More than 300 executives, risk professionals, academics and public sector representatives gathered at the Radisson Blu Hotel Zurich Airport on 20 May 2026 to discuss the future of GRC management. The central question of the day was clear: How can organizations better understand uncertainty and make more informed decisions in an increasingly complex world?
When people talk about NIS2 today, one comparison comes up repeatedly:
“This will be the GDPR of cybersecurity.” The comparison sounds logical, but it is misleading and pushes many organizations in the wrong direction. NIS2 is not simply another compliance regulation. The directive fundamentally changes how organizations must manage digital risk.
The annual Global Risks Report published by the World Economic Forum remains one of the most closely followed publications for leaders in business, government, and civil society. Drawing on the perspectives of more than 1,300 global experts, the 2026 edition captures a world entering an “Age of Competition”.
The NIS2 Directive (Directive (EU) 2022/2555) represents the EU’s primary legal instrument to enhance cybersecurity and cyber resilience. The implementation of the EU NIS2 Directive into German law fundamentally reshapes the cybersecurity requirements for thousands of organizations across the country. Those who act now will not only secure compliance, but also significantly strengthen their overall cyber resilience.
As the NIS2 Directive continues to shape Europe’s digital security landscape, the conversation around cybersecurity is shifting. What began as a regulatory framework is now driving a broader rethink of how organizations manage risk, build resilience, and maintain trust in an increasingly volatile environment.
The digital transformation of the financial sector has accelerated innovation while simultaneously creating new operational risks and dependencies. Financial institutions now face unprecedented demands on their resilience. The increasing complexity of IT infrastructures, combined with ever more sophisticated cyber threats, requires a robust framework to ensure business continuity and security. This is precisely where the Digital Operational Resilience Act (DORA) comes in.
The regulatory landscape for Third-Party Risk Management (TPRM) is undergoing a fundamental transformation. With the new EBA Guideline, the DORA Regulation, and the anticipated revision of MaRisk, financial institutions are required to strategically realign their outsourcing and risk governance practices. The Deggendorf Note 2025/06 delivers a thorough analysis of this shift and leaves no doubt: Excel spreadsheets and siloed solutions are no longer sufficient.
The SWISS GRC DAY 2025 has once again proven that Governance, risk, and compliance are key building blocks for resilience, innovative strength, and sustainable corporate management, not mere control mechanisms. In a world of constant change, we need responsible structures that create clarity, enable collaboration, and actively shape change, not just checkbox compliance.
Artificial intelligence has arrived in the financial sector – but according to FINMA, there is often a lack of clear governance. This article shows why institutions need to act now to manage risks, meet regulatory requirements, and integrate AI into their governance for the long term. Responsibility begins with a structured approach.
The annual Global Risks Report offers a comprehensive view of the challenges shaping our future. The 2025 edition, marking two decades of global risk tracking, highlights the interconnected nature of today’s most pressing issues—from geopolitical tensions and environmental crises to technological vulnerabilities.
DE