GRC 20/20 Research, LLC

Beyond the Annual Review: Keeping Policies and Compliance Current Amid Regulatory Change
2025-05-01 10:00 - 11:00 (America/New_York)
REGISTER

Join MCO and Michael Rasmussen from GRC 20/20 for insight on how structured processes and the right technology can help organizations effectively manage compliance and regulatory change.

In today’s rapidly evolving regulatory environment, relying solely on annual policy reviews is no longer sufficient. Regulatory expectations are accelerating, and compliance programs must continuously monitor policies, procedures, and controls to effectively mitigate emerging regulatory risks. Join governance, risk management, and compliance expert Michael Rasmussen from GRC 20/20, alongside MCO, in an exclusive webinar designed specifically for compliance and risk executives navigating this challenging landscape.

Through continuous, proactive assessment, organizations can swiftly identify compliance gaps and promptly implement corrective actions. This webinar will equip participants with practical approaches to prioritizing compliance risks, evaluating regulatory obligations, and verifying policy effectiveness through targeted testing and monitoring. Additionally, attendees will discover how technology and AI can enhance organizational agility and responsiveness to regulatory changes.

Attendees will learn:

Strategies for continuous monitoring and rapid response to regulatory changes

Methods for effectively prioritizing compliance risks and obligations

Techniques for evaluating the adequacy of policies, procedures, and controls

Best practices for targeted testing and monitoring of key compliance metrics

Insights into leveraging technology and AI to improve compliance agility

If you have any questions for Michael, please let us know when you register.

GRC 20/20 Analyst presenting on webinar . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Webinar Host

MCO provides compliance management software that enables companies around the world to reduce their risk of misconduct. The MyComplianceOffice platform lets compliance professionals demonstrate they are proactively managing the regulated activities of employees, third-party vendors and other agents of the firm. Available as a unified suite or à la carte, our easy-to-use and extensible SaaS-based solutions get clients up and running quickly and cost-efficiently.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Supplier Risk Resolution: Monitor and Manage Risk at the Scale of Your Supply Chain, MADRID
2025-05-06 13:00 - 16:00 (Europe/Madrid)
REGISTER

Join us for an in-person workshop with fellow Procurement and Supplier Risk professionals. You will gain a best-practice perspective on third-party risk management; from information to action.

Guided by respected Analyst Michael Rasmussen, you will explore stakeholder-sensitive ways to align risk controls and reporting with strategic priorities. All backed by a demonstrable ROI; commercially and in support of broader objectives.

You will discuss a range of assessment, monitoring and remediation techniques designed to safeguard your business effectively. Whatever your existing level of risk visibility and data management, you will hear how other companies incorporate continuous controls into supplier workflows.

Learn how to clarify your risk goals, identify data requirements, communicate with stakeholders, monitor emerging concerns and address compliance gaps efficiently at the scale of your supply chain. Supported by reporting that reflects your business objectives.

Agenda

Part 1: Supplier Risk Management by Design

Why risk management matters, how companies get it wrong and ways Procurement can lead the way in supplier GRC.

Why supplier risk management matters for Procurement

Suppliers in disarray: how companies mismanage third parties (and why they’re exposing themselves to risk)

Current drivers & trends pressuring companies in third party management

Procurement’s role in governance, risk management, and compliance

Part 2: The Blueprint for Effective Risk Resolution

A best-practice look at defining your risk strategy, engaging your stakeholders, aligning to objectives and planning for success.

Blueprint for effective risk resolution

Assemble your supplier risk committee: aligning stakeholders around effective controls

Develop your supplier risk charter: defining a structure to govern third party relationships

Plan for success: document your processes to deliver strategic risk management

Part 3: Managing Suppliers and their Data

Great data management is at the heart of supplier risk oversight. Explore actionable ways to keep up-to-date risk visibility central to your data strategy.

Managing suppliers from onboarding to offboarding

Risk-aware supplier identification & onboarding

Continuous monitoring of evolving risks

Communicating with suppliers to maintain risk controls

Objective-driven metrics & reporting

Supplier re-evaluation and offboarding

Part 4: Using Technology to Resolve Risks at Scale

Enable your strategy by selecting a solution that directly supports your goals, then assemble a value-driven business case that aligns with broader priorities.

The power of technology-enabled oversight

A blueprint for managing supplier information (with risk at its core)

Types of supplier risk data and how they can be integrated into your processes

Components and requirements for supplier information architecture

The broad range of technology available (and what best serves your business)

Building your business case: articulating the value of supplier risk management

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host/Sponsor

apexanalytix revolutionized recovery audit with advanced analytics and the introduction of firststrike overpayment and fraud prevention software. Today, apex also leads the world in supplier management innovation with apexportal and smartvm, now the most widely used supplier onboarding and compliant master data management solution in global procure to pay processes. With over 250 clients in the Fortune 500 and Global 2000, apex is dedicated to providing companies and their suppliers with the ultimate supplier management experience. To support our commitment to innovation, we have built a highly experienced team of associates in key markets around the globe. Together we value performance, honor a diversity of perspectives, experiences and cultures, nurture candor, give back to the communities where we live and work, and have fun working together. For more information, visit www.apexanalytix.com or join our LinkedIn apexanalytix Community.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Workiva Amplify EMEA, Barcelona
2025-05-07 09:00 - 2025-05-08 15:00 (Europe/Madrid)
REGISTER

Come Together . . .

✔️ CSRD

✔️ ESRS

✔️ IFRS

✔️ XBRL

When your teams and work all come together…it’s like magic.

Amplify 2025—the conference for finance, accounting, compliance and sustainability professionals—is where that magic happens.

Next year, we’re celebrating your achievements over the last reporting period while arming you with the insights you need to address your biggest challenges, improve governance and create added value from data.

Learn from CSRD first-filers, get up-to-speed with the latest regulatory developments, connect with leaders within your industry…and find some time for a breather—the beach is on our doorstep!

Cutting-edge discussion, actionable take-aways, invaluable peer networking and the opportunity to earn career-advancing CPE credits: come together at Amplify.

Join focused sessions!

Address compliance challenges while learning how to build strategies for long-term value creation.

Connect with peers who will be facing the same data, governance and reporting challenges that you are—and learn what they are doing to overcome them.

Choose from 20+ sessions that will give you the chance to reflect on the latest reporting period and energise you for the year ahead.

Make new connections!

Experience immersive, in-app workshops led by Workiva experts and get hands-on with our latest in-platform capabilities.

Brainstorm, solve challenges, and share expertise or experiences while meeting new and brilliant people.

Mingle with 100s of your peers at our relaxed networking events—next year, there is going to be plenty to celebrate!

GRC 20/20 Presenter at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

Workiva is on a mission to power transparent reporting for a better world. We build and deliver the world’s leading cloud platform for assured integrated reporting to meet stakeholder demands for action, transparency, and disclosure of financial and non-financial data. Workiva offers the only unified SaaS platform that brings customers’ financial reporting, Environmental, Social, and Governance (ESG), and Governance, Risk, and Compliance (GRC) together in a controlled, secure, audit-ready platform. Our platform simplifies the most complex reporting and disclosure challenges by streamlining processes, connecting data and teams, and ensuring consistency. Learn more at workiva.com.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Navigating Provision 29 of the UK Corporate Governance Code
2025-05-08 16:00 - 17:00 (Europe/London)
REGISTER

The 2024 revisions to the UK Corporate Governance Code bring a renewed focus on risk management and internal controls, with Provision 29 at the center of this transformation as organizations address this in 2025 for 2026 reporting. Companies must now demonstrate enhanced board accountability for risk and controls, ensuring robust systems that support long-term resilience and regulatory compliance.

This webinar will explore the practical implications of Provision 29, including challenges organizations face in implementing the required governance enhancements, the shift toward an ongoing, effective, and aligned risk management and internal control framework. Engage with us as we share strategies to effectively embed risk and internal control governance across the enterprise, what these changes mean for organizations, best practices for implementation, and how organizations can align governance frameworks with business objectives while strengthening risk oversight.

Key Learning Objectives:

Understand the new requirements under Provision 29 and their impact on UK-listed companies.

Explore the increasing board responsibilities for internal controls and risk management.

Gain insights into how organizations can implement a risk and internal controls management while balancing flexibility and compliance

Identify challenges and solutions in achieving greater assurance, accountability, and resilience.

Learn best practices for embedding risk and internal control governance across business functions.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Webinar Host . . .

Decision Focus develops software for Governance, Risk and Compliance. Since 2004, Decision Focus has provided the world’s enterprises with software and services. We’ve taken our years of knowledge and experience to implement new software for Risk and Compliance which is has become leading in enterprise GRC.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Risk-!n 7th Edition, 2025, ZURICH
2025-05-11 00:00 - 2025-05-13 23:59 (Europe/Zurich)
REGISTER

STOP breaking silos, this is negative!!!BUILD BRIDGES instead and manage risks accross your organization!Buy your tickets forRisk-!n conference 2025

The conference will take place at the Zurich Marriott hotel very close to Zurich main train station, exceptional view of the city, Lake Zurich and Swiss Alps, or the Limmat river.Risk-!n 7th edition, May 11 afternoon + May 12-13, 2025, Zurich

Enterprise Risk Management & Resilience, Security & People Risks, Insurance & Captives, AI, ESG & Decision making!

Sharing and exchanging best practices during 40+ sessions 300+ peers and experts

GRC 20/20 Analyst Presenting at the Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

Hear from and debate with internationally recognized experts. Network and share your experience. We aim to break the existing silos within organizations in order to better manage risks by organizing an annual conference to discuss about a wide range of topics related to risk management.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Riding the Compliance Carousel: Managing Emerging Regulatory Risks & New Rules, ZURICH
2025-05-14 14:00 - 17:00 (Europe/Zurich)
REGISTER

Join GRC expert, Michael Rasmussen and Corlytics for an exclusive workshop designed for compliance and risk executives, addressing the growing challenges of regulatory complexity. Discover actionable strategies and best practices for identifying, assessing, and implementing effective compliance frameworks in today’s fast-changing environment. The workshop will highlight the critical role of technology and AI in streamlining compliance management and enhancing organizational agility.

Who’s attending?

Risk and compliance leaders from a wide range of financial services industries, including G-SIFI, Banks, Asset Management, Insurance, and Payments, will attend the workshop.

Location

Zurich City Centre, Wednesday 14 May 2pm – 6:30pm

Agenda

2:00pmWelcome and IntroductionsTea & coffee available2:30pmPart 1: The Strategic Importance of Compliance & Regulatory Change ManagementTopics: understanding the impact of regulatory evolution, best practices for adapting to changes and mitigating compliance risks3:00pmPart 2: Achieving Excellence in Compliance & Regulatory Change ManagementTopics: Horizon Scanning, Obligation Identification, Regulatory Mapping and Policy Change Management.3:30pmPart 3: The Future of Compliance – Leveraging AI for Efficiency & AgilityTopics: AI’s role in improving compliance strategy, decision-making, efficiency and risk mitigation.4:00pmCorlytics Overview: Shaping the Future of RegTechIntroduction to Corlytics’ end-to-end Regulatory Change Platform and Client Case Study. 5:00pmNetworking and drinks

GRC 20/20 Instructor

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host

Corlytics is a global RegTech consolidator, a leader in regulatory intelligence, content and automated policy compliance and attestation. Delivering a platform that manages the entire regulatory risk value chain, Corlytics provides assurance on never-ending regulatory changes to compliance, risk, legal and audit teams globally.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

GRC Insights Breakfast with Michael Rasmussen, COPENHAGEN
2025-05-15 08:30 - 10:00 (Europe/Copenhagen)
INVITE ONLY

This is a special invite event for organizations in Denmark hosted by Deloitte with IBM.

In this session, we will cover:

Overall trends in GRC market in European context in the age of AI and what organizations should be aware of in that context.

Elaborate on the market for GRC solutions.

Agenda08:30 Welcome by Deloitte, croissants and networking

09:00 Presentation, Michael Rasmussen (Father of GRC)

09:40 Deloitte’s Point of view on GRC

09:55 Questions and wrap-up

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Seminar Hosts . . .

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you’re searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Executive GRC Dinner: Navigating Risk and AI, COPENHAGEN
2025-05-15 17:30 - 22:00 (Europe/Copenhagen)
INVITE ONLY

As AI reshapes the landscape of financial services, risk management and compliance leaders face a dual challenge: how to leverage AI responsibly to enhance governance, risk, and compliance (GRC) — and how to govern AI itself as a new category of enterprise risk.

In this executive session, we will explore practical strategies for navigating the intersection of AI, risk, and compliance. We’ll discuss how financial institutions can integrate AI into GRC programs to improve agility, insight, and operational efficiency, while also establishing frameworks to ensure AI use is ethical, transparent, and aligned with regulatory expectations.

Join us for an engaging conversation on balancing innovation and oversight in a rapidly evolving risk environment.

Agenda:

17:30: Welcome and refreshments

18:00: Keynote on GRC 2025 in a European context by Michael Rasmussen

18:30: Operationalizing GRC & ML/AI Governance in a Rapidly-Evolving Business & Regulatory Landscape

19:00: Private dinner

21:30: Networking and post-dinner drinks

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Seminar Hosts . . .

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you’re searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Global RegTech Summit 2025, LONDON
2025-05-20 00:00 - 23:59 (Europe/London)
REGISTER

The Global RegTech Summit in London on 20 May will host the top decision-makers and innovators in compliance, risk management and financial crime prevention. The Summit will be full of panel discussions, presentations, product demos and plenty of networking opportunities!

Check out the topics that will be discussed including the biggest challenges and opportunities that define compliance today:

Riding the RegTech Wave: Organisational Priorities and Strategies to Transformation in 2025 – As the regulatory landscape becomes more complex, how are organizations prioritizing and aligning their resources to tackle the biggest compliance hurdles?

From Reactive to Proactive: Redefining Compliance with AI – What are the primary risks posed by AI in regulatory compliance, and how can they be mitigated?

Navigating KYC: Enhancing Compliance and Client Experience in the Onboarding Journey – What are the primary challenges firms face in ensuring robust KYC compliance during the customer onboarding process?

Transforming Cyber Risk Management: Evolving Strategies for a Digital-First World – What tools and strategies can be used to predict and pre-empt cyber threats before they occur?

SupTech in 2025: Transforming Supervision Through Innovation – How has SupTech transformed in the past decade, and what are the key drivers behind this evolution?

Data Compliance Decoded: Handling, Governance, and Technology Insights – What are the largest obstacles teams are facing when it comes to adherence to data protection, privacy and security regulations?

Transaction Monitoring Challenges: Tackling Compliance Pressures with Tech Innovation – As AI plays a larger role in AML, how can organizations ensure transparency, explainability, and fairness in AI-driven transaction monitoring systems?

Optimizing Technology Risk Management: Best Practices for Emerging Technologies – How do you manage vendor risks, such as compliance, data security, and ongoing support, when outsourcing tech solutions?

RegTech and the Regulators: Priorities for Financial Services Transformation In 2025 – How are innovation and technology fostering stronger collaboration between regulators and firms in shaping the future of compliance?

Are Current Strategies Enough for Accurate Regulatory Reporting? – What are the dangers to financial institutions in having with inadequate procedures when it comes to regulatory reporting, beyond the threat of fines from the regulator?

GRC 20/20 Analyst Presenting at the Event . . .

Michael will be presenting on:

RCM Reimagined: Innovations and Strategic Priorities for Regulatory Change Management in 2025

What Does a Unified Compliance Culture Look Like?

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

FinTech Global is the world’s leading provider of FinTech information services, B2B media products and industry events. We inform, promote and connect FinTech buyers, sellers, investors and innovators worldwide. We serve a network of over 300,000 FinTech professionals from market-leading organisations.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Third-Party Risk Management by Design, LONDON
2025-05-21 09:30 - 16:30 (Europe/London)
REGISTER

Aravo invites you to join your peers for an interactive workshop dedicated to third-party risk management strategies and methodologies.

GRC 20/20 analyst Michael Rasmussen will be facilitating this workshop focused on establishing a business case for TPRM that unifies the extended enterprise.Building your own blueprint for effective third-party management.The core components of the third-party management lifecycle.How technology can further enable your program and promote collaboration.Delivering effective third-party governance and assurance.

Don’t miss this opportunity to learn best practices from experts and exchange ideas with your peers. Gain a deep understanding of the challenges and pitfalls associated with managing third-party risk, and bring back actionable strategies and methodologies that will help transform and mature your TPRM program.

What to Expect

In this workshop, participants will gain a holistic perspective on third-party management, delving into integrating third-party management seamlessly into your business strategy, processes, and operations, ensuring a cohesive approach. Moreover, you’ll learn the art of clear and persuasive communication, essential for gathering attestation and fostering strong partnerships across your entire organisation.

Specific sessions include:

Third-Party Management by Design

Third-Party Governance

Third-Party Management Lifecycle

Third-Party Management Architecture

The Logistics

Once you have completed your request for a seat at this workshop, you will be advised within 2 business days if we have been able to fulfill your request. If we are able to fulfill your request, you will be sent complete information with location via a calendar invite, as well as direct email.

GRC 20/20 Instructor

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host

Aravo delivers the market’s smartest third-party risk and resilience solutions, powered by intelligent automation. For more than 20 years now, Aravo’s combination of award-winning technology and unrivaled domain expertise has helped the world’s most respected brands accelerate and optimize their third-party management programs, delivering better business outcomes faster and ensuring the agility to adapt as programs evolve. With solutions built on technology designed for usability, agility, and scale, even the most complex organizations can keep pace with the high velocity of regulatory change. As a centralized system of record for all data related to third-party risk, Aravo helps organizations achieve a complete view of their third-party ecosystem throughout the lifecycle of the relationship, from intake through off-boarding and all stages in between and across all risk domains. Aravo is trusted by the world’s leading brands, helping them manage their risk and improve the performance of more than 6 million third parties, suppliers and vendors across the globe.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Beyond IT Security: Managing Digital Risk as a Business-Critical Priority
2025-05-22 11:00 - 12:00 (America/New_York)
REGISTER

Digital risk extends far beyond cybersecurity. It encompasses third-party risks, operational disruptions, regulatory requirements, and IT failures that impact operational continuity. Organizations that view digital risk as a business-critical issue – not just an IT problem – are better equipped to build resilience and reduce disruptions.

Join Michael Rasmussen, a globally recognized GRC expert, as he outlines a holistic approach to managing digital risk. He will explain how to break down silos between IT, risk, and business teams to drive an integrated approach to resilience. The session will cover building a cohesive risk management framework that addresses digital threats from every angle.

You’ll learn how to:

Drive continuous monitoring and resilience with risk intelligence, automation, and reporting.

Look beyond cybersecurity and integrate operational, third-party, and regulatory risk into the broader digital risk strategy.

Align digital risk management with broader business strategy, governance, and risk oversight.

Define processes that support ongoing risk mitigation and operational resilience.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Webinar Host . . .

Riskonnect is the leading integrated risk management software solution provider. Our technology empowers organizations with the ability to anticipate, manage, and respond in real-time to strategic and operational risks across the extended enterprise. More than 2,400 customers across six continents use our unique risk-correlation technology to gain previously unattainable insights that deliver better business outcomes. Riskonnect has more than 500 risk management experts in the Americas, Europe, and Asia. To learn more, visit www.riskonnect.com.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Aravo Ascend, LONDON
2025-05-22 12:00 - 16:30 (Europe/London)
REGISTER

Join us for Aravo Ascend, an exclusive customer event where you can get actionable insights, drive innovation, and foster networking with like-minded professionals. For this unique half-day event, Aravo will provide a personalized Optimization Report for your company.

This session is for risk and compliance leadership who want to elevate their Third-Party Risk Management programs for 2025 and beyond.

Leveraging your company Optimization Report from Aravo, you will discover how to unlock the full potential of your Aravo solution to achieve immediate results and long-term success.

Learn from Experts: Gain insights from Aravo’s leadership and product experts on navigating today’s evolving risk landscape.

Network with your peers.

Explore Innovation: Dive into best practices, tools, and strategies that enhance efficiency and help you manage emerging risks.

GRC 20/20 Instructor

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference/Seminar Host

Aravo delivers the market’s smartest third-party risk and resilience solutions, powered by intelligent automation. For more than 20 years now, Aravo’s combination of award-winning technology and unrivaled domain expertise has helped the world’s most respected brands accelerate and optimize their third-party management programs, delivering better business outcomes faster and ensuring the agility to adapt as programs evolve. With solutions built on technology designed for usability, agility, and scale, even the most complex organizations can keep pace with the high velocity of regulatory change. As a centralized system of record for all data related to third-party risk, Aravo helps organizations achieve a complete view of their third-party ecosystem throughout the lifecycle of the relationship, from intake through off-boarding and all stages in between and across all risk domains. Aravo is trusted by the world’s leading brands, helping them manage their risk and improve the performance of more than 6 million third parties, suppliers and vendors across the globe.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Resilient GRC by Design – Reimagine Your Resilience Strategy with AI and Best Practices
2025-05-28 10:00 - 11:00 (America/New_York)
REGISTER

In today’s rapidly evolving risk landscape, resilience is no longer optional—it’s a necessity. Organizations must proactively integrate resilience into their Governance, Risk, and Compliance (GRC) strategies to navigate disruptions, maintain regulatory compliance, and drive business continuity.

But what does a resilient GRC framework look like in practice? Do you have to have a separate process and team to manage resilience? Are you ready for emerging resilience regulations and standards?

Join us for a live webinar featuring GRC 20/20 analyst Michael Rasmussen, where we dive deep into how to integrate resilience directly into your Governance, Risk, and Compliance (GRC) strategy.

Key Discussion Points:

The essential components of a resilient GRC strategy

How AI and best practices can drive a more agile enterprise across risk, compliance, audit, cyber, and more

Measuring the success of the resilient GRC program

Real-world insights and best practices for a future-ready GRC framework with automation and modernization

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Webinar Host

MetricStream is a global SaaS leader of GRC solutions that empowers organizations to thrive on risk by accelerating growth via risk-aware decisions. They connect governance, risk management and compliance across the extended enterprise.

Their ConnectedGRC and three product lines – BusinessGRC, CyberGRC, and ESGRC – are based on a single, scalable platform that supports you wherever you are on your GRC journey. MetricStream is headquartered in San Jose, California, with an operations and R&D center in Bangalore, India, and sales and operations support around the globe. More information is available at www.metricstream.com.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Measuring the Value of GRC Technology: Efficiency, Effectiveness, Resilience, and Agility
2025-05-29 12:00 - 13:00 (Europe/London)
REGISTER

Why Should You Attend?

In this exclusive session, you’ll uncover how leading organisations effectively measure and communicate the value delivered by their GRC technology investments.

Attendees will learn how to quantify improvements across four critical dimensions:

✔ Efficiency – reducing operational costs through automated processes and improved resource allocation.

✔ Effectiveness – enhancing the reliability of compliance and risk processes, ensuring accurate and trustworthy reporting.

✔ Resilience – strengthening organisational capability to anticipate, respond to, and quickly recover from disruptions and adverse events.

✔ Agility – increasing the organisation’s ability to rapidly respond to internal changes and external developments, ensuring continuous alignment with business objectives.

Who Should Attend and What Will You Gain?

This session will equip you with the frameworks, language, and real-world examples to confidently demonstrate ROI, secure stakeholder alignment, and drive long-term organisational success.

This webinar is open to all professionals looking to elevate their impact through governance, risk, and compliance.

It’s especially relevant for:

✔ Chief Information Security Officers (CISOs)

✔ Heads of Risk, Compliance, or Audit

✔ GRC Managers or Analysts

✔ Information Security Leaders

✔ Enterprise Risk Professionals

✔ GRC enthusiasts looking to stay ahead of the curve

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Webinar Host . . .

SureCloud is a leading provider of cloud based, Integrated GRC (Governance, Risk & Compliance) products and Cybersecurity services, which reinvent the way you manage risk. SureCloud, and our Aurora platform, enable organizations to make better decisions and achieve their desired business outcomes. SureCloud is underpinned by Aurora, a highly configurable no-code platform, which is simple, intuitive, and flexible. Unlike other GRC Platform providers who force organizations to adapt their processes, our solutions are highly configurable. Aurora can be easily customized to fit a wide range of operating models, meaning that our clients get immediate and sustained value from the outset.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

SAI360 Global Connect Tour 2025, DALLAS
2025-06-04 00:00 - 2025-06-05 23:59 (America/Chicago)
REGISTER

We are excited to extend a personal invitation to you for our exclusive Global Connect Tour 2025 – next stop, Dallas!

Where: Marriott Dallas Uptown (Hotel room rate $259/night)

Dates: June 4-5, 2025

This event will begin with an intimate customer gathering in the heart of Dallas on day 1. Join us and network with other SAI360 customers, hear about their customer journeys, and meet key members of the SAI360 senior management team.

GRC 20/20 Analyst will be presenting at the event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Event Host

SAI360 is giving companies a new perspective on risk management. By integrating Governance, Risk, Compliance (GRC) software and Ethics & Compliance Learning resources, SAI360 can broaden your risk horizon and increase your ability to identify, manage, and mitigate risk. See risk from every angle.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

ProSight Governance, Compliance, and Operational Resiliency (GCOR) Virtual Conference
2025-06-09 00:00 - 2025-06-12 23:59 (America/Chicago)
REGISTER

The Velocity and Constancy of Change

In banking, change is constant. To keep pace, it’s essential to continually revisit your strategy, update your skills, and refresh your operations to get ahead of oncoming risks. At this conference, you’ll learn best practices from a community of your peers from across the industry on topics ranging from regulation to artificial intelligence to fraud. Industry leaders and expert guest speakers will share their real-world experience managing the challenges many risk and compliance professionals are facing.The conference features sessions tailored to the needs of large, regional, mid-tier, and community banks and credit unions. Attendees will gain valuable insight into how best to address risks, large and small, and safeguard their institutions.

Please note, many sessions will be CPE eligible, regulated per NASBA guidelines.

Developed by ProSight Councils and Committees

Thanks to the support of various ProSight councils (ORM, ERM, Mid-Tier, Community Bank) and committees (Compliance, Technology Risk, Third-Party Risk, Culture & Conduct), this conference has been built to help you find solutions to advance your practices, regardless of your institution asset size and maturity level.

In addition to trending governance, compliance, and operational resilience topics, our sessions will focus on top operational and enterprise risks:

Concentration Risk

Data Governance & Management

Enterprise Governance

Fraud

AI’s impact

Issues Management

Natural Disasters- Insurance Implications

Risk Appetite

Third-party Risk Management

Regulatory Priorities

Reputation Risk

Quantum Computing

And many more pressing developments and challenges

Why Attend?

Learn best practices on a wide array of topics. GCOR events are hosted by the financial industry’s leading experts and practitioners.

Earn CPE credits. Gather continuing professional education towards your accreditations and certifications.

Explore new tools and vendors.GCOR is partially sponsored by established and emerging vendors offering the latest risk management tools and systems.

Efficiency and convenience. Don’t pack your bags, 2025’s conference is being offered virtually. Attend live or watch the recordings at your leisure.

Stay current with what is happening in the industry. Content is sourced and guided by our councils of current chief risk officers and senior managers in banking.

GRC 20/20 Analyst will be presenting at the event . . .

AI in Risk and Compliance: Navigating Innovation and Oversight

Tuesday, June 10, 2025 4:00 PM to 5:00 PM · 1 hr. (America/New_York)

1.0 CPE Hour(s) l 1.0 CEU(s)

As artificial intelligence (AI) becomes increasingly integral to business operations, organizations face the dual challenge of harnessing its potential while mitigating associated risks. This session brings together two leading experts in governance, risk, and compliance (GRC): Michael Rasmussen of GRC 20/20 Research and Renee Murphy of Verdantix. Together, they will explore the evolving landscape of AI in risk and compliance, offering insights into effective strategies for responsible AI adoption.

Learning Objectives:

Explore best practices, based on the NIST AI Risk Management Framework, for developing comprehensive AI governance structures that ensure ethical and legal compliance

Identify the implications of new regulations, like the EU’s Artificial Intelligence Act, and how to align organizational practices proactively

Define how to assess, monitor, and govern AI technologies across vendor ecosystems to ensure compliance and resilience

Evaluate the role of AI in improving risk identification and mitigation, taking into account both the benefits and challenges of AI-driven risk management tools

Michael Rasmussen will be presenting alongside Jimmy Lin of SAI360 and Renee Murphy of Verdantix

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Session Host/Sponsor

SAI360 is giving companies a new perspective on risk management. By integrating Governance, Risk, Compliance (GRC) software and Ethics & Compliance Learning resources, SAI360 can broaden your risk horizon and increase your ability to identify, manage, and mitigate risk. See risk from every angle.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

GRC Summit London 2025
2025-06-10 00:00 - 2025-06-12 23:59 (Europe/London)
REGISTER

What to Expect:

The GRC Summit, hosted by MetricStream, is a leading annual event that brings together top experts from government and business to explore the latest strategies in Governance, Risk, and Compliance (GRC). Join over 250 professionals to gain insights from thought leaders, engage in interactive discussions, and discover best practices in risk management, compliance, cyber risk, ESG, and more. Elevate your GRC programs and learn how to transform risk into a strategic advantage.

Explore MetricStream’s Products and Solutions In-Depth.

Learn from Global Thought Leaders and Experts.

Engage Deeply in Our Interactive Workshops.

Gain Insights from Real-World GRC Case Studies.

Access Exclusive Insights from Keynote Presentations.

Stay Ahead of Evolving Compliance Requirements.

Keep Up-To-Date with The Latest Trends in GRC.

Network with Top Industry Professionals.

Connect around operational resilience, risk management, compliance, cyber risk, ESG and much more. Move beyond just managing risk to embracing and ultimately thriving on risk.

GRC 20/20 Analyst will be presenting at the event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Event Host

MetricStream is a global SaaS leader of GRC solutions that empower organizations to thrive on risk by accelerating growth via risk-aware decisions. We connect governance, risk management and compliance across the extended enterprise. Our ConnectedGRC and three product lines – BusinessGRC, CyberGRC, and ESGRC – are based on a single, scalable platform that supports you wherever you are on your GRC journey. MetricStream is headquartered in San Jose, California, with an operations and R&D center in Bangalore, India, and sales and operations support around the globe.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Risk and Resilience by Design: Building the Future-Proof Enterprise, LONDON
2025-06-10 13:00 - 17:30 (Europe/London)
REGISTER

In today’s dynamic business environment, where disruptions are becoming more frequent and unpredictable, risk and resilience must be built by design, not by reaction. Organizations that embed resilience into their core business strategy—rather than treating it as a reactive, compliance-driven exercise—are better equipped to navigate operational, cyber, and supply chain risks. This requires a shift from traditional risk management approaches to proactive, integrated frameworks that align risk, resilience, and performance objectives. By leveraging AI, automation, and real-time data analytics, businesses can anticipate threats, monitor risks dynamically, and continuously strengthen their resilience posture. The key to future-proofing operations lies in creating a resilience roadmap that not only mitigates risks but enables businesses to thrive in the face of uncertainty.

Key Takeaways:

Why risk and resilience by design is essential for sustainable business growth in a dynamic risk landscape

How to embed resilience into business strategy and critical business processes from the outset

The role of AI, automation, and analytics in enabling proactive risk monitoring and decision-making

Best practices and lessons learned from industry leaders to build a measurable, future-proof resilience roadmap

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host

MetricStream is a global SaaS leader of GRC solutions that empowers organizations to thrive on risk by accelerating growth via risk-aware decisions. They connect governance, risk management and compliance across the extended enterprise.

Their ConnectedGRC and three product lines – BusinessGRC, CyberGRC, and ESGRC – are based on a single, scalable platform that supports you wherever you are on your GRC journey. MetricStream is headquartered in San Jose, California, with an operations and R&D center in Bangalore, India, and sales and operations support around the globe. More information is available at www.metricstream.com.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Supplier Risk Resolution: Monitor and Manage Risk at the Scale of Your Supply Chain, COPENHAGEN
2025-06-17 13:00 - 16:00 (Europe/Copenhagen)

Agility 2025 UK by LogicGate, London
2025-06-18 00:00 - 23:59 (Europe/London)
REGISTER

Koin us this year at Agility 2025 to discover innovative solutions to GRC’s biggest challenges, learn from the people driving our industry forward, and uncover real-world use cases that can grow and mature your GRC programs.

Agility is LogicGate’s annual conference where they bring together industry leaders and like-minded professionals in risk, cybersecurity, and compliance management to explore the industry’s most critical topics.

Discover innovative solutions to GRC’s biggest challenges, learn from the people driving our industry forward, and uncover real-world use cases that can grow and mature your GRC programs.

Join us at Agility 2025 to discover innovative solutions to GRC’s biggest challenges, learn from the people driving our industry forward, and uncover real-world use cases that can grow and mature your GRC programs.

EXPLORE. Keynotes explore industry-specific content that matters to you and your organization’s challenges.

CONNECT. Network with industry leaders within the audit, risk, and cybersecurity space during the event.

LEARN. See new innovations , get your questions answered, and learn how your peers execute.

CPE CREDITS. Your attendance may earn professional development credits at the same time.

Join us at a unique and exciting venue at Lord’s Cricket Ground for a day of insightful sessions and networking.

GRC 20/20 Analyst Presenting at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Conference Host

LogicGate offers modern risk management technology empowering businesses to proactively transform risk enterprise-wide. Because risk is a team sport, we created the Risk Cloud Platform® — the most nimble and collaborative GRC solution out there. Rapidly adapt to changing business conditions. Confidently innovate and build new processes as you go. Collaborate on risk across your entire organization. Risk Cloud® gives you an interconnected view of risk across the organization that you just can’t get from point solutions. After all, great companies are built not by avoiding risks — but by choosing the right ones.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Compliance & Ethics Management by Design, LONDON
2025-06-19 12:00 - 18:30 (Europe/London)
REGISTER

GAN Integrity invites you to connect with your peers for an interactive workshop led by Michael Rasmussen, GRC 20/20 Analyst. This session is dedicated to exploring cutting-edge compliance and ethics management strategies in today’s dynamic regulatory and risk environment, with actionable insights into leveraging technology and AI to drive integrity and efficiency.

Why Attend?

Organizations today face a complex and ever-changing landscape of ethical, regulatory, and legal challenges, compounded by rapid business evolution and the transformative impact of AI. Traditional compliance programs often fall short in meeting the expectations of boards, stakeholders, and regulators.

This workshop equips attendees with practical strategies and frameworks to address these challenges and drive meaningful organizational improvements.

Attendees will be able to take back to their organization’s approaches to:

Master effective compliance management by defining ownership, ensuring process consistency, and building a full compliance lifecycle.

Leverage AI as a force for good to enhance compliance and ethics programs while navigating common challenges and pitfalls.

Drive agility and resilience by balancing innovation with compliance requirements and facilitating ongoing monitoring.

Strength communication and accountability across employees, stakeholders, regulators, and boards to deliver strong governance and assurance.

Track, measure and resolve compliance activities through critical workflows, task management, and performance metrics.

Agenda

Part 1: Why Compliance Matters

Compliance in Disarray: how organizations mismanage compliance

Compliance Exposure: how mismanaged compliance expose the organization to risk

Current drivers & trends pressuring organizations in compliance management

Different ways organizations approach compliance management

What Effective Compliance Management Achieves: Compliance role in governance, risk management, and compliance

The role of Compliance in AI Governance

Part 2: The Blueprint for Effective Compliance

Compliance Governance Committee: bringing together the range of compliance management roles and responsibilities in the organization

Compliance Management Charter: defining a structure to govern compliance across the organization

How to Develop a Compliance Management Strategic Plan

Part 3: Compliance Management Lifecycle

Compliance obligation identification

Ongoing compliance and business context monitoring

Compliance communications & attestations

Compliance monitoring & assessment

Employee engagement in compliance and ethics

Third-party risk management and compliance’s role

Compliance forms & approvals

Compliance metrics & reporting

Compliance evaluation, benchmarking & assurance

Part 4: Compliance Management Architecture

Types of compliance management information and how it integrates into compliance processes

Components and requirements for a compliance information architecture

Kinds of compliance management technologies and what best serves the organization

Capabilities and requirements of compliance management platforms

Compliance Management Business Case: Articulating the Value of Effective Compliance Management

GRC 20/20 Analyst Workshop Facilitator . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Workshop Host/Sponsor

GAN Integrity gives compliance teams a better way to do their good work. With a flexible platform that unifies compliance, ethics, and third-party risk management across the enterprise, coupled with deep domain expertise, we make it easy for compliance teams to see everything, adapt to anything, and get all the help they need. That’s why leading companies worldwide — from manufacturing to energy to financial services — rely on GAN Integrity.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Corporate Risk Minds 2025
2025-06-23 00:00 - 2025-06-24 23:59 (Europe/Berlin)
REGISTER

Focus on risk management!In times of war, inflation and staltering supply chains, risk management has a duty to get your own company through the storm with a sense of proportion and direct it into calmer waters. To keep up with the pace of current transformations and crises, many organizations need to modify their risk management. Take a look at the risk and compliance trends and their potential impact on how organizations handle all aspects of a robust risk management process and how an effective risk management program can provide a competitive advantage for their company. For 13 years, Corporate Risk Minds, the largest industry meeting on the subject of risk management, is back for you in Berlin – the conference for decision-makers from medium-sized and large companies as well as hidden champions. A unique mix of case studies and discussion formats on strategic and operational challenges of risk management in industrial companies offers you and more than 480 participants the platform for exchange, networking and learning! Don’t miss the opportunity to meet your colleagues under one roof.We look forward to welcoming you in Berlin!

GRC 20/20 Analyst Presenting at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Baird's GRC Networking and Content Reception
2025-06-25 18:00 - 22:00 (Europe/London)
INVITE ONLY

The evening is designed to bring together a range of players of varying scale and sub-vertical focuses (for example – Supply Chain, RegTech, ESG / ESHQ and GRC Technology) to create new networking connections and, if relevant, explore potential opportunities for collaboration in an informal setting. Baird will be hosting a panel discussion on the theme of De-regulation and its impact on GRC vendors (along with some good food and drinks).

GRC 20/20 Analyst Participating at Event . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized pundit on governance, risk management, and compliance (GRC) – with specific expertise on enterprise GRC strategy and processes supported by robust information and technology architectures. With 30+ years of experience, Michael helps organizations improve GRC strategy and processes supported by the correct GRC technology architecture. This enables organizations to align GRC with the business and deliver effective, efficient, resilient, and agile capabilities to the organization. He is a sought-after keynote speaker, author, and advisor and is noted as the “Father of GRC” — the first to define and model the GRC market in February 2002 while at Forrester.

Seminar Host

Since 1919, Baird has guided families, businesses, communities and institutions toward their financial goals. Being privately held enables us to prioritize long-term planning and investment – for our clients and the firm – without having to weigh those against the quarterly expectations of outside shareholders. Today Baird offers wealth management, investment banking, asset management, fixed income and equity sales and trading, equity research, public finance and private equity services. This balance of cyclical and counter-cyclical businesses provides financial strength and stability across market environments and enables us to consistently reinvest in our ability to serve clients. We manage or oversee more than $455 billion in client assets and employ more than 5,200 Associates around the world. And, because nearly 80% of our associates are Baird stockholders, you can trust we all share a personal stake in your success. For more than 20 consecutive years, Baird has been one of the FORTUNE 100 Best Companies to Work For®, making us a workplace of choice for some of the most talented, passionate people in financial services. It also enables us to emphasize cultural compatibility in those we hire, many of whom stay their entire careers. All of this helps ensure the quality and consistency of our advice for clients and the timeless values that make the Baird Difference every day for our clients, our Associates and the communities we share.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

#RISK North America 2025, NEW YORK CITY
2025-07-09 00:00 - 2025-07-10 23:59 (America/New_York)
REGISTER

Join us at #RISK New York July 9-10, 2025, at Fordham Law School, for a two-day deep dive into the latest trends and challenges in Governance, Risk & Compliance (GRC), AI, Privacy, security and more!

#RISK New York provides a platform for organizations to address the cumulative nature of risk, unite disparate GRC specialists, amidst a compelling ‘deep dive’ agenda led by subject matter experts and thought leaders. This is your opportunity to connect, learn, prepare and gain insights from real-world examples and case-studies… Join us in New York, July 9-10, 2025.

Benefits of Attending

Deep Dives into Critical Topics. Gain in-depth knowledge on areas like, operational risk, financial risk, regulatory risk and emerging threats like AI-related risks.

Expert-Led Sessions and Panels. Learn from industry veterans and renowned risk & GRC professionals through interactive sessions, case studies, and insightful panels.

Unparalleled Networking Opportunities. Connect with peers, build valuable relationships, and exchange insights with leading risk practitioners.

Sharpen Your Skillset. Enhance your understanding of risk frameworks, methodologies, and best practices.

Stay Ahead of the Curve. Gain insights into emerging trends and regulatory changes that will impact your risk landscape.

Keynote & Host Michael Rasmussen

Michael Rasmussen

Michael Rasmussen is an internationally recognized thought leader and pioneer in governance, risk management, and compliance (GRC). With over 30 years of experience, he has extensive expertise in enterprise GRC strategy and processes supported by robust information and technology architectures. Known as the “Father of GRC,” Michael was the first to define and model the GRC market in February 2002 while at Forrester, setting the foundation for the modern understanding of GRC.

About GRC World Forums

Our in-person events and livestream experiences provide learning, networking and benchmarking opportunities to governance, risk and compliance professionals.

For speakers & contributors we provide a platform and global audience.

For viewers, attendees and readers our content provides invaluable insight and analysis.

For vendors we optimise every stage of the ‘marketing funnel’

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

2025 State of the GRC Market: Hitchhiker’s Guide to the GRC Galaxy
2025-07-21 10:00 - 12:00 (America/Chicago)
Don’t Panic. But also — don’t forget your towel.

The GRC market for solutions and services has become its own galaxy: vast, confusing, filled with unexpected threats, and occasionally prone to entire segments being destroyed to make way for regulatory hyperspace bypasses. For those trying to navigate this expanse — whether you’re a risk manager, compliance officer, technology buyer, or investor — the 2025 Hitchhiker’s Guide to the GRC Galaxy is your essential orientation briefing.

It’s no longer just GRC vs. RegTech vs. RiskTech; it’s an ecosystem of over 600 solutions that GRC 20/20 actively maps and monitors. Some are sleek, interstellar platforms trying to span the enterprise; others are best-of-breed asteroids tackling highly specific use cases like AI ethics, ESG disclosures, or third-party risk intelligence. GRC 20/20 covers:

68 vendors covered in deep and rigorous analysis — including client feedback, technical evaluations, and market differentiation.

345 more are monitored loosely.

A few hundred others orbit at the edges — niche, emerging, or narrowly scoped, but relevant to the expanding universe of governance, risk, and compliance.

And yes, some of these solutions feel like they were designed by the Vogons themselves: overcomplicated, bureaucratic, and liable to blow up your budget without warning.

A New Era of Market Segmentation & GRC 7.0

In this 2025 research briefing, we boldly go beyond old taxonomies to unveil a completely new GRC market segmentation framework — one that actually makes sense in today’s interplanetary chaos of compliance, risk, and organizational complexity.

We’ll also unveil GRC 7.0: GRC Orchestration — the next evolutionary stage in the GRC lifecycle. Where GRC 6.0 focused on business integration and no-code agility, GRC 7.0 is about real-time coordination. Orchestration aligns fragmented data, systems, and stakeholders into a single, responsive engine that helps you reliably achieve objectives, address uncertainty, and act with integrity — even when the Galactic Civilizations of Regulation unexpectedly change course. It leverages agents AI to deliver on business integrated GRC, it leverages digital twins for risk and regulatory change scenario modeling, and so much more.

The Risk of Doing Nothing (or of Ignoring the Imminent Arrival of a Bureaucratic Constructor Fleet)

If your current GRC program relies on spreadsheets, static policy portals, or the hope that regulators won’t notice the gaps in your third-party risk assessments — now might be the time to read the small print on interstellar demolition orders.

Geopolitical risk is shifting faster than hyperspace travel. Regulations evolve while you’re still printing last quarter’s compliance reports. AI governance, ESG accountability, and data privacy are no longer fringe concerns — they’re core business issues with real-time implications. Your business is expanding; your risk perimeter is dissolving; and your stakeholders are expecting insight, not excuses.

This is the now-or-never moment. Organizations that act can harness GRC as a strategic, forward-looking capability. Those that don’t may soon find themselves metaphorically (or literally) vaporized.

What You’ll Learn (besides the answer to life, the universe, and everything)

How the GRC market has expanded, shifted, and converged across 600+ solutions

A first look at GRC 20/20’s 2025 segmentation framework and taxonomy refresh

A deep dive into the rise of GRC Orchestration — GRC 7.0 — and what it means for your organization

Key trends by geography, industry, buyer role, and organization size

RFP and inquiry intelligence from 2024 and into 2025 — what buyers are asking for and why

Where the market is heading and what matters most to buyers in 2025

Who Should Attend

This briefing is your towel for the GRC galaxy. It’s designed for:

Executives and risk leaders scoping or scaling GRC strategy and technology

GRC technology and service providers trying to position and compete

Investors analyzing the ever-expanding market

Curious minds who understand that when it comes to risk, the worst strategy is hoping the Vogons will just go away

Cost & Access

GRC Advisor Subscribers

Included for all employees; log in under your account to register free.

Individual Access

Pre-Event (before July 13): $495

Post-Event (after July13): $595

Group Access (All Employees)

Pre-Event (before July 13): $995

Post-Event (after July 13): $1095

Outline: 2025 GRC Market Research Briefing

I. GRC Defined — Past to Present

GRC 1.0 through 6.0

Introduction of GRC 7.0 – Orchestration

II. The New GRC Taxonomy

Enterprise Platforms vs. Domain-Specific Solutions

Emerging Cross-Domain Categories

The Interstellar Index of GRC Sub-Segments

III. Trends, Drivers & Disruption

Velocity of Risk: From Cyber to Sanctions

Regulation on the Move: ESG, AI, Privacy

Business Complexity & the Extended Enterprise

Inquiry & RFP Insights

IV. Market Segments Deep Dive

Enterprise GRC Platforms

Strategy & Performance Alignment

Risk & Resilience

Compliance & Obligation Management

Audit, ESG, Ethics, Controls, Incidents, and more

Domain-Specific GRC (AI, IT, HR, Finance, Legal, Privacy, Quality, Health & Safety)

In short, if you’re trying to make sense of the GRC universe — or avoid being unceremoniously flattened by an interstellar compliance audit — this is the guidebook you need. Hitch a ride with GRC 20/20 and get the clarity, structure, and foresight your organization needs in 2025.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Connected Compliance: Aligning Risk, Resilience, and Integrity
2025-07-22 10:00 - 11:00 (America/Chicago)
REGISTER

Join us for a practical discussion on how to evolve your compliance program into a strategic enabler, and how connected compliance enhances resilience, uncovers risk insights faster, and builds trust across stakeholders.

Highlights

Learn how to break down silos between risk, compliance, audit, and legal

Discover ways to link compliance outcomes to organizational resilience and strategy

Discover real-world examples of connected compliance in action

Learn steps to assess and mature your program using the GRC Capability Model

In today’s rapidly evolving risk landscape, compliance programs can no longer operate in silos. To effectively protect the organization and drive performance, leaders must embrace a connected approach—one that integrates compliance into enterprise risk management, business continuity, and organizational integrity.

Join us for a practical discussion on how to evolve your compliance program into a strategic enabler. We’ll explore how connected compliance enhances resilience, uncovers risk insights faster, and builds trust across stakeholders. Learn how forward-thinking organizations are aligning people, processes, and platforms to manage uncertainty and embed integrity into every decision.

SPEAKER:

Laura Jacobus, Strategic Advisor, Mitratech

Michael Rasmussen, GRC Analyst & Pundit, GRC 20/20 Research, LLC

GRC 20/20 Speaker

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Sponsor

Mitratech is a trusted, global technology partner empowering corporate legal, risk & compliance, and HR professionals to maximize productivity, control expense, and mitigate risk by deepening operational alignment, and increasing collaboration & visibility across their organization. With Mitratech’s proven portfolio of end-to-end solutions, organizations worldwide are able to proactively identify and implement best practices and standardize processes across all lines of business to manage risk and ensure business continuity. Mitratech partners with more than 10,000 companies worldwide, from small nimble teams needing tech-enablement, to the largest organizations in the world trying to centralize, streamline and collaborate across their legal and risk functions. Mitratech’s user base spans more than 160 countries. Innovate now by visiting: www.mitratech.com

Webinar Host

OCEG (formerly the Open Compliance and Ethics Group) is a global, nonprofit think tank and community. We inform, empower, and help advance our 120,000+ members on governance, risk management, and compliance (GRC). Independent of specific professions, we provide resources, education, and certifications to drive leadership and strategy through the application of the OCEG GRC Capability Model™ and Principled Performance®. An OCEG differentiator, Principled Performance enables the reliable achievement of objectives while addressing uncertainty and acting with integrity. Our members include c-suite, executive, management, and other professionals from small and midsize businesses, international corporations, nonprofits, and government agencies. Founded in 2002, OCEG has locations around the globe.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

The Risk Factor: Why AI Belongs at the Center of ERM Strategy
2025-07-31 11:00 - 12:00 (America/New_York)
REGISTER

Emerging risks are rising fast—but most traditional ERM strategies weren’t built for today’s pace. From surfacing risk signals sooner to interpreting shifting stakeholder sentiment, AI is unlocking new ways to strengthen enterprise resilience. If you’re evaluating how emerging technologies fit into your risk strategy, this session explores why AI should be at the core of the modern ERM function.

Join us to hear insights from Michael Rasmussen, GRC Analyst and Pundit at GRC 20/20 Research and Hardik Mehta, Global Head of Risk & Statutory Compliance at J.P. Morgan Chase along with our host Chris Shaw, SVP of Risk Solutions at Signal AI, for a thought-provoking conversation on how AI is reshaping the future of enterprise risk.

Why you can’t miss this webinar:

Discover where AI fits into a modern ERM framework

Hear how risk leaders are thinking about real-time risk intelligence

Explore how tech can bridge gaps in fragmented risk functions

Register now to explore how artificial intelligence and machine learning are being used to detect, analyze, and mitigate emerging risks before they escalate.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

Signal AI, a Reputation and Risk intelligence company, helps businesses make sense of the outside world. Using the proprietary AI-powered External Intelligence platform, organizations can spot critical signals in the external noise, allowing them to get ahead of risk and opportunity and make confident decisions. Our platform crunches huge amounts of information from the world’s content and provides timely insight into trends, patterns, and unknown unknowns to help business leaders make more informed decisions. Signal AI serves over 40% of the Fortune 500, including Deloitte, Google, and Spotify, and is building an innovative, inclusive, and enduring company to transform the way businesses make decisions.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Turning GRC and Audit into Strategic Advantage
2025-08-13 14:00 - 15:00 (America/New_York)
REGISTER

This webinar explores why checkbox compliance is no longer enough—and how it can create a false sense of security. Join industry experts from Compyl, 360 Advanced, and Michael Rasmussen as they discuss how aligning a mature GRC program with a strategic audit partner leads to real risk reduction and long-term value.

We will cover:

The risk of relying on checkbox frameworks and how they leave gaps in your real-world security posture

Why today’s audits should inform strategic decisions, not just verify controls

How GRC platforms and audit firms can work in sync to surface meaningful data, uncover blind spots, and guide long-term success

What executive stakeholders actually want to hear when you say you’re “compliant”

WHERE

This is a virtual webinar. After you register, you’ll receive a private access link via email to join the session on Wednesday, August 13th at 2:00 PM EDT.

WHY

Attendees will walk away with a clearer understanding of why checkbox compliance falls short—and how to build a GRC program that truly supports security, risk reduction, and business goals. You’ll also learn how partnering with the right audit firm can bring strategic insights to your organization, turning audits from a burden into a competitive advantage.

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

We believe cyber risk management has evolved from an IT problem into a business problem. Because of this shift, security executives must adapt how they communicate risk to the board. But since risk is hard to frame in the context of a business initiative, security executives need help putting risk into business terms that the board can use to make informed, strategic decisions to drive growth. Additionally, security teams are often seen as the team that says “no”, shutting down projects and initiatives due to risk, which limits growth and results in missed opportunities. At ZenGRC, we aim to make risk management more strategic, pulling it up from tactical “check-the-box” work to something more valuable to both the company and the security team. There’s an opportunity for security executives to go beyond just protecting their company and secure their role as a more valuable, strategic member of the team. We can help by giving them the business context they need to report risk to their board in a way that is easy to understand and act upon.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Federal Data Confidence and Regulatory Assurance Webinar
2025-08-14 13:00 - 14:00 (America/New_York)
REGISTER

Is FedRAMP compliance a requirement for you? Join industry premier experts to discover whether your GRC program meets the same rigorous federal data classification requirements that regulators demand from your organization. Learn how to eliminate compliance blind spots and align with evolving standards like Executive Order M-24-15 and FedRAMP 20x initiatives.

Speakers

Jon Leitner, Chief Revenue Officer, ZenGRC

Michael Rasmussen, GRC Pundit & Analyst, GRC 20/20, GRC Report

Michael Parisi, CGO, Steel Patriot Partners

Mike Schreiner, COO, Paramify

Dr. Stephanie Carter, Federal Service Lead, Insight Assurance

GRC 20/20 Presenter . . .

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Webinar Host . . .

We believe cyber risk management has evolved from an IT problem into a business problem. Because of this shift, security executives must adapt how they communicate risk to the board. But since risk is hard to frame in the context of a business initiative, security executives need help putting risk into business terms that the board can use to make informed, strategic decisions to drive growth. Additionally, security teams are often seen as the team that says “no”, shutting down projects and initiatives due to risk, which limits growth and results in missed opportunities. At ZenGRC, we aim to make risk management more strategic, pulling it up from tactical “check-the-box” work to something more valuable to both the company and the security team. There’s an opportunity for security executives to go beyond just protecting their company and secure their role as a more valuable, strategic member of the team. We can help by giving them the business context they need to report risk to their board in a way that is easy to understand and act upon.
Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook

Riding the Compliance Carousel: Managing Emerging Regulatory Risks & New Rules, LONDON
2025-09-03 14:00 - 18:30 (Europe/London)
REGISTER

Riding the Compliance Carousel: Managing Emerging Regulatory Risks & New Rules.

Join GRC expert, Michael Rasmussen and Corlytics for an exclusive workshop designed for compliance and risk executives, addressing the growing challenges of regulatory complexity. Discover actionable strategies and best practices for identifying, assessing, and implementing effective compliance frameworks in today’s fast-changing environment. The workshop will highlight the critical role of technology and AI in streamlining compliance management and enhancing organisational agility.

Who’s attending?

Risk and compliance leaders from a wide range of financial services industries, including G-SIFI, Banks, Asset Management, Insurance, and Payments, will attend the workshop.

Location

London, Wednesday 3 September 2025 2pm – 6:30pm

Register below if you would like to join this event

Agenda

2:00pmWelcome and IntroductionsTea & coffee available2:30pmPart 1: The Strategic Importance of Compliance & Regulatory Change ManagementTopics: understanding the impact of regulatory evolution, best practices for adapting to changes and mitigating compliance risks3:00pmPart 2: Achieving Excellence in Compliance & Regulatory Change ManagementTopics: Horizon Scanning, Obligation Identification, Regulatory Mapping and Policy Change Management.3:30pmPart 3: The Future of Compliance – Leveraging AI for Efficiency & AgilityTopics: AI’s role in improving compliance strategy, decision-making, efficiency and risk mitigation.4:00pmCorlytics Overview: Shaping the Future of RegTechIntroduction to Corlytics’ end-to-end Regulatory Change Platform and Client Case Study. 5:00pmNetworking and drinks

GRC 20/20 Instructor

Michael Rasmussen

Michael Rasmussen is an internationally recognized authority, thought leader, and pioneer in the disciplines of governance, risk management, and compliance (GRC). With over 30 years of experience, he is globally known for defining and shaping GRC strategy, processes, and technology. In February 2002, while at Forrester Research, Michael developed the concept of GRC — establishing the foundation for how organizations approach strategy, process, and technology in today’s complex business environment. For this, he is widely acknowledged as the “Father of GRC.”

A trusted advisor to boards, executives, and professionals around the world, Michael has dedicated his career to helping organizations design and implement effective GRC strategies that are aligned with business objectives. His work empowers organizations to be more effective, efficient, resilient, and agile. He is a sought-after keynote speaker, author, and advisor, with his thought leadership influencing legislation, regulatory frameworks, and corporate best practices globally.

Michael is the host of the Risk is Our Business podcast, where he leads conversations with global experts exploring the evolving frontiers of risk, resilience, and corporate integrity.

Workshop Host

Corlytics is a global RegTech consolidator, a leader in regulatory intelligence, content and automated policy compliance and attestation. Delivering a platform that manages the entire regulatory risk value chain, Corlytics provides assurance on never-ending regulatory changes to compliance, risk, legal and audit teams globally.

Share this:
Email a link to a friend (Opens in new window)
Email

Print (Opens in new window)
Print

Share on LinkedIn (Opens in new window)
LinkedIn

Share on X (Opens in new window)
X

Share on Facebook (Opens in new window)
Facebook
