9:30 AM - 10:00 AM
30 Min
Ballroom
Inauguration: Lamp Lighting & Keynote
The summit opens with the lamp lighting and the opening keynote.
13th Oct 2026 · Mumbai
Agenda Framework 2026
One day, three themes, and the sessions the practitioners on stage actually own.
10:00 AM - 11:30 AM
90 Min
Ballroom
DPDPA Readiness: The Next 6 Months from Policy to Operational Execution
Prioritising implementation based on regulatory exposure and business impact Moving from data discovery to accountable enterprise privacy operations Operationalising notices, consent, rights and data lifecycle management Embedding privacy requirements across technology, vendors and customer journeys Establishing governance, evidence and monitoring for sustainable compliance
10:00 AM - 11:30 AM
90 Min
Ballroom
From Regulation to Resilience: Building Institutions Ready for What Comes Next
Moving beyond regulatory compliance toward institutional resilience and trust Connecting governance, data, cyber, AI and risk priorities Building accountability across boards, leadership and operating teams Enabling responsible growth through stronger institutional foundations
10:00 AM - 11:30 AM
90 Min
Ballroom
Looking Ahead: The GRC Priorities That Will Define the Next 24 Months
Anticipating regulatory, technology and ecosystem shifts shaping GRC priorities Identifying emerging risks that demand leadership attention and investment Recalibrating governance as AI, data and partnerships reshape businesses Defining actions organisations should initiate today for future readiness
10:00 AM - 11:30 AM
90 Min
Ballroom
From Periodic Compliance to Continuous Confidence: Reimagining the GRC Technology Stack
Moving from periodic reviews to continuous monitoring and assurance Connecting risk, compliance, controls and evidence across the enterprise Using automation and intelligence to improve speed and consistency Turning GRC data into actionable insights for leadership decisions
10:00 AM - 11:30 AM
90 Min
Ballroom
The New GRC Mandate: Building Capability Across AI, Data and Enterprise Risk
Expanding GRC capabilities across AI, data and emerging risks Embedding data accountability into enterprise governance and decision-making Defining governance guardrails for responsible enterprise AI adoption Building integrated risk capabilities without creating fragmented oversight
10:00 AM - 11:30 AM
90 Min
Ballroom
The Enterprise Comes of Age: Governing AI, Cloud and Cyber as One Connected Risk
Managing interconnected risks across AI, cloud and cyber ecosystems Balancing transformation speed with resilience, control and accountability Rethinking technology governance as enterprise boundaries become increasingly fluid Building leadership readiness for the next generation of digital risk
10:00 AM - 11:30 AM
90 Min
Ballroom
AI on Both Sides of Cyber: Redefining Attack, Defence and Accountability
AI-driven attacks reshaping phishing, fraud, malware and social engineering Using AI to strengthen detection, response and cyber resilience Managing model risk, false positives and autonomous security decisions Defining accountability and governance as AI enters cyber operations
10:00 AM - 11:30 AM
90 Min
Ballroom
Cybersecurity Beyond the Enterprise: Securing Growth Across an Interconnected Financial Ecosystem
Managing cyber risk across fintech, LSP and API ecosystems Balancing rapid growth with security, resilience and control Defining accountability when critical services sit outside enterprise boundaries Strengthening third-party assurance without slowing innovation and partnerships
10:00 AM - 11:30 AM
90 Min
Ballroom
Cybersecurity in the Boardroom: From Technology Risk to Enterprise Resilience
Elevating cyber risk from technology issue to enterprise priority Strengthening board accountability for resilience, preparedness and response Connecting cyber, third-party, data and operational resilience risks Moving from prevention-led security to enterprise-wide resilience thinking
10:00 AM - 11:30 AM
90 Min
Ballroom
Data, Growth and Trust: Where Should the Enterprise Draw the Line?
Defining acceptable data use without constraining business innovation Balancing customer value, commercial ambition and privacy expectations Setting clear guardrails for analytics, personalisation and AI-led decisions Aligning business, legal, risk and technology on data boundaries
10:00 AM - 11:30 AM
90 Min
Ballroom
From Compliance to Capability: Institutionalising Privacy Across the Enterprise
Moving from one-time compliance programmes to continuous privacy governance Embedding privacy accountability across business, technology and risk teams Operationalising consent, rights, data lifecycle and third-party governance Balancing regulatory expectations with customer trust, innovation and growth
10:00 AM - 11:30 AM
90 Min
Ballroom
RBI's Draft Data Governance Framework: Are Regulated Entities Ready for the New Accountability Era?
Redefining accountability across boards, business, technology and risk functions Strengthening data quality, lineage, ownership and lifecycle governance controls Bridging regulatory expectations with existing enterprise data architectures Building sustainable governance beyond compliance-driven implementation programs
10:00 AM - 11:30 AM
90 Min
Ballroom
Data as an Enterprise Asset: From Ownership to Accountability
Moving from data ownership models to outcome-driven accountability Defining clear responsibilities across business, technology and risk teams Building trusted data foundations for AI, analytics and decision-making Linking governance, quality and controls to measurable business value
10:00 AM - 11:30 AM
90 Min
Ballroom
One Framework, Many Rulebooks: Can Compliance Complexity Be Designed Out?
Harmonising overlapping regulatory requirements into a common control architecture Separating core controls from regulator-specific obligations and reporting layers Using technology and automation to simplify evidence, testing and assurance Strengthening decision-making amid interconnected, fast-moving and unpredictable risks Building scalable compliance without creating parallel governance structures
10:00 AM - 11:30 AM
90 Min
Ballroom
Inside the Risk Agenda: What Boards and CROs & CIOs Worry About Most
Emerging risks that could materially impact business resilience and growth Balancing regulatory expectations, commercial priorities and evolving risk appetite Technology, cyber and third-party risks moving into board focus Strengthening decision-making amid interconnected, fast-moving and unpredictable risks
10:00 AM - 11:30 AM
90 Min
Ballroom
From Oversight to Advantage: Redefining the Board's Role in a New Regulatory Era
Expanding board oversight across technology, cyber, data and resilience Strengthening governance structures for emerging and interconnected enterprise risks Implications for banks, NBFCs and fintech operating models Moving from periodic oversight to continuous, informed board-level governance
10:00 AM - 11:30 AM
90 Min
Ballroom
The New RBI Regulatory Landscape: What's Changing and Why It Matters Now
Key regulatory shifts redefining governance, compliance, technology and risk priorities Emerging expectations around digital resilience, outsourcing and customer protection Implications for banks, NBFCs and fintech operating models Building regulatory readiness while sustaining innovation, speed and growth
10:00 AM - 11:30 AM
90 Min
Ballroom
DPDPA Implementation Masterclass: Designing the Enterprise Privacy Operating Model
Translating regulatory obligations into clear enterprise-wide privacy governance structures Designing consent, notice and rights workflows across customer journeys Embedding privacy controls across data lifecycle, systems and vendors Establishing accountability, monitoring and evidence for sustained DPDPA compliance