Day 1: Monday, November 17, 2025

12:00 PM - 12:50 PM

Registration & Networking

 
12:50 PM - 1:00 PM

MetricStream Welcome

Introduction and Welcome

 

Track 1

Track 2

Track 3

 
1:00 PM - 2:00 PM
 

Track 1

Workshop

The Paradigm Shift and the Future: Managing Risk Complexity with New Strategies and Technologies

In today’s rapidly changing business environment, traditional approaches to risk management are no longer enough. This 2-hour training workshop, led by GRC and ERM expert and educator Chris Mandel, will provide risk and compliance professionals with practical strategies to address the complexities of modern risk management. The session will explore the forces reshaping the risk landscape, the limitations of conventional frameworks, and the shifts organizations must embrace to stay resilient. Participants will gain valuable insights into emerging methods, tools, and technologies that can strengthen risk strategies and enhance organizational agility. Through guided discussions and real-world perspectives, this workshop will help attendees reimagine the role of risk management and prepare their organizations to navigate the future with confidence.

Track 2

Workshop

Optimize your GRC Framework with AI. What's New and What’s Next?

Optimize your GRC Framework with AI – What’s New and What’s Next? explores the latest enhancements to the AI platform, designed to elevate your GRC capabilities. This session will showcase new features and innovations that empower organizations to streamline risk management, improve compliance, and enhance decision-making. Attendees will discover how AI-driven tools are transforming GRC processes, and gain insights into future developments that will keep your organization ahead in an ever-evolving risk landscape

Track 3

Workshop

Risk and Resilience by Design: Building the Future-Proof Enterprise

In today’s dynamic business environment, where disruptions are becoming more frequent and unpredictable, risk and resilience must be built by design, not by reaction. Organizations that embed resilience into their core business strategy—rather than treating it as a reactive, compliance-driven exercise—are better equipped to navigate operational, cyber, and supply chain risks. This requires a shift from traditional risk management approaches to proactive, integrated frameworks that align risk, resilience, and performance objectives. By leveraging AI, automation, and real-time data analytics, businesses can anticipate threats, monitor risks dynamically, and continuously strengthen their resilience posture. The key to future-proofing operations lies in creating a resilience roadmap that not only mitigates risks but enables businesses to thrive in the face of uncertainty.

 
2:00 PM - 3:00 PM
 

Track 1

Workshop (continued)

How do you practice effective ERM and how does ERM align with a GRC strategy?

Join our workshop to explore the synergy between Enterprise Risk Management (ERM) and Governance, Risk, and Compliance (GRC). Learn about effective ERM practices, integrating proactive risk identification, assessment, and mitigation into strategic decision-making. Understand how an aligned ERM/GRC strategy synchronizes risk management with compliance and governance efforts. Discover leadership's expectations from ERM/GRC practitioners, including a profound understanding of the organization's risk landscape and the ability to provide timely assessments. Explore ERM's pivotal role in mission accomplishment, facilitating organizations to pursue objectives while navigating uncertainties.

Track 2

Workshop

What's New in MetricStream's Operational Risk and Enterprise Risk Management

Discover the latest innovations in MetricStream’s Operational Risk and Enterprise Risk Management solutions. This session will spotlight new features that enhance risk visibility, streamline risk assessments, and elevate control testing efficiency. Learn how AI-driven insights, integrated issue management, and intuitive dashboards empower risk teams to act faster and smarter. Whether you're modernizing risk frameworks or strengthening resilience, explore how MetricStream is driving the next generation of risk management excellence across the enterprise.

Track 3

Workshop (continued)

Risk and Resilience by Design: Building the Future-Proof Enterprise

In today’s dynamic business environment, where disruptions are becoming more frequent and unpredictable, risk and resilience must be built by design, not by reaction. Organizations that embed resilience into their core business strategy—rather than treating it as a reactive, compliance-driven exercise—are better equipped to navigate operational, cyber, and supply chain risks. This requires a shift from traditional risk management approaches to proactive, integrated frameworks that align risk, resilience, and performance objectives. By leveraging AI, automation, and real-time data analytics, businesses can anticipate threats, monitor risks dynamically, and continuously strengthen their resilience posture. The key to future-proofing operations lies in creating a resilience roadmap that not only mitigates risks but enables businesses to thrive in the face of uncertainty.

 
3:00 PM - 3:20 PM

Break

 
3:20 PM - 4:20 PM
 

Track 1

Workshop

To be Announced

Track 2

Workshop

To be Announced

Track 3

Workshop (continued)

Risk and Resilience by Design: Building the Future-Proof Enterprise

In today’s dynamic business environment, where disruptions are becoming more frequent and unpredictable, risk and resilience must be built by design, not by reaction. Organizations that embed resilience into their core business strategy—rather than treating it as a reactive, compliance-driven exercise—are better equipped to navigate operational, cyber, and supply chain risks. This requires a shift from traditional risk management approaches to proactive, integrated frameworks that align risk, resilience, and performance objectives. By leveraging AI, automation, and real-time data analytics, businesses can anticipate threats, monitor risks dynamically, and continuously strengthen their resilience posture. The key to future-proofing operations lies in creating a resilience roadmap that not only mitigates risks but enables businesses to thrive in the face of uncertainty.

 
4:20 PM - 5:20 PM
 

Track 1

Workshop

To be Announced

Track 2

Workshop

Level Up Your Compliance Posture with MetricStream’s All-New Compliance Management

Level Up with MetricStream’s All-New Compliance Management showcases the latest features designed to enhance compliance processes and drive greater efficiency. This session will explore how MetricStream’s advanced solutions streamline compliance tracking, automate workflows, and provide real-time visibility into regulatory requirements. Attendees will learn how to leverage these new capabilities to improve accuracy, reduce manual effort, and ensure proactive compliance. Discover how MetricStream’s innovative tools help organizations stay ahead of evolving regulations while mitigating compliance risks.

Track 3

Workshop (continued)

Risk and Resilience by Design: Building the Future-Proof Enterprise

In today’s dynamic business environment, where disruptions are becoming more frequent and unpredictable, risk and resilience must be built by design, not by reaction. Organizations that embed resilience into their core business strategy—rather than treating it as a reactive, compliance-driven exercise—are better equipped to navigate operational, cyber, and supply chain risks. This requires a shift from traditional risk management approaches to proactive, integrated frameworks that align risk, resilience, and performance objectives. By leveraging AI, automation, and real-time data analytics, businesses can anticipate threats, monitor risks dynamically, and continuously strengthen their resilience posture. The key to future-proofing operations lies in creating a resilience roadmap that not only mitigates risks but enables businesses to thrive in the face of uncertainty.

 
5:30 PM - 6:00 PM

GRC Journey Awards

 
 

Day 2: Tuesday, November 18, 2025

7:50 AM - 8:50 AM

Registration & Networking Breakfast

 
8:50 AM - 9:00 AM

Welcome Note

Introduction and Welcome

 
9:00 AM - 9:45 AM

Opening Keynote

Reimagining GRC with AI-First Strategy

In today's rapidly evolving risk landscape—driven by cyber threats, regulatory changes, and operational complexity—organizations are looking for a simpler, smarter and faster way to manage GRC.This keynote explores the future of GRC with an AI-first strategy. Explore how generative and agentic AI streamline assessments, automate evidence collection, and deliver real-time insights—driving agility, accountability, and strategic impact. Join us to see how AI-first Connected GRC simplifies governance and amplifies outcomes across the enterprise.

 
9:45 AM - 10:10 AM

Keynote

Building the Future of GRC, Today

Join Marc Levine, CEO of MetricStream, as he shares his visionary perspective on the future of MetricStream. In this keynote, Marc will showcase how MetricStream is reimagining GRC with AI.

 
10:10 AM - 10:50 AM

CXO panel

The Evolving Role of a Chief Risk & Compliance Officer

As regulatory landscapes shift and businesses embrace digital transformation, the role of Chief Risk & Compliance Officers is rapidly evolving. Beyond traditional oversight, they now play a strategic role in embedding resilience, managing emerging risks, and leveraging technology for proactive compliance. This session explores how risk and compliance professionals can adapt to rising expectations, leverage AI and automation, and foster accountability to keep organizations agile.

 
10:50 AM - 11:25 AM

Break

 
11:25 AM - 11:55 AM

Customer Story

To Be Announced

 
11:55 AM - 12:35 PM

Product Keynote

AI-First Connected GRC: The Next Frontier in Risk and Resilience

As GRC continues to evolve in an increasingly complex risk environment, the next frontier is being shaped by the transformative power of artificial intelligence. AI is the catalyst accelerating every element of Connected GRC. From predictive analytics to intelligent automation and real-time decision support, learn how MetricStream AI-first Connected GRC is redefining how organizations anticipate risk, ensure compliance, and drive strategic agility. Whether you're a risk, audit or compliance executive this session will equip you with actionable strategies to future-proof your GRC programs and unlock measurable value—at scale.

Raghuram Srinivas

Head of Product, MetricStream
 
12:35 PM - 1:25 PM

Lunch

 

Track 1

Track 2

Track 3

 
1:25 PM - 2:05 PM
 

Track 1

Customer Stories

The Cost of Doing Nothing: The Business Case for Automating Your GRC Program

Discover how automating GRC processes can eliminate inefficiencies, reduce costs, and strengthen risk management. This session explores the hidden pitfalls of manual, siloed systems and offers practical guidance on streamlining GRC through the right mix of technology and talent. Industry experts will share real-world insights, highlight best practices, and walk through how to measure the ROI of GRC automation—helping you move forward confidently on your GRC transformation journey.

Track 2

Panel

Cyber Risk, Resilience, and Regulation: Building a Connected Defense

In an era of rising cyber threats and evolving regulations, resilience is not optional—it’s a boardroom priority. This panel will feature senior leaders sharing strategic insights on aligning cyber risk management with compliance frameworks and enterprise resilience. Discover how to strengthen executive oversight, build cross-functional collaboration, and drive a proactive, risk-aware culture that delivers confidence to stakeholders while ensuring compliance in an increasingly interconnected digital landscape.

Track 2

Panel

Winning Together with Continuous, Cognitive, and Connected GRC

Success in GRC requires everyone across the organization to be aligned, informed, and engaged. This panel awill explore how continuous, cognitive, and connected GRC transforms governance by breaking silos, simplifying processes, and creating a common language for risk and compliance. Discover how advanced technologies, data intelligence, and collaboration amplify outcomes, drive smarter decisions, and foster enterprise-wide buy-in. Join industry leaders to learn how to simplify GRC and build a unified approach to winning together

 
2:05 PM - 2:45 PM
 

Track 1

Customer Story

To be Announced

Track 2

Expert Talk

AI in GRC: Real Use Cases Driving Value Today

Artificial Intelligence is no longer just a buzzword—it’s reshaping Governance, Risk, and Compliance (GRC) with tangible outcomes. This panel will feature leaders sharing real-world use cases where AI is enhancing risk visibility, automating compliance, and driving faster, data-backed decisions. Discover how organizations are unlocking value by integrating AI into GRC workflows, improving efficiency, and anticipating emerging risks. Join us to explore practical strategies for implementing AI-driven solutions that deliver measurable business impact

Track 3

Panel

Navigating Changing Cyber Regulations: How to Mitigate Cyber Risk, Ensure Compliance & Resilience

With cyber regulations rapidly evolving worldwide, organizations must adapt quickly to manage risks, remain compliant, and build resilience. This panel brings together industry experts to discuss strategies for navigating regulatory complexities, mitigating cyber threats, and strengthening cyber resilience frameworks. Gain insights into leveraging technology, automation, and risk intelligence to stay ahead of compliance mandates while maintaining robust security postures. Join us to explore actionable approaches for thriving in a constantly shifting cyber landscape.

 
2:45 PM - 3:25 PM
 

Track 1

Panel

What’s Next for Operational Risk Management?

As the risk landscape evolves, operational risk management must adapt to new challenges, including emerging technologies, regulatory pressures, and dynamic market conditions. In this session, the panelists will explore what are the key changes expected in operational risk management, how to make operational risk more strategic and how to drive actional insights through emerging technologies like AI, automation and quantification. Join us to understand the practical strategies to elevate your ORM programs and build resilience while maintaining a competitive edge in a dynamic risk environment.

Track 2

Customer Story

To be Announced

Track 2

Panel

The GRC Metrics That Matter to Boards and Regulators

Boards and regulators are demanding sharper, more actionable insights from GRC programs to drive informed decisions and ensure accountability. This panel will explore the key risk, compliance, and resilience metrics that truly resonate with leadership and regulatory bodies. Learn how to translate complex GRC data into meaningful narratives, highlight performance and risk trends, and demonstrate business value. Join industry leaders as they discuss best practices for aligning GRC metrics with strategic and regulatory expectations.

 
3:25 PM - 3:45 PM

Break

 
3:45 PM - 4:15 PM
 

Track 1

Panel

Modernizing Compliance: AI-First, Automated, Risk Aware, Culture Driven

In today’s dynamic regulatory landscape, traditional compliance approaches are no longer sufficient. This panel explores how organizations can modernize compliance by adopting an AI-first mindset, leveraging automation to streamline processes, and embedding risk awareness into every layer of decision-making. Our experts will discuss how fostering a culture of integrity and accountability complements advanced technologies, enabling proactive compliance strategies.

Track 2

Sponsor Session

To be Announced

Track 3

Panel

Driving Operational Efficiency and Business Growth through Collaborative Internal Audits

In today’s dynamic business landscape, internal audits are no longer just a compliance exercise—they are a strategic tool for driving operational efficiency and growth. This session explores how organizations can foster collaboration between audit, risk, and business teams to enhance transparency, identify opportunities, and streamline processes. Learn best practices for leveraging technology, data insights, and cross-functional partnerships to transform audits into a value-driven function that strengthens resilience and accelerates business success

 
4:15 PM - 5:00 PM

Closing Keynote 

 
5:00 PM - 6:00 PM

Reception