Orchestrating Third-Party Risk

Operational dependency, cyber exposure, and sustainability risk are not three separate programmes. They are a single governance challenge arriving from multiple regulators simultaneously—from DORA to the EU AI Act. Relying on periodic, annual questionnaires is no longer a defensible strategy; boards now demand continuous, audit-grade evidence.

On 15 July 2026, join SustainGRC for a highly disciplined, unscripted 60-minute panel moderated by Simon Whitburn. Featuring senior practitioners bridging four distinct lenses—Board Governance, Operational Resilience, Cyber/AI Risk, and Supply Chain—this session bypasses vendor pitches to deliver the concrete infrastructure steps required to manage your entire supplier network on a single record.

Governing Every AI System Before the EU AI Act Deadline

As the law stands today, 2 August 2026 is the binding enforcement date — not a target, not a planning aspiration.

A Digital Omnibus proposal currently under EU negotiation could extend certain high-risk enforcement deadlines to December 2027. It is not law. It remains conditional on harmonised standards being available, and it must itself be adopted by the European Parliament and Council before August 2026 to have any effect. Any governance programme built around a possible extension is a risk posture no board should endorse — and no audit committee should approve. Treat 2 August 2026 as your compliance anchor.

The exposure is not primarily a legal question. It is a governance one. Organisations that cannot demonstrate a controlled, documented, and board-accountable AI estate are exposed — to regulators, to audit findings, and to the reputational consequences of an undocumented risk materialising in front of a board that assumed it was managed. Non-compliance with Annex III high-risk AI obligations carries penalties of up to €35 million or 7% of global annual revenue. But the governance failure precedes the fine.

For UK and GCC organisations with EU market exposure, the transition from AI curiosity to Annex III compliance requires more than regulatory awareness. It requires a defensible AI system registry, documented risk classifications, tested controls, and a governance framework that holds up under scrutiny — embedded within your existing board, risk, and audit architecture, not bolted alongside it.

This briefing is designed for leadership teams that have begun the classification process but lack the control infrastructure and documented governance framework required to withstand a formal audit. We move past regulatory theory to provide a practitioner's model of what needs to be in place, in what sequence, over the next 90 days — and what structured AI governance maturity looks like beyond August.

From Noise to Numbers: Achieving Financial-Grade GRC & ESG Data

Turn ESG noise into audit-ready, financial-grade numbers

From Noise to Numbers: The 2026 ESG Blueprint The shift from 'Voluntary' to 'Mandatory' isn’t just a regulatory change—it’s a financial one.

As we approach 2026, the Financial Services sector is facing its most rigorous data challenge yet: the transition to financial-grade, audit-ready ESG disclosures.

If your GRC and ESG data currently exists in silos or spreadsheets, it is 'noise'—and in the eyes of regulators, noise is a liability.

From Noise to Numbers is an exclusive briefing designed for leaders who need to turn fragmented data into a reliable, compliant framework. We have assembled a Council of Visionaries—top-tier finance and strategy advisors—to provide the roadmap for this transition.

Central to this roadmap is the Intelligence Upgrade: moving beyond manual entry into a Human + AI Framework.

We will demonstrate how Large Language Models (LLMs) and Strategic AI are shifting from luxury tools to compliance necessities—scanning for regulatory shifts in real-time and turning thousands of unstructured data points into a single, audit-ready truth.

Business Sustainability Leadership: Bridging Strategy, Execution, and Compliance

Join an exclusive executive panel where sustainability leaders, academics, and technology innovators decode the latest trends reshaping the sustainability landscape.

As regulatory frameworks evolve rapidly and stakeholder expectations intensify, this intimate discussion explores how forward-thinking organisations are transforming sustainability from compliance burden into strategic competitive advantage.