Agenda Day 1, Tuesday, April 20, 2027: (see Agenda Day 2) (back to GRC EMEA Event Summary)
08.30 – Registration and Coffee
09.00 - Opening Remarks from the Chair
09.20 - Sponsor Session
10.00 – Building a Transformative Risk Organization: Quantification and Validation (update)
· Setting up a quantitative risk function to generate risk insights
· Comparing forecasted risks with materialized events: known biases and blind spots
· Closing the loop between forecast and actual
· Who owns the outcome
Maya Wellig, Director, Head of Global Risk Management, Sunstar Global
10.30 – From Control Functions to Decision Governance: Building Integrated Assurance for Better Business Decisions
How Compliance, Risk Management, Internal Controls and Internal Audit can evolve from separate control functions into an integrated governance capability that enables better management decisions while strengthening resilience and trust.
Patrick Vogt, Chief Compliance Officer, DMG MORI EMEA Holding
11.00 – Morning Coffee and Networking
11.30 – Sponsor Session
12.00 – Embargos, Customs and Sanctions Compliance: Supply Chain Risks and Regulations
· The methods and strategies to build a strong sanctions and embargo screening process
· Tariffs and customs : key features of a function that monitors the environment and prepares your GRC and tax function for risks
· KPIs and performance measurement of your programs
Sandrine Pommey, Group Compliance Officer,Hexagon AB
12.30 – AI / Agentic AI Use Cases in GRC
· AI use to identify business and compliance risks
· AI to support effectiveness measurement and assessment of the quality and improvement of the GRC program
· AI Agents: how we use them in GRC: what new opportunities they bring and how to balance against human work
Thom Schiltmans, Head of Governance, Risk & Compliance, Corporate Security, Signify
13.10 – Lunch
14.10 – Risk Appetite and Risk Culture
· Identify the drivers for your business model
· Anticipate the areas that could be disrupted
· Articulate the risk appetite
· What can you use from your company’s incidents?
· Find control mechanisms that can mitigate/reduce the risks
· Black swans, scenario planning and risk universe
Brita Waltzinger, Senior Director Compliance and RCO Europe, DHL Express
14.40 – Sponsor Session
15.20 – Corporate AI Governance: Ensuring that AI Use in your Organisation is Compliant with your GRC Policies
· Governance and policy-making on the use of AI in the organization
· Agentification of business operations
Jana Kuperschmidt, Head of Compliance, PRYM
15.50 – Afternoon Coffee and Networking
16.20 – GRC Training: Aligning Strategies to Maximize Impact
• One ARCademy to rule them all: Privacy, AI, Ethics and other GRC trainings used to run separately. We combined them into one program on one platform, which allowed us to maximize synergies and efforts, and stop competing among ourselves for attention and completion
• Run like a campaign, not a chore: we built a recognizable brand, introduced catchy course titles and badges to keep learners engaged. We also prepared a cohesive internal communications campaign, using all possible channels, to increase recognition
• Continuous feedback: we made a conscious effort to bring in feedback after each module, showing employees our commitment to improving their experience
Sandra Kilbourne, VP Chief Risk & Compliance Officer, Amadeus
Sara Aparicio, Global Head of Risk & Corporate Compliance, Amadeus
16.50 – The Next-Gen Assurance Blueprint: Integrated Governance & AI?
Traditional GRC silos are no longer equipped for the speed of modern business, shifting regulations, or the rise of AI. Join us for an interactive peer session where we will unpack the blueprint for a modern, combined assurance function.
1. The combined Assurance matrix: Integrating Compliance, Risk Management, Internal Audit, and ESG to eliminate duplicate testing and cover critical blind spots.
2. Human-in-the-Loop AI: How continuous auditing, automated controls, and machine learning enhance—rather than replace—human judgment.
3. The skillset of tomorrow: Defining the hybrid technical and strategic capabilities required to lead next-generation governance.
Kurt Wellens, VP Assurance, TVH
17.20 – Closing Remarks from the Chair and End of Day 1
Networking Reception