am: Fireside chat

11:45 am: Break

12:00 pm: Microsimulation Experience

12:50 pm: Wrap up + Close

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

iluminr helps organizations prepare for what’s next with simulations. Whether the risk is cyber, physical, operational, or third-party, iluminr turns static plans into practiced, repeatable action. Combining Microsimulations, full-scale tabletop simulations, and expert-led exercises, iluminr builds adaptive muscle across your organization. From phishing attempts to facility breaches, ransomware to regulatory pressure, iluminr enables security, IT, and resilience leaders to hardwire readiness into daily operations. With mass communications, smart playbooks, and critical response analytics, iluminr makes complex risk programs simple, scalable, and habit-forming.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Supplier Risk Resolution: Monitor and Manage Risk at the Scale of Your Supply Chain, LONDON
2025-11-10 13:00 - 16:00 (Europe/London)
REGISTER

Join us for an in-person workshop with fellow Procurement and Supplier Risk professionals. You will gain a best-practice perspective on third-party risk management; from information to action.

Guided by respected Analyst Michael Rasmussen, you will explore stakeholder-sensitive ways to align risk controls and reporting with strategic priorities. All backed by a demonstrable ROI; commercially and in support of broader objectives.

You will discuss a range of assessment, monitoring and remediation techniques designed to safeguard your business effectively. Whatever your existing level of risk visibility and data management, you will hear how other companies incorporate continuous controls into supplier workflows.

Learn how to clarify your risk goals, identify data requirements, communicate with stakeholders, monitor emerging concerns and address compliance gaps efficiently at the scale of your supply chain. Supported by reporting that reflects your business objectives.

Agenda

Part 1: Supplier Risk Management by Design

Why risk management matters, how companies get it wrong and ways Procurement can lead the way in supplier GRC.

Why supplier risk management matters for Procurement

Suppliers in disarray: how companies mismanage third parties (and why they’re exposing themselves to risk)

Current drivers & trends pressuring companies in third party management

Procurement’s role in governance, risk management, and compliance

Part 2: The Blueprint for Effective Risk Resolution

A best-practice look at defining your risk strategy, engaging your stakeholders, aligning to objectives and planning for success.

Blueprint for effective risk resolution

Assemble your supplier risk committee: aligning stakeholders around effective controls

Develop your supplier risk charter: defining a structure to govern third party relationships

Plan for success: document your processes to deliver strategic risk management

Part 3: Managing Suppliers and their Data

Great data management is at the heart of supplier risk oversight. Explore actionable ways to keep up-to-date risk visibility central to your data strategy.

Managing suppliers from onboarding to offboarding

Risk-aware supplier identification & onboarding

Continuous monitoring of evolving risks

Communicating with suppliers to maintain risk controls

Objective-driven metrics & reporting

Supplier re-evaluation and offboarding

Part 4: Using Technology to Resolve Risks at Scale

Enable your strategy by selecting a solution that directly supports your goals, then assemble a value-driven business case that aligns with broader priorities.

The power of technology-enabled oversight

A blueprint for managing supplier information (with risk at its core)

Types of supplier risk data and how they can be integrated into your processes

Components and requirements for supplier information architecture

The broad range of technology available (and what best serves your business)

Building your business case: articulating the value of supplier risk management

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Join us for an in-person workshop with fellow Procurement and Supplier Risk professionals. You will gain a best-practice perspective on third-party risk management; from information to action.

Guided by respected Analyst Michael Rasmussen, you will explore stakeholder-sensitive ways to align risk controls and reporting with strategic priorities. All backed by a demonstrable ROI; commercially and in support of broader objectives.

You will discuss a range of assessment, monitoring and remediation techniques designed to safeguard your business effectively. Whatever your existing level of risk visibility and data management, you will hear how other companies incorporate continuous controls into supplier workflows.

Learn how to clarify your risk goals, identify data requirements, communicate with stakeholders, monitor emerging concerns and address compliance gaps efficiently at the scale of your supply chain. Supported by reporting that reflects your business objectives.

Workshop Host/Sponsor

apexanalytix revolutionized recovery audit with advanced analytics and the introduction of firststrike overpayment and fraud prevention software. Today, apex also leads the world in supplier management innovation with apexportal and smartvm, now the most widely used supplier onboarding and compliant master data management solution in global procure to pay processes. With over 250 clients in the Fortune 500 and Global 2000, apex is dedicated to providing companies and their suppliers with the ultimate supplier management experience. To support our commitment to innovation, we have built a highly experienced team of associates in key markets around the globe. Together we value performance, honor a diversity of perspectives, experiences and cultures, nurture candor, give back to the communities where we live and work, and have fun working together. For more information, visit www.apexanalytix.com or join our LinkedIn apexanalytix Community.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Resilient Supply Chains – An Executive Roundtable Dinner
2025-11-11 18:30 - 22:00 (Europe/London)
INVITE ONLY

This exclusive roundtable dinner brings together senior compliance, risk and procurement leaders for an evening of peer exchange and networking. Join our hosts, Kyle Martin, NAVEX VP of Risk Management and industry analyst Michael Rasmussen, to explore how evolving European and UK regulations are raising expectations for supply chain transparency, documentation and resilience.

Why attend this roundtable dinner

Engage in peer discussion. Share experiences and insights with senior compliance, risk, and procurement leaders facing similar supply chain challenges.

Learn from thought leaders. Hear perspectives from Kyle Martin, VP of Risk Management at NAVEX and Michael Rasmussen, The GRC Pundit and industry analyst.

Strengthen your network. Connect with a select group of executives over an intimate dinner at one of London’s most iconic venues.

An invitation-only evening

Supply chain governance is under greater scrutiny than ever before. With regulations like the EU’s duty of vigilance, CSRD, and the UK’s Economic Crime Act, leaders are asked to prove transparency and accountability across their supplier networks.

This private dinner brings together senior executives to discuss these challenges candidly, exchange best practices, and explore how to future-proof supply chain oversight.

Discussion themes include:

How European and UK regulations are raising expectations for supplier accountability

Balancing commercial pressure with compliance obligations

Building defensible documentation and audit-ready oversight

Creating resilient, transparent supply chains that win stakeholder trust

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

At NAVEX, we believe a thriving future begins with smart governance, risk and compliance decisions today. For more than 35 years, we’ve worked with global organizations to provide a comprehensive suite of solutions to manage their governance, risk and compliance programs. That simply means our role is to ensure our customers are equipped with the right tools to develop an educated, ethical risk management culture within their organization. Trusted by 13,000 customers and still growing, 73 million people and employees supported worldwide, our priority is to ensure our customers feel confident on their journey to building a successful risk and compliance management program. Headquartered in Portland, Oregon, NAVEX has four other offices worldwide and thousands of people working to help transform how modern risk and compliance departments are built and run. Our other locations are in London, Charlotte, North Carolina; Frankfurt and Bangalore.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

#RISK Europe 2025, LONDON
2025-11-12 00:00 - 2025-11-13 23:59 (Europe/London)
REGISTER

As #RISK London continues to grow, we’re excited to announce its rebranding to #RISK Europe.

This year’s event, our fourth, promises to be the largest yet, attracting over 8,000 professionals from across the GRC, Risk, RegTech, Privacy, and Security sectors.

By expanding our reach to a pan-European audience, we aim to create a truly international platform for knowledge sharing, networking, and innovation.

Our visitor marketing campaign will build on the success of previous years and specifically target senior decision makers from, France, Netherlands, Germany, Switzerland, Spain, Italy and Scandinavia.

With millions of interactions with over 50,000, engaged, end-users a year via in-person and digital events, newsletters, website visitors and email shots we are able to make informed decisions based on data analysis as to what hot topics should feature on our agenda.

This data driven approach combined with ongoing interaction with subject matter experts means that there is usually standing room only at our in-person events.

Keynote & Host Michael Rasmussen

Michael Rasmussen

Michael Rasmussen is an internationally recognized thought leader and pioneer in governance, risk management, and compliance (GRC). With over 30 years of experience, he has extensive expertise in enterprise GRC strategy and processes supported by robust information and technology architectures. Known as the “Father of GRC,” Michael was the first to define and model the GRC market in February 2002 while at Forrester, setting the foundation for the modern understanding of GRC.

About GRC World Forums

Our in-person events and livestream experiences provide learning, networking and benchmarking opportunities to governance, risk and compliance professionals.

For speakers & contributors we provide a platform and global audience.

For viewers, attendees and readers our content provides invaluable insight and analysis.

For vendors we optimise every stage of the ‘marketing funnel’

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Where GRC conversations continue: dinner after #RISK Europe
2025-11-12 18:00 - 21:00 (Europe/London)
INVITE ONLY

After a packed first day at #RISK Europe at ExCeL London, it’s time to step away from the buzz of the exhibition hall and join CoreStream GRC for an evening of real conversation, real connection, and real value.

We’re hosting an exclusive Community Dinner for Governance, Risk & Compliance leaders with a complimentary three-course experience designed to challenge conventional thinking, deepen relationships, and explore what’s next for GRC.

Why attend a CoreStream GRC community dinner?

Let’s be honest, some of the most meaningful insights don’t happen in conference sessions. They happen over dinner, with a glass of wine, and a table full of peers who get it.

This dinner is for those who want to:

Go beyond the PowerPoint and dig into the real takeaways from #RISK Europe.

Challenge the status quo in GRC and explore new approaches with industry leaders.

Connect with a curated group of professionals who are shaping the future of governance, risk, and compliance.

A previous attendee put it best:

“Thank you again for last night. Great food and drink – and I had some very engaging conversations with other professionals in the field. Very much appreciated.” – Group Head of Risk, Internal Controls, LSE listed company

Who’s attending CoreStream GRC’s #RISK Europe community dinner?

You’ll be dining with expert leaders in GRC across various sectors, including:

Paul Cadwallader – GRC Strategy Director at CoreStream GRC, former Deloitte Partner

Lionel Matsuya – Head of Client Solution Design at CoreStream GRC, ex PwC GRC expert

Jamie March – Independent GRC Adviser

Michael Rasmussen – GRC Pundit and Analyst at GRC 2020 Research, who coined the term “GRC” while at Forrester

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

The intuitive, flexible GRC platform that delivers efficiency and value – your way. Driven by the belief that technology should be an enabler—not a barrier—we created the CoreStream GRC platform: a flexible, no-code solution that empowers organizations to design their perfect GRC system with our expert team. You tell us what you need, and we deliver it—quickly and without unnecessary complexity. Using pre-built, customizable features, it’s as intuitive and versatile as building with Lego bricks – the solutions are limitless. With seamless scalability, an intuitive interface, and rapid implementation, CoreStream GRC turns GRC from an administrative burden into a powerful enabler for your business. Trusted by leading organizations like the BBC, Deloitte, NHS, PwC Middle East and Shell Energy, CoreStream GRC consistently delivers real, measurable value for all your risk, and compliance management needs.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Beyond the #RISK Expo: Corporater Executive GRC Dinner
2025-11-13 18:00 - 21:00 (Europe/London)
INVITE ONLY

After a full first day at #RISK Europe (ExCeL London), step out of the noise and into a room where the real conversations happen. Corporater is hosting a private, three-course Executive GRC Dinner for senior leaders who want to compare notes, pressure-test ideas, and explore what’s next in governance, performance, risk, and compliance.

Why join this Corporater community dinner?

Because the most useful insights rarely fit on a slide. They emerge over dinner—among peers who face the same pressures and are shaping similar transformations.

At this table, we will:

Move beyond the PowerPoint to what really resonated (and what didn’t) from Day 1 at #RISK.

Challenge the status quo: integrated performance + risk, operational resilience at scale, AI’s practical role in GRC, and board-ready reporting that drives decisions.

Trade playbooks on cross-functional operating models, change management, and measurable outcomes.

Who will be there

A curated group of executives and practitioners across financial services, manufacturing, energy, and the public sector—alongside members of the Corporater leadership team and guest host Michael Rasmussen (GRC 20/20; “the GRC Pundit”). Expect an evening focused on ideas and impact, not pitches.

Attendance

This is an invite-only experience with limited seating to preserve the quality of discussion.

Workshop Host . . .

Corporater is a global software company that enables medium and large organizations worldwide to manage their business with integrated software solutions for governance, performance, risk, and compliance (GPRC) built on a single platform. Corporater provides the world’s leading Business Management Platform which offers ‘One View, One Platform’ for a holistic and complete overview of business. Our signature solutions include Integrated Risk Management, Enterprise Risk Management, Operational Risk Management, Business Continuity Management, Internal Audit Management, Operational Resilience, Regulatory and Organizational Compliance Management, Data Privacy Management, Project and Portfolio Management, Performance Management, Strategy Management, and others. All Corporater solutions can be used straight out of the box as point solutions, or in combination with other Corporater solutions to form a holistic GRC program. Corporater solutions are used by top organizations in various industries and functions, including state and local government, energy, education, banking and finance, oil and gas, shipping, manufacturing, healthcare, communications, technology, logistics, food and agriculture, media, and non-profit.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

GRC Summit US 2025
2025-11-17 00:00 - 2025-11-18 23:59 (Africa/Johannesburg)
REGISTER

What to Expect at GRC Summit 2025

The 2025 GRC Summit, hosted by MetricStream, is a premier annual event that brings together top experts from government and business to explore the latest strategies in Governance, Risk, and Compliance (GRC). Join over 200 professionals to gain insights from thought leaders, engage in interactive discussions, and discover best practices in risk management, compliance, cybersecurity, AI, and more.

This year’s Summit will spotlight how AI is transforming the GRC landscape—making GRC simplified and outcomes amplified. Don’t miss the opportunity to elevate your GRC programs and turn risk into a strategic advantage.

Learn from Global Thought Leaders and Experts.

Engage Deeply in Our Interactive Workshops.

Gain Insights from Real-World GRC Case Studies.

Access Exclusive Insights from Keynote Presentations.

Learn about harnessing AI for risk and compliance.

Keep Up-To-Date with The Latest Trends in GRC.

Network with Top Industry Professionals.

Explore MetricStream’s Products and Solutions In-Depth.

Earn Continuing Professional Development (CEU) Credits.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Conference Host . . .

MetricStream simplifies Governance, Risk, and Compliance (GRC) with purpose-built AI-first Risk, Compliance, Audit, CyberGRC, Third-party Risk, and Resilience products on a single low-code / no-code GRC cloud platform. Trusted by over 1 million GRC professionals across 35+ countries, our industry-specific products and AI agents help businesses successfully manage audits, avoid compliance violations and fines, reduce risk exposure, and strengthen resilience. MetricStream is headquartered in San Jose, California, with operations and offices around the globe. More information is available at www.metricstream.com

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Risk & Resilience Management by Design, LAS VEGAS
2025-11-17 13:00 - 17:30 (America/Los_Angeles)
REGISTER

Blueprint for Business-Integrated, Agile, and Context-Aware Risk & Resilience Programs

Gone are the days when business operations were linear, local, and predictable. Today’s organizations face exponential change and increasing complexity driven by globalization, technology, regulatory intensity, distributed workforces, data proliferation, and accelerated competitive pressure. In this environment, managing risk and enabling resilience has become a strategic necessity.

Yet many organizations continue to treat risk management as a siloed compliance obligation and resilience as a disconnected business continuity function. The result? Gaps in preparedness, reactive responses, and missed opportunities to align risk-taking with performance and purpose.

Risk & Resilience Management by Design is a hands-on, interactive workshop that equips attendees with the frameworks, tools, and strategies needed to design and operationalize a risk and resilience program that is integrated, intelligent, and future-ready. This workshop delivers a structured and scalable approach to managing uncertainty and disruption in a way that protects performance, supports agility, and reinforces organizational trust.

Today’s business ecosystem demands 360° contextual awareness—of objectives, risks, interdependencies, and external threats. Organizations must move beyond checklists and departmental metrics to adopt a unified, federated approach that aligns risk, continuity, and resilience efforts across functions and operations.

This workshop empowers organizations to:

Understand and adapt to the evolving risk and resilience landscape

Connect risk management with business strategy, decision-making, and performance

Build a lifecycle-based approach to risk and resilience that reflects real-world complexity

Develop governance structures and technologies that foster coordination, ownership, and accountability

Deliver continuous assurance of resilience to boards, regulators, and stakeholders

Workshop Objectives

Attendees will take back practical approaches to:

Define a complete and continuous lifecycle for managing risk and resilience

Establish federated governance, strategic alignment, and cross-functional accountability

Align risk and resilience efforts with objectives, operations, and business change

Monitor and respond to both internal and external risks in real-time

Enable consistent and scalable risk/resilience processes across departments

Track critical risks, treatments, and resilience activities with transparency and traceability

Facilitate board- and regulator-ready assurance on organizational resilience

Identify and resolve material gaps, duplications, or inefficiencies in risk and resilience programs

Build a business case for risk and resilience investment tied to strategic outcomes

Leverage technology for risk visibility, scenario planning, monitoring, and reporting

Benefits to Attendees

Understand how to create a risk and resilience framework that is integrated, strategic, and scalable

Explore different models of risk/resilience maturity and identify what fits your organization

Build effective governance structures (committees, charters, plans) to unify efforts

Improve alignment between risk-taking, decision-making, and operational capability

Examine how to bring business continuity and operational resilience into the broader risk discussion

Learn how to benchmark effectiveness and communicate outcomes to leadership

Explore the role of enabling technology and data in a dynamic and proactive resilience program

Who Should Attend?

Chief Risk Officers & Risk Managers

Business Continuity & Resilience Leaders

Operational Risk and ERM Professionals

Compliance & GRC Executives

Internal Audit and Assurance Teams

Strategy, Transformation, and Program Managers

Technology Architects supporting GRC and BCM functions

Board Advisors and Governance Professionals

Workshop Agenda

Part 1: Risk & Resilience by Design – Why It Matters Now

Understanding how risk and resilience impact business strategy and performance

Exploring the disarray: silos, fragmentation, and blind spots in current practices

Risk exposure in a volatile world: where resilience gaps become existential threats

Current global trends, drivers, and regulatory mandates shaping risk/resilience integration

Interactive Exercise: Mapping risk and resilience maturity in your organization

Part 2: Risk & Resilience Governance – Building the Foundation

Establishing a federated governance model for integrated risk and resilience

Creating a Risk & Resilience Management Committee with cross-functional authority

Drafting a Risk & Resilience Charter that aligns mission, roles, and oversight

Developing a strategic plan that connects risk resilience to business objectives

Interactive Exercise: Designing your governance framework and charter elements

Part 3: Risk & Resilience Lifecycle – Managing in Context of Change

Risk and resilience lifecycle: from identification to assurance

Monitoring the external and internal environment for threats and disruptions

Conducting risk assessments, BIAs, and forward-looking scenario planning

Engaging business units in treatment planning and ongoing response preparedness

Reporting and evaluating: turning data into assurance and board-ready insights

Interactive Exercise: Building your risk and resilience lifecycle

Part 4: Risk & Resilience Architecture – Enabling Visibility & Agility

Designing an information architecture that supports holistic insight and action

Integrating data from operations, strategy, compliance, and continuity

Establishing taxonomies, workflows, and linkages between risks, objectives, and controls

Exploring technology architecture: what tools are needed, what to prioritize

Building the business case: articulating ROI and strategic value to leadership

Interactive Exercise: Mapping your risk and resilience information ecosystem

This workshop enables you to create a risk and resilience capability that is proactive, adaptive, and aligned with your organization’s mission. It provides the design blueprint needed to move beyond fragmented processes and into a state of readiness, reliability, and trust.

Your objectives are too important—and your risks too complex—to leave resilience to chance.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

MetricStream simplifies Governance, Risk, and Compliance (GRC) with purpose-built AI-first Risk, Compliance, Audit, CyberGRC, Third-party Risk, and Resilience products on a single low-code / no-code GRC cloud platform. Trusted by over 1 million GRC professionals across 35+ countries, our industry-specific products and AI agents help businesses successfully manage audits, avoid compliance violations and fines, reduce risk exposure, and strengthen resilience. MetricStream is headquartered in San Jose, California, with operations and offices around the globe. More information is available at www.metricstream.com

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

How Modern GRC & External Intelligence Shape the Future of Risk
2025-12-03 15:00 - 16:00 (Europe/London)
REGISTER

As the pace of change accelerates, risk management leaders are being challenged to modernize their programs and rethink what “good” looks like.

Join experts from Deloitte, Unify Today, GRC 20/20, and Signal AI to see how forward-thinking organizations are transforming Governance, Risk, and Compliance (GRC) from reactive oversight into a source of proactive, intelligence-driven decision-making.

What You’ll Learn:

The current state of GRC & Risk Management, and what defines a future-ready GRC program

Specific use cases and practical examples of modern GRC solutions

How to make the business case for GRC not as a cost, but a way to drive better business outcomes

Our Panel of experts include:

Michael Rasmussen, GRC Analyst & Pundit at GRC 20/20 Research, LLC,

Saret van Loggerenberg, Senior Manager | Regulatory, Risk and Forensics at Deloitte

Wesley Govender, Partner | Regulatory, Risk and Forensics at Deloitte

Warren Green, Global Lead | GRC Transformation at Unify Today

David Pepper, VP – Risk Solutions at Signal AI

Don’t miss this timely conversation on Wednesday, December 3, where we’ll explore how GRC transformation, when combined with external risk intelligence, creates the foundation for more resilient, adaptive, and forward-looking enterprises.

Secure your spot today and start building a more adaptive, data-driven risk management foundation for 2026 and beyond.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

Signal AI, a Reputation and Risk intelligence company, helps businesses make sense of the outside world. Using the proprietary AI-powered External Intelligence platform, organizations can spot critical signals in the external noise, allowing them to get ahead of risk and opportunity and make confident decisions. Our platform crunches huge amounts of information from the world’s content and provides timely insight into trends, patterns, and unknown unknowns to help business leaders make more informed decisions. Signal AI serves Fortune 500 companies and is building an innovative, inclusive, and enduring company to transform the way businesses make decisions.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Risk & Resilience Management by Design, MUNICH
2025-12-04 08:00 - 16:30 (Europe/Berlin)
REGISTER

Blueprint for Business-Integrated, Agile, and Context-Aware Risk & Resilience Programs

Gone are the days when business operations were linear, local, and predictable. Today’s organizations face exponential change and increasing complexity driven by globalization, technology, regulatory intensity, distributed workforces, data proliferation, and accelerated competitive pressure. In this environment, managing risk and enabling resilience has become a strategic necessity.

Yet many organizations continue to treat risk management as a siloed compliance obligation and resilience as a disconnected business continuity function. The result? Gaps in preparedness, reactive responses, and missed opportunities to align risk-taking with performance and purpose.

Risk & Resilience Management by Design is a hands-on, interactive workshop that equips attendees with the frameworks, tools, and strategies needed to design and operationalize a risk and resilience program that is integrated, intelligent, and future-ready. This workshop delivers a structured and scalable approach to managing uncertainty and disruption in a way that protects performance, supports agility, and reinforces organizational trust.

Today’s business ecosystem demands 360° contextual awareness—of objectives, risks, interdependencies, and external threats. Organizations must move beyond checklists and departmental metrics to adopt a unified, federated approach that aligns risk, continuity, and resilience efforts across functions and operations.

This workshop empowers organizations to:

Understand and adapt to the evolving risk and resilience landscape

Connect risk management with business strategy, decision-making, and performance

Build a lifecycle-based approach to risk and resilience that reflects real-world complexity

Develop governance structures and technologies that foster coordination, ownership, and accountability

Deliver continuous assurance of resilience to boards, regulators, and stakeholders

Workshop Objectives

Attendees will take back practical approaches to:

Define a complete and continuous lifecycle for managing risk and resilience

Establish federated governance, strategic alignment, and cross-functional accountability

Align risk and resilience efforts with objectives, operations, and business change

Monitor and respond to both internal and external risks in real-time

Enable consistent and scalable risk/resilience processes across departments

Track critical risks, treatments, and resilience activities with transparency and traceability

Facilitate board- and regulator-ready assurance on organizational resilience

Identify and resolve material gaps, duplications, or inefficiencies in risk and resilience programs

Build a business case for risk and resilience investment tied to strategic outcomes

Leverage technology for risk visibility, scenario planning, monitoring, and reporting

Benefits to Attendees

Understand how to create a risk and resilience framework that is integrated, strategic, and scalable

Explore different models of risk/resilience maturity and identify what fits your organization

Build effective governance structures (committees, charters, plans) to unify efforts

Improve alignment between risk-taking, decision-making, and operational capability

Examine how to bring business continuity and operational resilience into the broader risk discussion

Learn how to benchmark effectiveness and communicate outcomes to leadership

Explore the role of enabling technology and data in a dynamic and proactive resilience program

Who Should Attend?

Chief Risk Officers & Risk Managers

Business Continuity & Resilience Leaders

Operational Risk and ERM Professionals

Compliance & GRC Executives

Internal Audit and Assurance Teams

Strategy, Transformation, and Program Managers

Technology Architects supporting GRC and BCM functions

Board Advisors and Governance Professionals

Workshop Agenda

Part 1: Risk & Resilience by Design – Why It Matters Now

Understanding how risk and resilience impact business strategy and performance

Exploring the disarray: silos, fragmentation, and blind spots in current practices

Risk exposure in a volatile world: where resilience gaps become existential threats

Current global trends, drivers, and regulatory mandates shaping risk/resilience integration

Interactive Exercise: Mapping risk and resilience maturity in your organization

Part 2: Risk & Resilience Governance – Building the Foundation

Establishing a federated governance model for integrated risk and resilience

Creating a Risk & Resilience Management Committee with cross-functional authority

Drafting a Risk & Resilience Charter that aligns mission, roles, and oversight

Developing a strategic plan that connects risk resilience to business objectives

Interactive Exercise: Designing your governance framework and charter elements

Part 3: Risk & Resilience Lifecycle – Managing in Context of Change

Risk and resilience lifecycle: from identification to assurance

Monitoring the external and internal environment for threats and disruptions

Conducting risk assessments, BIAs, and forward-looking scenario planning

Engaging business units in treatment planning and ongoing response preparedness

Reporting and evaluating: turning data into assurance and board-ready insights

Interactive Exercise: Building your risk and resilience lifecycle

Part 4: Risk & Resilience Architecture – Enabling Visibility & Agility

Designing an information architecture that supports holistic insight and action

Integrating data from operations, strategy, compliance, and continuity

Establishing taxonomies, workflows, and linkages between risks, objectives, and controls

Exploring technology architecture: what tools are needed, what to prioritize

Building the business case: articulating ROI and strategic value to leadership

Interactive Exercise: Mapping your risk and resilience information ecosystem

This workshop enables you to create a risk and resilience capability that is proactive, adaptive, and aligned with your organization’s mission. It provides the design blueprint needed to move beyond fragmented processes and into a state of readiness, reliability, and trust.

Your objectives are too important—and your risks too complex—to leave resilience to chance.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

Mitratech has a 35-year history as a leader in providing technology and services that empower organizations to manage risks, increase efficiency, control costs, and scale for the future.

The lines continue to blur across Legal & Claims, Risk & Compliance, and Human Resources (HR)— and Mitratech is the trusted partner in driving clarity and collaboration across all these functions with cloud-based, automation-driven solutions.

Scalable, flexible, and highly configurable by design, Mitratech’s Governance, Risk and Compliance suite offers end-to-end, top-to-bottom risk and compliance management capabilities, spanning policy management, enterprise risk management, data privacy, AI governance, third-party risk management, and more.

Whether organizations are just starting to implement GRC processes or looking to deploy next-generation programs across their full enterprise, Mitratech simplifies the process with cross-industry applications, convenient out-of-the-box templates, and relevant analytics to empower data-driven business outcomes.

Mitratech serves over 24,000 organizations worldwide, spanning more than 160 countries.

For more information, please visit: www.mitratech.com

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Preliminary Findings: Key Insights from the OCEG™ 2025 GRC Technology Strategy Survey
2025-12-09 10:00 - 11:00 (America/Chicago)
REGISTER

Join us for an exclusive preview of preliminary findings from OCEG™’s comprehensive 2025 GRC Technology Strategy Survey, sponsored by Origami Risk, where GRC professionals shared their strategic priorities, technology adoption plans, and investment decisions for the coming years.

Highlights

Discover the GRC technology strategies that drive enterprise integration: Learn which platform approaches, AI implementations, and architecture models top-performing organizations use to maximize cross-functional collaboration and program effectiveness

Understand how leading organizations are leveraging emerging technologies: Explore current trends in artificial intelligence adoption, automated regulatory monitoring, and digital risk management that are transforming GRC operations

Identify critical technology gaps and maturity opportunities in your program: Benchmark your organization’s approach to GRC solution selection, vendor management, and strategic planning against industry leaders to pinpoint areas for technological advancement

Join us for an exclusive preview of preliminary findings from OCEG™’s comprehensive 2025 GRC Technology Strategy Survey, sponsored by Origami Risk, where GRC professionals shared their strategic priorities, technology adoption plans, and investment decisions for the coming years.

This data-driven webinar will reveal critical trends shaping the GRC technology landscape and provide actionable insights to inform your organization’s technological GRC strategic planning.

Speakers:

Mashael Basakran, Content Director, OCEG™

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor

Origami Risk is a leading provider of integrated risk, compliance, safety, healthcare, and P&C insurance SaaS solutions. Highly configurable and completely scalable, Origami delivers a full suite of risk management, Governance, Risk & Compliance (GRC), Environment, Health & Safety (EHS), and insurance core system solutions from a single secure, cloud-based platform accessible via web browser and mobile app. We’ve designed our cloud-based software to meet the needs of multiple sectors within the risk and insurance marketplace. This includes, but is not limited to, Government, Healthcare, Construction, Insurance Carriers, TPAs, Brokers & MGAs, Risk Pools, Retail, Manufacturing, Energy & Waste, and many more. Founded in 2009 by industry veterans who saw the need for a single-version, cloud-based RMIS platform, Origami Risk has expanded its product offerings and grown to become a company of more than 500 employees delivering software and support to over 500 companies around the globe.

Webinar Host

OCEG (formerly the Open Compliance and Ethics Group) is a global, nonprofit think tank and community. We inform, empower, and help advance our 120,000+ members on governance, risk management, and compliance (GRC). Independent of specific professions, we provide resources, education, and certifications to drive leadership and strategy through the application of the OCEG GRC Capability Model™ and Principled Performance®. An OCEG differentiator, Principled Performance enables the reliable achievement of objectives while addressing uncertainty and acting with integrity. Our members include c-suite, executive, management, and other professionals from small and midsize businesses, international corporations, nonprofits, and government agencies. Founded in 2002, OCEG has locations around the globe.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Corporate Risk Management by Design: Navigating Provision 29 of the UK Corporate Governance Code, LONDON
2025-12-09 10:00 - 17:00 (Europe/London)
REGISTER

Why attend

Provision 29 places a new onus on boards to attest to the effectiveness of risk management and internal controls—and to evidence that assurance. This full-day programme brings together internationally recognised GRC authority Michael Rasmussen, CRISAM GRC practitioners, and a real-world case from Nordex to show how to design governance, risk, and control systems that are practical, auditable, and embedded in day-to-day decision-making.

You’ll leave with a clear, actionable view of what Provision 29 requires in practice and how to operationalise it across your organisation.

What you’ll learn

How Provision 29 changes expectations for risk and internal control effectiveness statements

Design principles for a business-integrated risk and control framework

Practical approaches to evidence, assurance mapping, and board reporting

How to align risk/control processes with strategy, performance, and accountability

Lessons from a global rollout of CRISAM GRC at scale

Who should attend

Board members and company secretaries • CROs, CFOs, COOs • Heads of Risk, Internal Audit, Compliance, and Internal Control • Enterprise Architects and Transformation Leaders • Risk and Control Owners

Your day at a glance:

Agenda9:00–10:00 — Arrival, registration & coffee10:00–10:30 — Welcome & opening remarks (CRISAM GRC)10:30–11:15 — Nordex Case Study — Scaling CRISAM GRC Across a Global Organisation11:30–13:00 — Michael Rasmussen WorkshopPart 1: Risk & Control by Design – The New Governance ImperativePart 2: Breaking Silos – Building a Federated & Business-Integrated Model13:00–14:00 — Lunch & networking14:00–16:30 — Michael Rasmussen WorkshopPart 3: The Risk & Control Lifecycle – From Identification to Integrated AssurancePart 4: Architecting for Visibility, Agility, and Accountability16:30–19:00 — CRISAM GRC Ltd. Launch Party — networking

(Subject to minor adjustments.)

Speakers

Michael Rasmussen — GRC strategist and analyst known for advancing “Risk Management by Design,” advising organisations worldwide on integrating governance, risk, and compliance.

CRISAM GRC — Practitioners behind the CRISAM GRC platform and methodology for integrated risk and control management.

Nordex — Guest presenters sharing insights from deploying CRISAM GRC across a global enterprise.

Outcomes you can take back to your organisation

A structured blueprint for embedding Provision 29 in your risk and control framework

A draft effectiveness statement template and example assurance map

A practical checklist for board reporting and evidence readiness

Implementation lessons from a large-scale CRISAM GRC rollout

Reserve your seat now and join us for a focused, hands-on day—and the CRISAM GRC Ltd. launch celebration.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

As a leading provider for AI-supported GRC solutions and thanks to the unique user experience (UX), renowned companies from all industries rely on CRISAM.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Evolving Compliance & Risk Management for Future Readiness
2025-12-11 10:00 - 11:00 (Europe/London)
REGISTER

Join us as we explore how advanced analytics and risk quantification are delivering measurable benefits for organizations, from solid data foundations and process readiness to cutting-edge risk insights.

Highlights

Learn how risk and compliance can create strategic advantage

Identify ways risk leaders balance risk-taking with reward

Discuss practical examples of advanced analytics driving real impact

Learn steps to strengthen data foundations for better risk insights

Discuss lessons learned from organizations quantifying risk to boost performance

Compliance and risk management isn’t just about avoiding pitfalls. It’s about creating advantage. Today’s leaders are asking critical questions: Where should we place our next bets? Which risks are worth taking for greater reward?

These complex discussions are exactly where strong risk management can add real value. When done well, compliance and risk can be a catalyst for growth and success. In this webinar, we’ll explore how advanced analytics and risk quantification are delivering measurable benefits for organizations, from solid data foundations and process readiness to cutting-edge risk insights.

Speakers:

Steve Schlarman, Senior Director, Product Management, Archer Integrated Risk Management

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor . . .

For more than 20 years, Archer has pioneered holistic integrated risk management solutions that empower enterprise organizations to more effectively manage risk, ensure compliance, and address emerging challenges. Leveraging advanced technology like artificial intelligence (AI) and risk quantification, Archer’s broad range of solutions and services provide our clients with a clear understanding of risk that drives strategic decision-making and operational resilience. Visit www.ArcherIRM.com.

Webinar Host . . .

OCEG, a global nonprofit think tank, pioneered GRC and Principled Performance®. For over twenty years, OCEG has democratized GRC knowledge, offering open-access frameworks, resources, education, and certifications to professionals worldwide. Through the OCEG GRC Capability Model™ and Principled Performance®, OCEG drives leadership and strategy. OCEG’s 150K+ members include individuals at all levels, from C-suite to individual contributors across small and midsize businesses, international corporations, nonprofits, and government agencies. OCEG aims to establish democratized GRC knowledge as the global standard by offering open-source frameworks and affordable, accredited education. OCEG educates its members on achieving Principled Performance through integrated capability models across six critical disciplines: Governance and oversight, Strategy and performance, Risk and decision Support, Compliance and ethics, Security and continuity, and Audit and assurance.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

DORA in Practice: What’s Next for Operational Resilience in 2026
2026-01-06 12:00 - 13:00 (Europe/London)
REGISTER

As financial institutions move from DORA compliance deadlines into a new phase of implementation and supervision, 2026 will mark a pivotal shift from proving readiness on paper to demonstrating it in practice. Regulators across Europe are already signaling heightened expectations for testing, third-party risk management, and cross-border operational resilience. Yet for many organizations, key challenges remain: fragmented risk data, manual reporting, and difficulty connecting ICT and business services in a measurable, testable way.

This session will explore what lies ahead for financial firms as DORA oversight matures, highlighting both the regulatory trajectory and the operational realities of sustaining compliance at scale. The discussion will also examine how technology, from automation and AI to integrated GRC platforms, is helping firms move beyond reactive compliance toward continuous resilience.

Key Learning Objectives:

What regulators are prioritizing for DORA supervision in 2026

The biggest implementation challenges still facing financial institutions

How automation and AI can accelerate evidence, testing, and control validation

Strategies for unifying risk, resilience, and ICT data for ongoing assurance

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

CLDigital is a no-code platform built to automate GRC, risk, and resilience—empowering organizations to move with clarity, confidence, and speed. From enterprise risk and operational resilience to DORA and compliance automation, our platform helps teams stay ahead, even when the future is uncertain. Whether you start with an out-of-the-box solution or build your own using our drag-and-drop app builder, you’ll be live in days—and scaling without spreadsheets, delays, or technical debt.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

AI Risk Blind Spots: Discussing the Latest Research, Trends and Impacts on TPRM.
2026-01-15 10:00 - 11:00 (Europe/London)
REGISTER

Join us to get ahead of AI and third-party risk, gain clearer risk oversight, and reduce risk blind spots.

Highlights

Learn how leading organizations design and operate AI governance frameworks

Discover the biggest maturity gaps and exposure points

Determine where third-party AI transparency is breaking down

Learn how misalignment in AI governance ownership slows progress

Learn what boards now expect in AI reporting and accountability

Determine steps you can take today to strengthen governance and reduce surprises

AI adoption is accelerating, but new research shows that most organizations still have major blind spots, especially around third-party AI exposure, unclear ownership of AI governance, and increasing board expectations for oversight. While many teams believe they’re prepared, the study reveals gaps in visibility, accountability, and confidence across AI and vendor ecosystems.

In this webinar, Michael Rasmussen, one of the leading voices in GRC will break down the most critical trends and early warning signs. You’ll get a clear view of how organizations are structuring AI programs, where maturity gaps create the greatest risk, and why transparency into vendor-driven AI remains so limited.

Henry Umney, Managing Director of GRC Strategy at Mitratech, recently named a Leader in the AI Maturity Matrix Quadrant, will also share practical guidance on building strong, defensible AI oversight.

If you want clearer oversight and fewer risk blind spots before audits or leadership asks for it, this session gives you the direction you need.

Speakers:

Henry Umney, Managing Director of GRC Strategy at Mitratech

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor . . .

Mitratech is a trusted, global technology partner empowering corporate legal, risk & compliance, and HR professionals to maximize productivity, control expense, and mitigate risk by deepening operational alignment, and increasing collaboration & visibility across their organization. With Mitratech’s proven portfolio of end-to-end solutions, organizations worldwide are able to proactively identify and implement best practices and standardize processes across all lines of business to manage risk and ensure business continuity. Mitratech partners with more than 10,000 companies worldwide, from small nimble teams needing tech-enablement, to the largest organizations in the world trying to centralize, streamline and collaborate across their legal and risk functions. Mitratech’s user base spans more than 160 countries. Innovate now by visiting: www.mitratech.com

Webinar Host . . .

OCEG, a global nonprofit think tank, pioneered GRC and Principled Performance®. For over twenty years, OCEG has democratized GRC knowledge, offering open-access frameworks, resources, education, and certifications to professionals worldwide. Through the OCEG GRC Capability Model™ and Principled Performance®, OCEG drives leadership and strategy. OCEG’s 150K+ members include individuals at all levels, from C-suite to individual contributors across small and midsize businesses, international corporations, nonprofits, and government agencies. OCEG aims to establish democratized GRC knowledge as the global standard by offering open-source frameworks and affordable, accredited education. OCEG educates its members on achieving Principled Performance through integrated capability models across six critical disciplines: Governance and oversight, Strategy and performance, Risk and decision Support, Compliance and ethics, Security and continuity, and Audit and assurance.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

2026 GRC Strategies and Trends to Accelerate Risk, Compliance, and Audit Programs
2026-01-21 10:00 - 11:00 (America/Chicago)
REGISTER

Your risk and compliance environment changes constantly. AI, geopolitical, economic, operational, and security risks are top business priorities. The programs you’ve relied on may not be enough for this newly dynamic risk and compliance world. This webinar focuses on new approaches to GRC that will improve your programs – in 2026 and beyond.

Join the GRC Pundit Michael Rasmussen of GRC 20/20 and MetricStream’s Pat McParland to discuss the latest trends in the GRC market as we head into another year full of new demands and opportunities.

Our expert panel will discuss how to leverage GRC for:

Building strength, simplifying GRC, and amplifying outcomes through AI

Delivering competitive advantage for you in 2026

Responding to operational resiliency requirements

Meeting and exceeding emerging cyber risk demands in a digitally transforming world

See what 2026 holds for you – and get a jump on your GRC programs with an informed perspective.

In case you’re unable to catch the live webinar, please register to receive the recording which you can watch at your convenience.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

MetricStream simplifies Governance, Risk, and Compliance (GRC) with purpose-built AI-first Risk, Compliance, Audit, CyberGRC, Third-party Risk, and Resilience products on a single low-code / no-code GRC cloud platform. Trusted by over 1 million GRC professionals across 35+ countries, our industry-specific products and AI agents help businesses successfully manage audits, avoid compliance violations and fines, reduce risk exposure, and strengthen resilience. MetricStream is headquartered in San Jose, California, with operations and offices around the globe. More information is available at www.metricstream.com

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

G[P]RC Summit 2026, RIYADH
2026-01-26 00:00 - 2026-01-27 23:59 (Asia/Riyadh)
REGISTER

The G[P]RC Summit is the world’s largest summit on GPRC: GRC integrated with Performance and Strategy – bringing together C-level executives, GRC experts, and industry and academia professionals from across the world to share insights, innovative solutions, and best practices needed to drive organisational success and resilience in an increasingly complex and interconnected business environment. This year’s summit will be centred around the theme of

“Driving Success: Integrating GRC with Strategy Execution in a Hyperconnected World.”

In today’s rapidly evolving business landscape, organisations encounter a myriad of challenges, from regulatory complexities to disruptive market forces and emerging technologies such as AI. Particularly in the GCC region, there is a notable shift towards embedding sustainability, accountability, and compliance into core organisational strategies. In the UAE, which hosts COP28 this year, sustainability is a priority on governmental agendas, as they integrate ESG frameworks to fuel future growth. The repercussions of non-compliance are significant, both socially and financially, making organisational resilience more critical than ever.

To thrive in this dynamic environment, businesses must go beyond traditional governance, performance management, risk mitigation, and compliance. They must transform into “connected enterprises” where these elements are seamlessly integrated, driving strategic alignment, digital transformation, and data-driven decision-making. By focusing on integrating GRC with strategy execution, organisations can ensure that every facet of the business – people, processes, and data – is interconnected and aligned. This integration fosters agility, adaptability, and resilience, empowering businesses to navigate complexities and capitalise on opportunities in an increasingly connected world.

The G[P]RC Summit 2026 will be a two-day event featuring keynote addresses and panel discussions led by distinguished regional and international speakers. The summit’s sessions will explore a range of themes, including governance best practices, performance optimisation, risk mitigation strategies, and regulatory compliance assurance. Attendees will gain valuable insights into the latest trends, methodologies, tools, and innovations in GPRC, empowering them to navigate future challenges and seize emerging opportunities.

Join us at the G[P]RC Summit 2026 and embark on a transformative journey towards driving success in a hyperconnected world.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host . . .

The G[P]RC Summit is the world’s largest summit on GPRC: GRC integrated with Performance and Strategy – bringing together C-level executives, GRC experts, and industry and academia professionals from across the world to share insights, innovative solutions, and best practices needed to drive organisational success and resilience in an increasingly complex and interconnected business environment. This year’s theme, “Driving Success: Integrating GRC with Strategy Execution in a Hyperconnected World,” focuses on empowering organizations to navigate challenges and seize opportunities through a holistic, connected approach. Join us in Johannesburg on 28 October 2025 or in Riyadh on 26 – 27 January 2026 or in Dubai on 23 – 24 January 2026, to gain insights from industry leaders and take your GRC strategy to the next level. Ready to transform your approach? Register at https://gprcsummit.com/ and secure your spot.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

2026 Key Trends in Third-Party Risk Management
2026-01-29 10:00 - 11:00 (Europe/London)
REGISTER

Join this webinar to learn the top Third-Party Risk Management trends for 2026 and how leading teams are preparing.

Highlights

Learn about key regulatory, cyber, and operational shifts shaping TPRM in 2026

Identify how AI is influencing vendor due diligence and continuous monitoring

Discover strategies for reducing assessment backlogs and prioritizing the vendors that matter most

Learn practical steps to strengthen your program for the year ahead

As organizations rely more heavily on third parties, the risk landscape is shifting faster than many TPRM programs can adapt. In 2026, security, risk, and compliance leaders will need to navigate increasing regulatory pressure, growing vendor complexity, AI-driven threats, and rising expectations from boards and stakeholders. Join GRC expert Michael Rasmussen and Scott West, VP of Product Marketing at ProcessUnity, for a look at the top Third-Party Risk Management trends for 2026 and how leading teams are preparing.

Speakers:

Scott West, VP of Product Marketing, ProcessUnity

Michael Rasmussen, The GRC Pundit & Analyst, GRC 20/20 Research

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor . . .

ProcessUnity’s cloud-based solutions help organizations of all sizes automate their risk and compliance programs. Our highly configurable, easy-to-use tools significantly reduce manual administrative tasks, allowing customers to spend more time on strategic risk mitigation. As a Software-as-a-Service technology, ProcessUnity deploys quickly with minimal effort from customers and their IT resources. Our technology delivers faster, better results, and the ability to scale governance, risk, and compliance programs over time. ProcessUnity’s suite of applications includes Third-Party Risk Management, Cybersecurity Program Management, Policy and Procedure Management, Enterprise Risk Management, Regulatory Compliance Management, Product and Service Offer Management, and more. Learn more at www.processunity.com.

Webinar Host . . .

OCEG, a global nonprofit think tank, pioneered GRC and Principled Performance®. For over twenty years, OCEG has democratized GRC knowledge, offering open-access frameworks, resources, education, and certifications to professionals worldwide. Through the OCEG GRC Capability Model™ and Principled Performance®, OCEG drives leadership and strategy. OCEG’s 150K+ members include individuals at all levels, from C-suite to individual contributors across small and midsize businesses, international corporations, nonprofits, and government agencies. OCEG aims to establish democratized GRC knowledge as the global standard by offering open-source frameworks and affordable, accredited education. OCEG educates its members on achieving Principled Performance through integrated capability models across six critical disciplines: Governance and oversight, Strategy and performance, Risk and decision Support, Compliance and ethics, Security and continuity, and Audit and assurance.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook
