Register

Agenda Day 2, Wednesday, April 22, 2026:   (see Agenda Day 1)     (back to GRC EMEA Event Summary)

09.00 – Opening Remarks from the Chair

09.00 – Bringing GRC, Ethics and Integrity to the 1st Line of Defense:  The How

·        How GRC, leadership and integrity can be best cascaded from the top, while reflecting the tone from the other levels

·        Communications and trainings strategies

·        Culture, behavior and human factors to address that reflect the reality of today’s workforce

·        The use of various platforms, tools and technologies to reach the first line of defense in a meaningful way

John Murphy, Director Ethics & Compliance,  Rio Tinto

 

09.40 – Setting up an Effective 3rd Party Due Diligence Program

·        Your “KYC/KYP”: Implementing a comprehensive KYC/KYP program that addresses broad compliance risks, including anti-bribery and anti-corruption, etc.

·        Ensure that your 3rd party compliance program is flexible to withstand the dynamic regulatory landscape

Dr. Nikolaj Laschko, Deputy Regional Chief Compliance Officer, Schaeffler

 

10.20 – Building a Transformative Risk Organization: Quantification and Validation

·        Setting up a quantitative risk function to generate risk insights

·        Comparing forecasted risks with materialized events: known biases and blind spots

·        How practical modelling helps drive better decisions

Maya Wellig, Director, Head of Global Risk Management, Sunstar Global

 

11.00 - Morning Coffee and Networking

 

11.30 – Panel discussion: Organising a Centralized Centre of Excellence for Ethics

·        A central ethics channel repository: How to use this to spot trends from reported ethics violations

·        Using AI to analyze, predict and identify ethics violations, red flags or potential weak points

·        Comparison of ways to set up a CoE, governance structures and workstreams

Geerte Hesen, Chief Legal and Compliance Officer, Ferrovial

Rohan Kapoor, Head – Risk & Operations, Novartis

 

12.00 - Walk the Talk: ESG in a Multinational Corporation

·        Outside Services and Inside Commitment at TÜV SÜD

·        ESG Governance, Materiality and KPI Framework

·        Readiness, Roll-Out and Data Collection & Verification Process

·        Global Implementation Verification Audit

Beatriz Bottner, Internal Audit - Global Lead Compliance, TÜV SÜD

 

12.40 – Developing Internal Control Systems to Support ESG

·        A Sustainability ICS: features and requirements

·        CSRD, CSDDD, EU Omnibus, COSO and other regulatory components

·        Double Materiality Assessment: the cornerstone of IC over sustainability reporting

·        Leveraging on existing IC over Financial Reporting 

·        The importance of strong governance and control ownership

Aymen Ben Guirat, Director Internal Control, Essity

 

13.20 – Lunch Break

 

14.20 – Navigating Risk, Compliance, and ESG in a Complex Geopolitical Environment

 

Nicolas Riffard, Head of Global Assurance, Oriflame Cosmetics

 

15.00 - How to Conduct a Fraud Risk Scenario Assessment in your Business and also Comply with ISO37001

·        Apply a practical methodology to conduct a comprehensive fraud risk scenario assessment

·        Recognise strategies to reduce exposures to fraud risk and mitigate associated financial impact

·        Assess the effectiveness of existing policies, guidelines and controls to prevent, detect and deter fraud in the workpace

·        Design and build an ISO37001 anti-bribery compliant framework

Pritesh Dattani, Global Head of Internal Audit, Swissport

 

15.40 - Internal Investigations:  GRC Resource Allocation

·        Handing Compliance and Fraud investigations

·        Best practices in an in-house investigations function and the success factors

·        People and resource management in investigations

Dr. Anastasia Berger, Director Group Investigations, Bilfinger

 

16.20 - Closing Remarks from the Chair and End of Forum

(see agenda Day One)  (Back to GRC EMEA Event Summary)