Conference calendar · Worldwide

Top GRC conferences in the world, 2026–27

The GRC 2027 Conference from ISACA and The IIA moves to Dallas on 16–18 August 2027. Around it sit the big association events, including RISKWORLD in New Orleans, IIA International in Riyadh and the IAPP Global Summit in Washington, D.C. This calendar lists 28 events, soonest first, with 24 exact dates confirmed.

World GRC conference calendar

Soonest first. Events with only a month announced follow, then events whose next dates haven’t been published.

28 of 28 events

WhenEvent and organiserWhereFormat
4–5 November 2026 MetricStream GRC Summit Virtual U.S. Edition 2026MetricStream Online Online
10–11 November 2026 #RISK Expo Europe 2026GRC World Forums London, United Kingdom In person
16–19 November 2026 (main conference 18–19 November) IAPP Europe Congress 2026International Association of Privacy Professionals (IAPP) Brussels, Belgium In person
16–19 November 2026 RiskMinds International 2026Informa Connect London, United Kingdom In person
1–4 December 2026 (conference 3–4 December) IAPP ANZ Summit 2026International Association of Privacy Professionals (IAPP) Sydney, Australia In person
8–11 March 2027 CPDP2027 (Computers, Privacy and Data Protection)Privacy Salon, with a consortium of academic partners Brussels, Belgium In person
14–17 March 2027 2027 SIFMA C&L Annual SeminarSIFMA Compliance & Legal Society San Diego, United States In person
15–17 March 2027 SOPAC 2027IIA-Australia (Institute of Internal Auditors Australia) Brisbane, Australia In person
21–24 March 2027 IAPP Global Summit 2027International Association of Privacy Professionals (IAPP) Washington, D.C., United States In person
22–24 March 2027 GAM 2027: Great Audit MindsThe Institute of Internal Auditors (The IIA) Las Vegas, United States In person
7–9 April 2027 Diligent Elevate 2027Diligent Orlando, United States In person
11–14 April 2027 HCCA Compliance Institute 2027Health Care Compliance Association (HCCA) Nashville, United States Hybrid
18–21 April 2027 RISKWORLD 2027RIMS, the risk management society New Orleans, United States In person
26–28 April 2027 2027 IIA International ConferenceThe Institute of Internal Auditors (The IIA) Riyadh, Saudi Arabia Hybrid
5–6 May 2027, with an optional CPD day on 4 May ICA Future of FinCrime & Compliance 2027International Compliance Association (ICA) London, United Kingdom In person
5–7 May 2027 ISACA 2027 North America ConferenceISACA Chicago, United States Hybrid
22–24 June 2027 Risk Live Europe 2027Risk.net London, United Kingdom In person
22–25 June 2027 Society for Corporate Governance 2027 National ConferenceSociety for Corporate Governance San Diego, United States In person
11–16 July 2027 (main conference 12–14 July) 38th Annual ACFE Global Fraud ConferenceAssociation of Certified Fraud Examiners (ACFE) Philadelphia, United States Hybrid
July 2027Exact dates not announced IAPP Asia Forum 2027International Association of Privacy Professionals (IAPP) Singapore, Singapore In person
16–18 August 2027 GRC 2027 ConferenceISACA and The Institute of Internal Auditors (The IIA) Dallas, United States Not announced
26–29 September 2027 SCCE Compliance & Ethics Institute 2027Society of Corporate Compliance and Ethics (SCCE) Las Vegas, United States Hybrid
27–28 September 2027 Gartner Enterprise Risk, Audit & Compliance Conference 2027 (EMEA)Gartner London, United Kingdom In person
5–6 October 2027 Gartner Enterprise Risk, Audit & Compliance Conference 2027 (Americas)Gartner Grapevine, United States In person
27–29 October 2027 ISACA 2027 Europe ConferenceISACA Barcelona, Spain Not announced
Next dates not announcedLast held 6–8 May 2026 Compliance Week NationalCompliance Week Last held in Washington, D.C. In person (last edition)
Next dates not announcedLast held 13–15 October 2026 CRX (Connected Risk Experience)Optro (formerly AuditBoard) Last held in San Diego Hybrid (last edition)
Next dates not announcedLast held 4–6 October 2026 FERMA ForumFederation of European Risk Management Associations (FERMA) Last held in Rotterdam In person (last edition)

Every conference on the list

What each event is, who goes, and what it costs where the organiser publishes a price.

4–5 November 2026

MetricStream GRC Summit Virtual U.S. Edition 2026

Location not announced · Online

Official site ↗

A free online summit over two half-days from a GRC software vendor, aimed at US leaders. MetricStream also runs an in-person London edition, most recently at the Royal Garden Hotel in June 2026, with workshops and a main conference day. It is a low-commitment way to hear from practitioners, with a vendor's framing.

Organiser
MetricStream (Vendor)
Who attends
GRC leaders, Risk leaders, Compliance leaders, Cyber risk leaders
Topics
GRC, AI in risk, Compliance, Cyber risk
Price
Free source ↗

Good fit: You want a free online overview of GRC topics, and do not mind a vendor host.

Look elsewhere if: You want a vendor-neutral programme or in-person networking, as this edition is online and run by a software company.

Dates read on the organiser’s page on 2 November 2026.

10–11 November 2026

#RISK Expo Europe 2026

ExCeL London, London, United Kingdom · In person

Official site ↗

A free trade expo for risk, compliance, security and audit staff, and so the lowest-cost way on this list to see a wide range of vendors. It is a show-floor event first, unlike the conference-led meetings from professional bodies. A PrivSec AI Governance strand runs on the second day.

Organiser
GRC World Forums (Commercial events company)
Who attends
Senior risk professionals, Compliance professionals, Security professionals, Audit professionals
Topics
Risk, GRC, Security, RegTech, AI governance
Size
About 5,000 attendees (organiser’s figure) source ↗
Price
Free for senior risk, compliance, security and audit professionals source ↗

Good fit: You are buying GRC or RegTech tools or want a free day of talks in London.

Look elsewhere if: You need a CPD total, because the organiser's page does not state one.

Dates read on the organiser’s page on 2 November 2026.

16–19 November 2026 (main conference 18–19 November)

IAPP Europe Congress 2026

SQUARE – Brussels Convention Centre, Brussels, Belgium · In person

Official site ↗

Europe's counterpart to the IAPP Global Summit, held in Brussels, close to the EU institutions it follows. The 2026 edition is unusual because the 48th Global Privacy Assembly of data protection authorities is co-located with it, and some of that programme is open to congress delegates. The next edition is already listed for 15–18 November 2027, also in Brussels.

Organiser
International Association of Privacy Professionals (IAPP) (Professional body)
Who attends
Privacy professionals, Data protection officers, Regulators, AI governance professionals
Topics
GDPR, AI Act, NIS2 and DORA, Data transfers, AI governance
Size
200+ speakers, 75+ sessions and 50+ exhibitors; no attendee number (organiser’s figure) source ↗
Price
Main conference pass €1,745 for members, €1,945 for non-members source ↗
CPE credits
12+ CPE source ↗

Good fit: You handle EU data protection or AI Act work and want to hear regulators directly.

Look elsewhere if: You want a research or policy debate rather than a practitioner event, where CPDP in Brussels is the better fit.

Dates read on the organiser’s page on 2 November 2026.

16–19 November 2026

RiskMinds International 2026

InterContinental O2, London, United Kingdom · In person

Official site ↗

A four-day conference for chief risk officers and senior risk teams at financial institutions, run by a commercial organiser with a very senior attendance mix. Unlike RISKWORLD, it is about financial institution risk rather than corporate insurance. RiskMinds Insurance, a separate conference, is free for insurers.

Organiser
Informa Connect (Commercial events company)
Who attends
Bank CROs, Senior risk managers, Risk academics
Topics
Financial risk, Bank risk management, Conduct and compliance, Insurance risk
Size
1,300+ senior risk managers from 60+ countries, including 330+ CROs and C-suite executives (organiser’s figure) source ↗
Price
Not published
CPE credits
CPD certified; certificate on request. No credit figure given. source ↗

Good fit: You hold a senior risk role at a bank or financial institution.

Look elsewhere if: You work outside financial services, as most attendees and sessions come from that sector.

Dates read on the organiser’s page on 2 November 2026.

1–4 December 2026 (conference 3–4 December)

IAPP ANZ Summit 2026

Hyatt Regency Sydney, Sydney, New South Wales, Australia · In person

Official site ↗

The IAPP's Australia and New Zealand meeting, with two days of training followed by a two-day conference and a CIPP/AU exam sitting on the final afternoon. It is a regional event, useful mainly to teams working under Australian or New Zealand law. A 2027 edition is already listed for 7–10 December in Sydney.

Organiser
International Association of Privacy Professionals (IAPP) (Professional body)
Who attends
Privacy professionals in Australia and New Zealand, AI governance professionals
Topics
Australian privacy law, AI governance, Privacy programmes
Size
70+ speakers, 20+ sessions and 5+ exhibitors; no attendee number (organiser’s figure) source ↗
Price
Not published
CPE credits
12+ CPE source ↗

Good fit: You work on Australian or New Zealand privacy and want local law and training in one trip.

Look elsewhere if: Your work sits outside Australia and New Zealand, as the training and exam are built around local privacy law.

Dates read on the organiser’s page on 2 November 2026.

8–11 March 2027

CPDP2027 (Computers, Privacy and Data Protection)

Maison de la Poste (Tour & Taxis), Brussels, Belgium · In person

Official site ↗

A non-profit, multidisciplinary conference where academics, regulators and civil society debate data protection with practitioners, founded in 2007 by Belgian and Dutch research groups. 2027 is its 20th anniversary edition. It is more research and policy-driven than the IAPP's practitioner events in the same city.

Organiser
Privacy Salon, with a consortium of academic partners (Non-profit)
Who attends
Scholars, Regulators and policy officials, Legal professionals, Civil society organisations, Technology industry
Topics
Privacy, Data protection, Technology policy
Price
Not published

Good fit: You want the policy and academic debate behind data protection law, not just compliance advice.

Look elsewhere if: You want hands-on compliance guidance, since the programme leans towards research and policy.

Dates read on the organiser’s page on 2 November 2026.

14–17 March 2027

2027 SIFMA C&L Annual Seminar

Marriott Marquis San Diego Marina, San Diego, California, United States · In person

Official site ↗

The securities industry's own compliance and legal seminar, run by the compliance society of its trade association. Panels bring in regulators and senior general counsel, and ethics sessions run on each programme day. It offers CLE rather than audit-style CPE, which reflects its legal audience.

Organiser
SIFMA Compliance & Legal Society (Professional body)
Who attends
Securities industry compliance officers, In-house lawyers at broker-dealers and banks
Topics
Banking, Capital markets, Compliance, Ethics, Enforcement and arbitration, Retail and private client, Technology
Size
More than 70 breakout sessions across seven tracks; no attendee number (organiser’s figure) source ↗
Price
Not published
CPE credits
CLE-eligible breakouts in multiple states; no CPE figure source ↗

Good fit: You work in compliance or legal at a broker-dealer, bank or other securities firm.

Look elsewhere if: You work outside financial services, or need CPE rather than CLE.

Dates read on the organiser’s page on 2 November 2026.

15–17 March 2027

SOPAC 2027

Brisbane Convention and Exhibition Centre, Brisbane, Queensland, Australia · In person

Official site ↗

Australia's leading assurance conference by its own description, run by the local IIA institute and aligned with the Global Internal Audit Standards. It gives the Asia-Pacific region an internal audit event on a smaller scale than the IIA's global meeting, with a clear 17-hour CPE total.

Organiser
IIA-Australia (Institute of Internal Auditors Australia) (Professional body)
Who attends
Internal auditors, Risk professionals, Governance professionals
Topics
Internal audit, Assurance, Global Internal Audit Standards, Risk
Size
700+ delegates from 16 countries at SOPAC 2026 (organiser’s figure) source ↗
Price
Early-bird to 31 December 2026: $2,595 for IIA members, $2,895 for non-members (currency not labelled; Australian event) source ↗
CPE credits
17 CPE hours source ↗

Good fit: You are an internal auditor in Australia or the wider Pacific region and want local peers plus a stated CPE total.

Look elsewhere if: You want the global view, which the IIA's own International Conference in Riyadh provides.

Dates read on the organiser’s page on 2 November 2026.

21–24 March 2027

IAPP Global Summit 2027

Marriott Marquis Washington, D.C. and the connected Walter E. Washington Convention Center, Washington, D.C., United States · In person

Official site ↗

The flagship meeting of the main professional body for privacy, held in Washington, D.C., with paid training and workshops running beside the main conference. It has widened from privacy alone into AI governance and what the IAPP now calls digital responsibility.

Organiser
International Association of Privacy Professionals (IAPP) (Professional body)
Who attends
Privacy professionals, Data protection officers, AI governance professionals, Privacy lawyers
Topics
Privacy, AI governance, Data protection law
Size
120 speakers, 35+ sessions and 25 exhibitors listed; IAPP calls it the largest gathering of its field but gives no attendee number (organiser’s figure) source ↗
Price
Not published
CPE credits
12+ CPE source ↗

Good fit: Privacy or AI governance is your main job and you want the field's biggest US meeting, with regulators and peers in one place.

Look elsewhere if: Your work is broad GRC or audit rather than privacy, as nearly all of the programme is privacy and AI governance.

Dates read on the organiser’s page on 2 November 2026.

22–24 March 2027

GAM 2027: Great Audit Minds

Fontainebleau Las Vegas, Las Vegas, Nevada, United States · In person

Official site ↗

The IIA's conference for people who run audit functions rather than carry out audits, so the sessions lean towards leadership and board relationships. The event still sits at a web address built on its older name, General Audit Management, though the IIA now brands it Great Audit Minds. There is no virtual ticket.

Organiser
The Institute of Internal Auditors (The IIA) (Professional body)
Who attends
Chief audit executives, Aspiring CAEs, Heads and directors of internal audit, Audit committee and board members, General counsel
Topics
Audit leadership, AI assurance, Geopolitical risk, Audit technology
Size
More than 1,200 leaders from over 500 organisations and 20+ industries (organiser’s figure) source ↗
Price
US$1,595 launch member rate to 21 November 2026; regular member US$1,995; non-member US$2,295 source ↗
CPE credits
15+ CPE hours source ↗

Good fit: You lead an internal audit function, or expect to soon, and want time with peers at the same level.

Look elsewhere if: You need remote attendance, because the 2027 edition is in person only.

Dates read on the organiser’s page on 2 November 2026.

7–9 April 2027

Diligent Elevate 2027

Orlando, Florida, United States · In person

Official site ↗

The annual in-person GRC conference of Diligent, whose software is best known in boardrooms and governance teams, and the former Modern Governance Summit. It gives this list a governance-led vendor event, with training, breakouts and workshops over three days.

Organiser
Diligent (Vendor)
Who attends
GRC leaders and practitioners, Governance professionals
Topics
Governance, Risk, Compliance, Audit
Size
More than 700 GRC leaders and practitioners (from an FAQ page that holds stale details, so edition unclear) (organiser’s figure) source ↗
Price
Not published
CPE credits
Continuing education credits, including CLE, for selected sessions; details to follow. No total published. source ↗

Good fit: Your board, governance or GRC team uses Diligent.

Look elsewhere if: You do not use Diligent's products and want a vendor-neutral programme.

Dates read on the organiser’s page on 2 November 2026.

11–14 April 2027

HCCA Compliance Institute 2027

Nashville, Tennessee, United States · Hybrid

Official site ↗

A major annual meeting for healthcare compliance staff, which marked its 30th edition at Universal Orlando in 2026. It is sector-specific, and that is the point: regulators, lawyers and compliance leaders in healthcare all attend.

Organiser
Health Care Compliance Association (HCCA) (Professional body)
Who attends
Healthcare compliance leaders, Regulators, Healthcare legal experts
Topics
Healthcare compliance
Size
HCCA says the 2026 event brought together thousands of healthcare compliance leaders; no exact figure (organiser’s figure) source ↗
Price
In person from US$1,369 for members and US$1,669 for non-members at 2026 rates to 30 November 2026; virtual US$1,169 and US$1,469 source ↗

Good fit: You work in compliance at a hospital, health system or other healthcare organisation.

Look elsewhere if: You work outside healthcare, as the whole programme is built around that sector.

Dates read on the organiser’s page on 2 November 2026.

18–21 April 2027

RISKWORLD 2027

Ernest N. Morial Convention Center, New Orleans, Louisiana, United States · In person

Official site ↗

By stated attendance, the largest event on this list. It comes from the risk and insurance side of the field, so brokers, insurers and service providers attend alongside corporate risk managers. The 2026 edition was in Philadelphia and 2027 moves to New Orleans.

Organiser
RIMS, the risk management society (Professional body)
Who attends
Risk managers, Insurance professionals, Brokers and insurers, Business executives
Topics
Risk management, Insurance, Enterprise risk
Size
More than 10,000 risk and insurance professionals and about 300 exhibitors (organiser’s figure) source ↗
Price
Not published

Good fit: You manage corporate risk or insurance and want the biggest room in that community.

Look elsewhere if: You work in IT audit or compliance, as the event is centred on risk management and insurance.

Dates read on the organiser’s page on 2 November 2026.

26–28 April 2027

2027 IIA International Conference

King Abdulaziz International Conference Center, Riyadh, Saudi Arabia · Hybrid

Official site ↗

The IIA's annual global conference, which moves between host cities: Singapore in 2026, Riyadh in 2027. Its widest draw is the mix of nationalities, with more than 110 countries represented at the last edition. A higher-priced CAE Pathway ticket is sold alongside the standard in-person pass.

Organiser
The Institute of Internal Auditors (The IIA) (Professional body)
Who attends
Internal auditors, Chief audit executives, Risk and governance professionals
Topics
Internal audit, Governance, Risk
Size
More than 2,600 attendees from over 110 countries at the 2026 event (organiser’s figure) source ↗
Price
In person from US$1,095 for members (launch rate to 1 December 2026), rising to US$1,695; non-members US$2,295. Virtual US$995 for members, US$1,795 for non-members source ↗
CPE credits
30+ CPE source ↗

Good fit: You are an internal auditor who wants the profession's international view and a heavy CPE load in one trip, or you are based in the Middle East.

Look elsewhere if: You want a smaller senior-leaders event, where the same organiser's GAM is the closer fit.

Dates read on the organiser’s page on 2 November 2026.

5–6 May 2027, with an optional CPD day on 4 May

ICA Future of FinCrime & Compliance 2027

InterContinental London - The O2, London, United Kingdom · In person

Official site ↗

The flagship event of the International Compliance Association, built as three linked summits for financial crime, compliance and senior leaders. It has a senior audience for its size, and tutors from the ICA lead the optional workshop day before it.

Organiser
International Compliance Association (ICA) (Professional body)
Who attends
Compliance leaders, Financial crime leaders
Topics
Financial crime, Compliance, Anti-money laundering, Fraud, Sanctions
Size
650+ attendees, 100+ speakers and 40+ countries; 70% at director level and above (organiser’s figure) source ↗
Price
No list price published; a loyalty rate to 11 December 2026 saves up to £200 source ↗
CPE credits
Optional ICA CPD Day on 4 May; no hours stated source ↗

Good fit: You lead compliance or financial crime work at a regulated firm.

Look elsewhere if: You are outside regulated financial services, as the sanctions, AML and fraud content is sector-driven.

Dates read on the organiser’s page on 2 November 2026.

5–7 May 2027

ISACA 2027 North America Conference

Chicago, Illinois, United States · Hybrid

Official site ↗

ISACA's main North American gathering for people who hold or work towards its audit, risk and security credentials. A separately priced workshop day on 4 May sits in front of the two and a half day programme, and remote attendance is sold alongside the in-person ticket.

Organiser
ISACA (Professional body)
Who attends
IT auditors, Risk and compliance professionals, Information security professionals
Topics
IT audit, Risk, Compliance, Information security, Emerging technology
Size
40+ sessions and 50+ speakers across 2.5 days; no attendee count published (organiser’s figure) source ↗
Price
In person from US$1,445 for members and US$1,845 for non-members (early-bird through 26 February 2027); virtual from US$1,345 and US$1,745 source ↗
CPE credits
Up to 24.25 CPE (7.25 from the workshop, 17 from the conference) source ↗

Good fit: You hold an ISACA credential and want to clear a large share of your annual CPE in one event, in person or remotely.

Look elsewhere if: You are after a compliance-programme focus rather than IT audit and technology risk, where SCCE or Compliance Week is closer.

Dates read on the organiser’s page on 2 November 2026.

22–24 June 2027

Risk Live Europe 2027

London, United Kingdom · In person

Official site ↗

The London conference in the Risk Live series from Risk.net, a trade publisher for financial risk managers, listed as part of its Risk & Markets Show. Details are thin so far, but the publisher's audience suggests it sits closest to RiskMinds on this list: a financial services event in London.

Organiser
Risk.net (Media company)
Who attends
Financial risk professionals
Topics
Financial risk, Markets
Price
Not published

Good fit: You work in financial or market risk at a bank or asset manager.

Look elsewhere if: You work in corporate GRC, audit or privacy, as the programme is aimed at financial risk.

Dates read on the organiser’s page on 2 November 2026.

22–25 June 2027

Society for Corporate Governance 2027 National Conference

Marriott Marquis San Diego Marina, San Diego, California, United States · In person

Official site ↗

The national meeting of the US membership body for corporate governance professionals. It covers the G in GRC, which most events on this list treat as a sideline, so it serves a smaller and more specialist crowd than the audit and risk conferences.

Organiser
Society for Corporate Governance (Professional body)
Who attends
Corporate governance professionals
Topics
Corporate governance
Price
Member early-bird US$2,295; member regular US$2,495 source ↗

Good fit: You support a board or work in a corporate secretary or governance role at a US company.

Look elsewhere if: Your work is operational risk, audit or privacy rather than board and corporate governance.

Dates read on the organiser’s page on 2 November 2026.

11–16 July 2027 (main conference 12–14 July)

38th Annual ACFE Global Fraud Conference

Pennsylvania Convention Center (main conference); Philadelphia Marriott Downtown (pre- and post-conference), Philadelphia, Pennsylvania, United States · Hybrid

Official site ↗

The largest event on this list dedicated to one risk: fraud. It runs for six days, with pre- and post-conference days around three main days, and past editions have carried ethics CPE for certified fraud examiners. The ACFE also runs regional fraud conferences, but this is the flagship.

Organiser
Association of Certified Fraud Examiners (ACFE) (Professional body)
Who attends
Certified fraud examiners, Internal auditors, Investigators, Anti-fraud professionals
Topics
Fraud examination, Investigations, Ethics
Size
More than 5,400 anti-fraud professionals at the 2025 conference (organiser’s figure) source ↗
Price
Main conference US$1,475 for members, US$1,725 for non-members; full conference US$2,085 and US$2,335; virtual US$870 and US$1,120 (early pricing to 8 April 2027) source ↗
CPE credits
No figure published for 2027. The 2026 conference's on-demand version offers up to 31 NASBA-approved CPE. source ↗

Good fit: Fraud risk, investigations or forensic audit is a real part of your job.

Look elsewhere if: You want a broad GRC programme, since this is focused on fraud.

Dates read on the organiser’s page on 2 November 2026.

July 2027 · exact dates not announced

IAPP Asia Forum 2027

Marina Bay Sands Expo & Convention Centre, Singapore, Singapore · In person

Official site ↗

The IAPP's main event for Asia, held in Singapore and centred on how the region's regulators approach privacy and AI. It is much smaller than the Washington and Brussels meetings, which makes it a more practical choice for teams based in the region. The call for proposals is open, with a 31 January deadline.

Organiser
International Association of Privacy Professionals (IAPP) (Professional body)
Who attends
Privacy professionals, AI governance professionals, Cybersecurity law professionals
Topics
Privacy, AI governance, Cybersecurity law, Asian regulation
Size
70+ speakers, 18+ sessions and 10+ exhibitors; the page says hundreds of professionals but gives no figure (organiser’s figure) source ↗
Price
Not published
CPE credits
12+ CPE source ↗

Good fit: You run privacy or AI governance in the Asia-Pacific region and want a regional view of regulation.

Look elsewhere if: You need firm dates now, since the IAPP has so far given only the month.

Dates read on the organiser’s page on 2 November 2026.

16–18 August 2027

GRC 2027 Conference

Dallas, Texas, United States · Not announced

Official site ↗

A joint event from the two professional bodies for IT audit and internal audit, so it sits exactly where those disciplines meet risk and compliance work. ISACA counted the 2026 San Diego edition as the 13th annual conference. It moves to Dallas in 2027.

Organiser
ISACA and The Institute of Internal Auditors (The IIA) (Professional body)
Who attends
GRC practitioners, IT auditors, Internal auditors, Risk and compliance leaders
Topics
Governance, Risk management, Controls, IT audit, Internal audit
Price
Not published
CPE credits
2026 edition: up to 16 CPE hours for the conference, plus 12 more for workshops. No 2027 figure published yet. source ↗

Good fit: You work across IT audit, internal audit and compliance and want one event that covers all three from a professional-body standpoint.

Look elsewhere if: You need a venue, price or programme now, because ISACA has so far published only the dates, the city and a call for speakers.

Dates read on the organiser’s page on 2 November 2026.

26–29 September 2027

SCCE Compliance & Ethics Institute 2027

Las Vegas, Nevada, United States · Hybrid

Official site ↗

SCCE's annual institute for corporate compliance and ethics officers, which reached its 25th edition in Orlando in 2026. It is the main general-purpose event on this list for people who run compliance programmes rather than audit or privacy functions. The 2026 edition added a virtual option for selected sessions.

Organiser
Society of Corporate Compliance and Ethics (SCCE) (Professional body)
Who attends
Compliance and ethics professionals
Topics
Corporate compliance, Ethics programmes
Price
In person from US$1,369 for members and US$1,669 for non-members at 2026 rates to 30 November 2026; virtual US$1,169 and US$1,469 source ↗

Good fit: You run or work in a corporate compliance and ethics programme.

Look elsewhere if: You work in healthcare compliance, where the sister association's HCCA Compliance Institute is more specific.

Dates read on the organiser’s page on 2 November 2026.

27–28 September 2027

Gartner Enterprise Risk, Audit & Compliance Conference 2027 (EMEA)

Park Plaza Westminster Bridge, London, United Kingdom · In person

Official site ↗

The London sister event to Gartner's Texas conference, launched in 2026 at the Park Plaza Westminster. It offers the same analyst-led format for European risk, audit and compliance leaders, but has only one edition behind it.

Organiser
Gartner (Analyst firm)
First held
2026
Who attends
Enterprise risk leaders, Audit leaders, Compliance leaders
Topics
Internal audit trends, AI governance for assurance leaders, GenAI for compliance guidance, Data governance
Price
Not published

Good fit: You lead a European risk, audit or compliance function and use Gartner research.

Look elsewhere if: You prefer an established European event, as this series has run only once in London.

Dates read on the organiser’s page on 2 November 2026.

5–6 October 2027

Gartner Enterprise Risk, Audit & Compliance Conference 2027 (Americas)

Gaylord Texan Hotel & Convention Center, Grapevine, Texas, United States · In person

Official site ↗

An analyst-firm event that puts enterprise risk, audit and compliance leaders in the same room, built around Gartner's own research and analysts rather than a member community. At two days it is shorter than the professional-body conferences on this list. Gartner's 2026 theme was moving from risk insight to action.

Organiser
Gartner (Analyst firm)
Who attends
Enterprise risk leaders, Audit leaders, Compliance leaders
Topics
Enterprise risk, Internal audit, Compliance, AI governance for assurance
Price
Not published

Good fit: You lead a risk, audit or compliance function and already use Gartner research to plan your work.

Look elsewhere if: CPE is your main reason to attend, as no credit figure from Gartner could be confirmed for this event.

Dates read on the organiser’s page on 2 November 2026.

27–29 October 2027

ISACA 2027 Europe Conference

Barcelona, Spain · Not announced

Official site ↗

ISACA's European counterpart to its North America conference, moving to Barcelona in 2027. ISACA has published the date and city on its post-event page for the 2026 edition, and little else so far.

Organiser
ISACA (Professional body)
Who attends
IT auditors, Risk and compliance professionals, Information security professionals
Topics
IT audit, Risk, Compliance, Information security
Price
Not published

Good fit: You are based in Europe and want ISACA's programme without travelling to the United States.

Look elsewhere if: You need a confirmed agenda or price this year, since neither has been published.

Dates read on the organiser’s page on 2 November 2026.

Next dates not announced · last held 6–8 May 2026, Washington, D.C.

Compliance Week National

Next location not announced

Official site ↗

A smaller Washington, D.C. conference run by a trade publication rather than a membership body. It was held at The Mayflower Hotel in 2026, and draws senior ethics, compliance, legal and audit people alongside regulators and board members.

Organiser
Compliance Week (Media company)
Who attends
Compliance professionals, Ethics professionals, Legal professionals, Audit professionals, Regulators and board members
Topics
Corporate compliance, Ethics, Governance, Enforcement
Size
500+ compliance, ethics, legal and audit professionals (organiser’s figure) source ↗
Price
Not published

Good fit: You are a senior compliance or ethics leader who prefers a smaller room in Washington.

Look elsewhere if: You need a conference date for 2027 planning, because none has been published.

Last edition read on the organiser’s page on 2 November 2026.

Next dates not announced · last held 13–15 October 2026, San Diego

CRX (Connected Risk Experience)

Next location not announced

Official site ↗

A vendor-run conference from the company formerly called AuditBoard, which renamed itself Optro in March 2026 and also renamed this event from Audit & Beyond. Optro counted 2026 as the eighth annual edition, held at the Gaylord Pacific in San Diego. Expect a customer community and product training alongside general audit and risk sessions.

Organiser
Optro (formerly AuditBoard) (Vendor)
Who attends
Audit leaders, Risk leaders, Compliance leaders, Information security leaders
Topics
Audit, Risk, Compliance, Information security, AI in GRC
Size
Optro says the event draws thousands of GRC professionals; no exact figure (organiser’s figure) source ↗
Price
2026 edition: US$2,095 standard pass, US$300 for each add-on source ↗
CPE credits
2026 edition: up to 17 CPE in person source ↗

Good fit: Your team uses Optro's platform, or you want a large audit and risk conference with product training built in.

Look elsewhere if: You want a vendor-neutral programme, since a software company runs it and product training is part of the offer.

Last edition read on the organiser’s page on 2 November 2026.

Next dates not announced · last held 4–6 October 2026, Rotterdam

FERMA Forum

Next location not announced

Official site ↗

Europe's main meeting for corporate risk managers and insurers, organised by the federation of national risk management associations. Think of it as the European equivalent of RISKWORLD: its focus is risk and insurance rather than audit or compliance.

Organiser
Federation of European Risk Management Associations (FERMA) (Professional body)
Who attends
European risk managers, Insurance professionals
Topics
Risk management, Insurance, Strategic foresight
Size
More than 3,000 professionals expected at the 2026 Forum (organiser’s figure) source ↗
Price
Not published

Good fit: You manage corporate risk or insurance in Europe.

Look elsewhere if: You need an event in 2027, as FERMA has not published a next edition.

Last edition read on the organiser’s page on 2 November 2026.

Which GRC conference fits your job?

GRC covers very different jobs, and each one has its own main event.

GRC across disciplines

GRC 2027 is the joint ISACA and IIA event, so it sits where IT audit, internal audit and compliance meet. Gartner's Enterprise Risk, Audit & Compliance conferences in Texas and London take an analyst-led view of the same ground.

Internal audit

The IIA International Conference moves to Riyadh on 26–28 April 2027. GAM in Las Vegas is the IIA's event for people who lead audit functions, and SOPAC in Brisbane serves Australia and the Pacific.

IT audit and technology risk

ISACA's North America conference is in Chicago on 5–7 May 2027, and its Europe conference is in Barcelona on 27–29 October.

Compliance and ethics

SCCE's Compliance & Ethics Institute is the broad event for corporate compliance officers, and HCCA's Compliance Institute is its healthcare counterpart. SIFMA's C&L Annual Seminar and the ICA's FinCrime event serve financial services.

Privacy

The IAPP runs the Global Summit in Washington, D.C., plus regional events in Brussels, Singapore and Sydney. CPDP in Brussels is the research and policy alternative.

Risk and fraud

RISKWORLD reports the largest attendance here and serves corporate risk and insurance. RiskMinds and Risk Live focus on financial institutions, and the ACFE Global Fraud Conference is the main event for fraud examiners.

CPE credits and cost

CPE published by organisers

The IIA International Conference offers 30+ CPE and ISACA North America up to 24.25 including its workshop. SOPAC offers 17 hours, GAM 15+ and the IAPP's main events 12+. For GRC 2027 only the 2026 figure is out: up to 16 hours, plus 12 for workshops.

Free ways in

#RISK Expo Europe in London is free for senior risk, compliance, security and audit staff. MetricStream's virtual US summit is free too, though it's run by a software vendor.

Vendor-run events

CRX from Optro (formerly AuditBoard), Diligent Elevate and the MetricStream GRC Summit are run by software companies. They can be very useful if you use the product, but check how much of the agenda is product training.

Events that have moved

Some directories still show old locations. GRC moves from San Diego to Dallas in 2027, and RiskMinds International 2026 is in London. Always confirm on the organiser's site.

Frequently asked questions

Where is the GRC Conference in 2027?

ISACA's page says the GRC 2027 Conference is in Dallas on 16–18 August 2027. The 2026 edition was in San Diego. ISACA hasn't published a venue or price yet, and it's taking speaker proposals until 27 November 2026.

Which GRC conference offers the most CPE?

Of the figures published, the IIA International Conference offers the most, at 30+ CPE. ISACA's North America conference offers up to 24.25 including its workshop day. The ACFE Global Fraud Conference runs longest but hadn't published a 2027 total when we checked.

What is the largest GRC conference in the world?

On this list, RIMS RISKWORLD reports the largest attendance, with more than 10,000 risk and insurance professionals. The ACFE reports more than 5,400 at its 2025 conference. Both are organisers' own figures.

What is CRX?

CRX is the conference run by Optro, the company formerly called AuditBoard. It was previously called Audit & Beyond. The 2026 edition was at the Gaylord Pacific in San Diego, and 2027 dates hadn't been announced when we checked.

Are there free GRC conferences?

Yes. #RISK Expo Europe is free for senior risk, compliance, security and audit staff, and the MetricStream GRC Summit's virtual US edition is free to join.

What is the best conference for privacy professionals?

The IAPP Global Summit in Washington, D.C. on 21–24 March 2027 is the field's flagship meeting, and the IAPP Europe Congress in Brussels is its European counterpart. CPDP in Brussels suits people interested in research and policy.

More conference lists