GRC 20/20 Research, LLC

The AI Way to Building an Enterprise GRC Program that Works on the Ground, KUALA LUMPUR
2026-07-23 08:30 - 14:00 (Asia/Kuala_Lumpur)
REGISTER

Malaysian enterprises are navigating one of the most demanding regulatory environments in Southeast Asia. Bank Negara Malaysia’s Risk Management in Technology (RMiT) framework and its sharpening expectations on AI governance, the Securities Commission’s evolving digital asset and capital markets oversight, the long-anticipated modernization of the PDPA, NACSA’s National Cybersecurity Policy, and the accelerating pace of the Madani Economy’s digital agenda are all in motion simultaneously. Manual GRC cannot keep pace — and organizations that treat this as a technology upgrade problem will keep falling behind.

This session is centered on shifting perception from GRC as a tool to a business enabler, while addressing front-line resistance and underutilization, and showcasing how AI can be layered in to enhance usability, adoption, and decision-making without adding complexity.

GRC as competitive advantage: how leading enterprises in the region are using AI-enabled GRC programs to accelerate business, reduce audit friction, lower regulatory capital requirements, and build board confidence

Why manual GRC breaks under compounding pressure: the fragmentation trap — disconnected tools, siloed risk, compliance, audit, cyber data, and periodic point-in-time assessments that leave organizations exposed between cycles

The adoption gap and its cost: why most GRC programs are technically deployed but organizationally stranded — avoided by the business, invisible to the board, and unable to demonstrate value until something goes wrong

Shifts in GRC: from periodic to continuous sensing and assessments; from reactive to predictive intelligence; from assurance-speak to business decision language; and from bolted-on to embedded AI

AI Governance as a business imperative: how to operationalize responsible AI with clear ownership, explainability, third-party model oversight, policy controls, and compliance readiness as AI permeates every technology environment

Please complete the registration form to secure your spot. Confirmation will be shared shortly. Availability is limited.

Agenda

08:30 – 09:00 = Registration

9:00 – 09:15 = Welcome Address & Opening Remarks

09:15 – 11:00 = Session by Michael Rasmussen

11:00 – 11:20 = Networking Coffee Break

11:20 – 12:00 = MetricStream AI Showcase

12:00 – 13:00 = Interactive Panel Discussion

13:00 – 13:10 = Closing Remarks & Key Takeaways

13:10 – 14:00 = Networking and Lunch

Location: Makati Shangri-La Manila

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Seminar Host . . .

MetricStream simplifies Governance, Risk, and Compliance (GRC) with purpose-built AI-first Risk, Compliance, Audit, CyberGRC, Third-party Risk, and Resilience products on a single low-code / no-code GRC cloud platform. Trusted by over 1 million GRC professionals across 35+ countries, our industry-specific products and AI agents help businesses successfully manage audits, avoid compliance violations and fines, reduce risk exposure, and strengthen resilience. MetricStream is headquartered in San Jose, California, with operations and offices around the globe. More information is available at www.metricstream.com

In Association With:

Expleo is a global engineering, technology and consulting service provider that partners with leading organisations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products, optimising manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalisation, hyper-automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. As a responsible and diverse organisation, Expleo is committed to doing business with integrity and working towards a more sustainable and secure society. Expleo boasts an extensive global footprint, powered by 18,000 highly-skilled experts delivering value in 29 countries and generating more than €1.4 billion in revenue.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Risk and Resilience Management Workshop, LONDON
2026-11-04 10:00 - 16:00 (Europe/London)
REGISTER

A blueprint for business-integrated, agile, and context-aware risk and resilience programs, built for organisations that can no longer afford to leave resilience to chance.

Four parts. One blueprint for built-in resilience.

A working session — not a lecture. You leave with a drafted governance model, a lifecycle map, and a business case tailored to your organisation.

Part 01: Risk & Resilience by Design — Why It Matters Now

How risk and resilience shape strategy and performance

The disarray: silos, fragmentation, and blind spots in current practices

Exposure in a volatile world — where resilience gaps become existential

Global trends, drivers, and regulatory mandates shaping integration

Exercise — Map your organisation’s maturity

Part 02: Governance — Building the Foundation

Establishing a federated governance model for integrated risk & resilience

Creating a committee with cross-functional authority

Drafting a charter that aligns mission, roles, and oversight

Building a strategic plan tied to business objectives

Exercise — Design your governance framework

Part 03: The Lifecycle — Managing in Context of Change

From identification to assurance — the full risk & resilience lifecycle

Monitoring internal and external environments for disruption

Risk assessments, BIAs, and forward-looking scenario planning

Engaging business units in treatment and response

Reporting that turns data into board-ready insight

Exercise — Build your lifecycle

Part 04: Architecture — Enabling Visibility & Agility

Designing information architecture for holistic insight and action

Integrating operations, strategy, compliance, and continuity data

Taxonomies, workflows, and linkages between risks, objectives, and controls

Technology architecture — what to prioritise, what tools matter

Building the business case: articulating ROI to leadership

Exercise — Map your information ecosystem

Ten practical approaches you can put to work on Monday morning.

Define a complete, continuous lifecycle for managing risk and resilience.

Establish federated governance, strategic alignment, and cross-functional accountability.

Align risk and resilience with objectives, operations, and business change.

Monitor and respond to internal and external risks in real-time.

Enable consistent, scalable processes across departments and geographies.

Track critical risks, treatments, and resilience activities with full traceability.

Deliver board- and regulator-ready assurance on organisational resilience.

Identify and resolve material gaps, duplications, and inefficiencies.

Build a compelling business case tied to strategic outcomes.

Leverage technology for risk visibility, scenario planning, and reporting.

WHO THIS IS FOR: Built for leaders accountable for uncertainty.

Chief Risk Officers & Risk Managers

Business Continuity & Resilience Leaders

Operational Risk & ERM Professionals

Compliance & GRC Executives

Internal Audit & Assurance Teams

Strategy, Transformation & Program Managers

Technology Architects for GRC and BCM

Board Advisors & Governance Professionals

THE VENUE: Set in the heart of Mayfair.

EST. 1927 · LONDON, The May Fair Hotel.

Historic style. Modern facilities. Central London.

Conveniently nestled into Stratton Street in London’s prestigious Mayfair district, the iconic May Fair Hotel combines heritage character with world-class conference facilities — the right setting for the conversations this workshop is designed to provoke.

Nearest tube → Green Park (Piccadilly / Jubilee / Victoria lines)

Day → Wednesday, 4 November 2026

Format → Full-day interactive workshop

*With roundtable discussions and hands-on exercises, this workshop relies on active contribution and feedback between participants. Full participation is essential to maximise the value of the session.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host/Sponsor . . .

At Clew, we help organisations move from fragmented risk management to clear, confident decision-making that drives real business performance. Our SaaS platform connects objectives, risks, assurance, and actions in one simple, scalable system – creating a clear golden thread between strategy and execution. Rather than treating risk as purely a resilience or compliance exercise, we help teams build organisational understanding – clarifying uncertainty, prioritising what matters most, and turning insight into measurable outcomes. Clew is built for organisations operating in complex, regulated environments. We focus on being practical, affordable, and quick to implement, helping customers strengthen resilience, meet regulatory expectations, and improve performance without the cost or complexity of traditional enterprise tools. We’re a growing, ambitious team redefining what modern risk and assurance software should look like: intuitive, outcome-focused, and grounded in how organisations actually work. If you value clarity over complexity, care about real-world impact, and want to help organisations find the clew through uncertainty, you’ll feel right at home.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

GRC 7.0: Orchestrating Resilience with Digital Twins and Agentic AI
2026-12-10 10:00 - 11:00 (America/Chicago)
REGISTER

The future of enterprise risk management is intelligent, connected, and adaptive. This session introduces GRC 7.0 – GRC Orchestrate, the next evolution of governance, risk, and compliance. We will explore how Digital Twins of the enterprise—virtual models of organizational processes, systems, and third-party ecosystems—can simulate risk scenarios, identify vulnerabilities, and support resilient planning. Combined with Agentic AI, which can act autonomously to gather intelligence, flag risks, and recommend actions, organizations can move beyond static workflows to dynamic orchestration of risk and resilience. This session provides a vision of how emerging technologies will redefine enterprise risk in practice, transforming the risk function into a command center for resilience and performance.

You will:

Envision and plan for the transformation of the risk function into an intelligent command center that leverages emerging technologies to orchestrate resilience and performance across the enterprise in real-time.

Understand the GRC 7.0 framework and how Digital Twins of the enterprise enable advanced risk simulation, vulnerability identification, and resilient planning by creating dynamic virtual models of organizational processes, systems, and ecosystems.

Evaluate the role of Agentic AI in autonomous risk management, including how AI agents can independently gather intelligence, flag emerging risks, and recommend actions to move organizations from static workflows to dynamic risk orchestration.

In case you’re unable to catch the live webinar, please register to receive the recording which you can watch at your convenience.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business and the Hitchhiker’s Guide to the GRC Technology podcasts, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Riskonnect is the leading integrated risk management software solution provider. Our technology empowers organizations with the ability to anticipate, manage, and respond in real-time to strategic and operational risks across the extended enterprise. We have more than 2,000 risk professionals in the Americas, Europe, and Asia and serve over 2,500 customers across six continents.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook
