The acceleration of regulatory, technological, and geopolitical changes is forcing CEOs to revisit strategy, business models, governance structures, and organizational culture. In this panel, leaders share how they are transforming their companies in practice — and how Governance, Risk, and Compliance (GRC) structures have supported this process by providing decision clarity, forward-looking risk assessment, and institutional resilience. The discussion explores how GRC has evolved from a control function into a strategic infrastructure for adaptation, resilience, and legitimacy in a context of permanent uncertainty.
The intensification of AI usage has expanded data storage and processing across global infrastructures, often outside national jurisdictions. In 2026, data sovereignty is gaining momentum as both a political and corporate trend in Latin America, driven by concerns around security, control, privacy, and technological dependence. This panel discusses the advantages, risks, and trade-offs of keeping data within national borders, the impacts on technological architecture, and the implications for technology, privacy, legal, compliance, and data protection functions.
As mudanças recentes na política de enforcement dos Estados Unidos, especialmente no âmbito da FCPA e da atuação do DOJ, indicam um modelo mais estratégico, seletivo e focado em responsabilização individual. Empresas brasileiras e latino-americanas passaram a estar no radar, mesmo fora do sistema financeiro. Este painel discute, de forma prática, o papel das corporações no auxilio ao crime organizado e como se preparar para investigações transnacionais, revisar estruturas internas, gerir intermediários de risco, decidir sobre cooperação e garantir que políticas, controles e decisões resistam ao escrutínio internacional.
Em um cenário de instabilidade regulatória, geopolítica e reputacional, operações de M&A carregam riscos que raramente aparecem nos modelos financeiros, mas emergem com força após o closing. Passivos reputacionais, exposições a sanções, fragilidades de governança e riscos de terceiros desafiam abordagens tradicionais de due diligence e decisão. Este painel discute como identificar, comunicar e mitigar riscos quando a decisão estratégica já está em curso — e quando recuar deixa de ser uma opção simples.
Small and medium-sized enterprises are increasingly exposed to global integrity, compliance, and governance requirements through value chains, large client demands, sanctions, and international standards. Without the same structure as large corporations, many SMEs face risks that directly impact market access, contracts, and growth. This panel discusses the role of large organizations in enabling SMEs’ access to markets and how to structure proportional integrity programs focused on risk, simplicity, and practical feasibility — turning compliance into a lever for access, retention, and sustainable growth.
O crime organizado deixou de atuar à margem da economia e passou a se infiltrar em estruturas empresariais formais, utilizando contratos, cadeias de fornecedores e operações aparentemente legítimas. Nesse cenário, programas tradicionais de PLD/FTP e a due diligence clássica mostram-se insuficientes para capturar riscos cada vez mais estruturais, sofisticados e invisíveis aos controles formais. Este painel discute por que novas formas de verificação — baseadas em inteligência de risco, leitura de contexto e análise comportamental — tornaram-se essenciais quando o risco já não é apenas regulatório, mas estratégico, reputacional e físico.
À medida que a IA deixa de apenas recomendar e passa a tomar decisões ou executar ações, as estruturas tradicionais de GRC são colocadas à prova. Este painel discute os riscos e oportunidades e como preparar organizações para a adoção de sistemas agênticos, abordando caminhos de escalonamento decisório, trilhas de auditoria, limites de autonomia, explicabilidade e o papel indispensável da supervisão humana na governança de decisões automatizadas.
Dados reais de canais de denúncia de milhares de organizações revelam um retrato pouco visível das empresas: comportamento, cultura, liderança e riscos que nem sempre aparecem nos relatórios formais. Neste painel, insights inéditos mostram padrões que desafiam percepções tradicionais e o que eles indicam na prática. Em formato de Integrity Data Session, especialistas analisam esses dados inéditos em tempo real e discutem suas implicações para governança, cultura e gestão de riscos.Mais do que números, o painel propõe uma leitura direta: o que esses dados revelam e o que precisa mudar nas organizações.
Programas formais não bastam. A CGU tem priorizado evidências de efetividade, integração com o risco real do negócio e capacidade concreta de prevenção, detecção e resposta. Esta oficina propõe uma abordagem aplicada, a partir de erros e acertos, para discutir como decisões são tomadas, programas são estruturados, sanções são aplicadas e quais fatores influenciam os desfechos, com foco em efetividade, proporcionalidade e defensabilidade. Também explora como as organizações têm reagido a investigações, conduzido processos e tomado decisões sobre cooperação e leniência, com foco no que funciona, no que não funciona e em como fortalecer a capacidade de prevenção e resposta.
A atuação institucional junto ao poder público tornou-se mais sensível em um ambiente de polarização, pressão regulatória e escrutínio constante. O que antes era visto como contribuição técnica legítima — inclusive a participação de empresas e associações na elaboração de propostas regulatórias ou projetos de lei — pode rapidamente ser interpretado como captura de agenda, influência indevida ou risco reputacional. Este painel discute como estruturar políticas, governança e limites claros para RIG e advocacy, com transparência, rastreabilidade e critérios de integridade, permitindo influenciar políticas públicas sem comprometer a reputação nem expor a organização a riscos desnecessários.
Election years increase organizations’ institutional exposure, intensifying risks related to integrity, disinformation, data protection, institutional relations, reputation, and communication. In this context, employees’ public positioning — especially on social media — also becomes more relevant, with potential legal and reputational impacts. This panel discusses how boards and leadership can anticipate and manage these risks in a structured way, balancing freedom of expression, institutional responsibility, and alignment with corporate values through coordination between GRC, privacy, communications, and people management.
The crypto debate has evolved from early enthusiasm to the management of real risks and regulatory integration. Initiatives such as the Clarity Act signal a new cycle, in which clearer rules aim to reduce asymmetries, limit manipulation, and integrate the crypto market into the traditional financial system. This panel discusses how regulation can strengthen governance, attract institutional capital, and rebuild trust, analyzing practical impacts for legal, risk, and compliance professionals, investors, and regulators in Brazil and globally.
Organizations have advanced in technology, data, and artificial intelligence, but still face a structural challenge: how to organize distinct — yet complementary — governance frameworks for information, data, and AI without overlap, gaps, or conflicts of responsibility. This workshop starts from a recurring market misconception: treating these three governance domains as variations of the same theme. They are not. Each addresses different risks, decisions, and maturity levels. When this is unclear, inconsistencies arise, along with excessive data usage, unstructured automated decisions, and real accountability challenges. This session proposes practical structuring models, including roles, boundaries, committees, decision criteria, and control mechanisms that connect compliance, technology, ethics, and strategy.
The transition to a low-carbon economy mobilizes significant resources, incentives, and new regulatory requirements. In this context, still underexplored risks emerge: corruption in climate projects, distortions in resource allocation, and manipulation of certifications. This panel discusses how the climate agenda is also becoming a field of risk, and how compliance and risk management must evolve to ensure integrity, transparency, and credibility in this new environment.
In a dynamic sanctions environment, with constantly evolving restricted lists, the greatest risk often lies not in a company’s direct conduct, but in the relationships it maintains. A partner, supplier, or client becoming listed in the middle of an operation can halt business, trigger secondary sanctions, and compromise decisions already made. This panel discusses how to respond when risk emerges mid-course and how to structure governance, contracts, and contingency plans to enable fast decision-making without disrupting operations.
This panel discusses the responsibilities of governance, risk, and compliance functions in relation to audit “findings,” the boundaries between technical assessment, response coordination, and executive decision-making, and the challenges of transforming reports into effective risk management, structural corrections, and institutional learning in environments of high complexity and regulatory pressure.
This session explores how data analytics and artificial intelligence can support fraud prevention, detection of irregularities, and recovery of public resources, contributing to stronger public finances and increased citizen trust. The panel will examine approaches adopted by different countries to demonstrate the return on investment in fraud prevention initiatives, as well as the governance, ethical, and implementation challenges associated with the responsible adoption of these technologies in the public sector.
With the mandatory adoption of IFRS S1 and S2 starting in 2026, ESG moves beyond narrative and becomes part of financial and regulatory reporting. Auditable data, clear governance, and executive accountability become requirements with direct impact on access to capital, risk, and reputation. This panel discusses how companies are transforming this regulatory pressure into competitive advantage — and how these requirements extend to partners, suppliers, and across the value chain.
In environments under high pressure for results, growth, political alignment, or operational convenience, many decisions stop being purely technical and become tests of organizational courage. The cost of saying “no” is immediate and visible; the cost of saying “yes” is often delayed — until it turns into a crisis. This panel discusses who sustains unpopular decisions when political, financial, or reputational costs are high, and how organizations can structure governance so that courage does not depend solely on isolated individuals.
Em um cenário de alta complexidade institucional, escassez de recursos e crescentes pressões políticas, os órgãos de controle são chamados a entregar mais resultados justamente quando a confiança pública se fragiliza. Este painel propõe uma reflexão sobre como colaboração interinstitucional, inovação e aprendizagem entre pares podem fortalecer a fiscalização, a auditoria e o controle no Brasil. A discussão examinará o papel estratégico das instituições superiores de controle na sustentação de ecossistemas de accountability críveis e resilientes, identificando caminhos concretos para reforçar sua independência, autonomia e capacidade de gerar confiança.
Brazil recorded more than 546,000 mental health-related leave cases in 2025, in a context of technological acceleration, hyperconnectivity, and performance pressure. This scenario highlights a growing gap: the pace of change is exceeding human capacity to adapt. Mental health is becoming increasingly central to the organizational agenda, with impacts on culture, engagement, retention, and risk. In many cases, distress does not originate within the company but may be influenced or amplified by internal practices. This panel discusses how CEOs are integrating the human factor into strategic decisions and organizational culture.
The idea that “everything is compliance’s responsibility” has become one of the biggest misconceptions in contemporary corporate governance. Integrity programs are not infallible, do not replace business decisions, and do not automatically transfer responsibility for risks, fraud, or misconduct to the compliance function. This panel discusses the real limits of compliance, the role of the lines of defense, leadership accountability, and how society, the market, and companies need to mature their understanding of these dynamics.
Artificial Intelligence does not eliminate human bias — it incorporates, amplifies, and legitimizes it. Automated decisions carry assumptions, historical choices, and asymmetries that often go unnoticed because they “come from the system.” This panel explores how human cognitive biases are translated into algorithmic models and why excessive reliance on technology can lead to unfair, flawed, or ethically fragile decisions.
The update to NR-1 has made the management of psychosocial risks mandatory, repositioning mental health, harassment, and burnout as governance, HR, and compliance issues. This workshop addresses how to diagnose and implement the requirements of the regulation in a proportional way, distinguishing organizational risks from individual factors, without omission or over-attribution of responsibility. The focus is on the evolving role of Compliance, integration with HR, Occupational Health & Safety, Legal, and Leadership, and on practical decisions that go beyond formal compliance.
Most compliance training meets formal requirements but fails to change real decision-making. Generic content, information overload, and disconnection from everyday dilemmas reduce impact and engagement. This panel discusses how to design training based on real dilemmas, emotions, and context, focused on decision-making and tailored approaches for middle management — often less experienced, less senior, and more willing to take risks to advance their careers. The focus is on leadership development, highlighting why training leaders is one of the most effective strategies for preventing harassment and reducing behavioral risks.
The use of Artificial Intelligence tools is advancing in a decentralized and informal way, often outside organizational governance. Strategic, confidential, and personal data are being entered into AI platforms without institutional awareness or risk assessment. This panel discusses how this silent usage creates significant data exposure and legal liability, and why behavior, performance pressure, and organizational silence end up normalizing practices that can lead to serious incidents.
The business environment has become increasingly dynamic and characterized by constant change. In this context, leadership requires more than technical knowledge: it demands situational awareness, critical thinking, adaptability, and the ability to make decisions under pressure. This panel explores what executives are doing in practice to develop these skills, deal with ambiguity, and sustain decisions in continuously evolving scenarios.
In theory, governance functions exist to protect the organization, ensure independence, and guide ethical decision-making. In practice, however, performance pressures, conflicts of interest, structural limitations, and role ambiguities challenge this mandate. In some cases, the issue goes further: functions responsible for mitigating risks may, directly or indirectly, contribute to flawed decisions or even misconduct. This panel discusses the gap between ideal design and organizational reality, exploring how to strengthen the independence, influence, and effectiveness of gatekeepers in critical decision-making.
Poorly conducted harassment investigations amplify harm, re-victimize individuals, and weaken the credibility of the integrity system. At the same time, legal rigor and impartiality are essential. This workshop presents a practical investigation workflow that balances legal technique, qualified listening, protection against retaliation, and human care, while discussing common mistakes and best practices in handling sensitive investigations.
The “Sistema S” occupies a unique position in Brazil’s institutional landscape, managing parafiscal resources, performing a relevant public function, and operating with a private management logic. This hybrid nature increases the complexity of integrity programs, which must balance control and transparency with efficiency and value creation. In this context, organizations face the challenge of following more formal models or adopting more flexible, risk- and impact-oriented approaches. As institutional maturity advances, pressure grows for greater consistency and alignment across entities. The central dilemma is how to ensure standardization without compromising autonomy and effectiveness. This panel discusses pathways toward a tailored compliance model for the Sistema S — proportional, risk-based, and results-oriented.
The presence of women in tactical and mid-level leadership roles has been gradually increasing. Still, the transition to strategic positions — such as executive leadership, decision-making committees, and boards — remains unequal. This panel analyzes how power, legitimacy, and both formal and informal criteria influence who advances to spaces where strategy, risk, budget, and succession are defined. The discussion explores pathways to transform operational leadership into strategic influence and effective participation in decision-making centers.
Human Rights are not limited to codes of conduct or ESG requirements — they are tested daily in how people are treated and decisions are made. This panel discusses how to integrate Human Rights into compliance programs in practice, connecting policies, whistleblowing channels, investigations, leadership, and third-party management. The goal is to prevent the topic from being reduced to formal documentation and instead make it an effective part of decision-making, culture, and organizational governance.
“Rage bait” was named word of the year by Oxford University. In an environment that rewards speed, likes, simplification, and emotion, complex corporate decisions are often publicly judged before they are fully understood. In such contexts, how a company communicates — or remains silent — becomes a central part of risk, as relevant as the decision itself. This panel discusses how organizations can uphold facts, accountability, and institutional positioning when public narratives push for immediate and polarized responses, and the role of investigative journalism in shaping public trust.
A hands-on session to structure a viable ambassador program: objectives, profile, selection, training, role boundaries, governance, communication, and metrics — based on real and successful case studies.
In the attention economy, long and complex codes fail to fulfill their primary role: guiding behavior. If it is not read, it is not remembered — and if it is not remembered, it is not applied. In this practical workshop, participants will transform traditional code excerpts into simple, clear, action-oriented guidelines focused on real behavior. By the end, they will gain practical insights to make their codes more effective, memorable, and applicable in everyday situations.
Indicators, targets, and incentives can shape behavior more than codes of ethics. Poorly designed targets encourage silence, shortcuts, and short-term decisions; poorly chosen metrics create dashboards that fail to guide action. This panel analyzes the pros and cons of integrity metrics, including their incorporation into bonuses and incentives, discussing when they strengthen culture — and when they undermine it. The focus is on practical, actionable indicators for boards that can reveal human risks and guide decisions, without relying on useless surveys or vanity metrics.
Organizations are facing a landscape marked by attention crises, burnout, loneliness, and mental overload. These factors impact communication, decision-making, and relationships, increasing behavioral risks, conflicts, and ethical failures. Traditional governance and compliance models show limitations when addressing human challenges such as lack of connection, low psychological safety, and difficulty in influencing behavior. This panel discusses what changes in practice for leadership, compliance, and psychosocial risk management, especially in light of the new NR-1 requirements.
Whistleblowing channels only work when there is real trust — and it is precisely this trust that is tested when reports involve leadership or strategic interests. Fear of retaliation, lack of credibility, and inadequate responses weaken the system. In high-pressure scenarios, governance limitations also emerge: independence of investigations, protection of the compliance officer, and tensions with senior management. This panel discusses how to operate channels with legitimacy, ensuring protection, independence, and balance between risks of misuse and institutional credibility.
Behavioral compliance is not built through isolated campaigns or inspirational messaging. It requires accurate diagnosis, contextual understanding, prioritization of human risks, and practical interventions in the decision-making environment. In increasingly complex and uncertain scenarios, its effectiveness depends on understanding how decisions are actually made and acting on these mechanisms. This session presents how to structure a behavioral compliance program in a practical way, connecting behavioral analysis, organizational culture, and concrete adjustments in processes, incentives, and leadership.
Brazilian public administration has been advancing in the development of integrity and compliance programs, driven by regulatory frameworks, control mechanisms, leniency agreements, and growing societal expectations for transparency and accountability. This panel discusses how public institutions are structuring and strengthening their compliance programs, which models have proven most effective, the challenges of implementation in politically exposed environments, and what still needs to evolve for integrity to become an institutional practice — not just a formal requirement.
Artificial intelligence is expanding human capabilities at an unprecedented pace. In this context, the central question is no longer whether technology will replace people, but how the human role is being transformed. This panel proposes a high-level reflection on human-centered leadership in the age of AI, exploring which competencies, values, and responsibilities remain essentially human — and why they become even more relevant in an increasingly automated world. How are senior leaders, in practice, seeking to balance this equation?
On the third day, the question shifts from “why culture matters” to how to make it work in practice. This panel brings together CEOs, C-level executives, and board members to discuss the role of senior leadership in transforming culture into an operating system — one that can scale, endure over time, and guide real decisions. The discussion covers governance, incentives, metrics, budgeting, and accountability, highlighting what leaders have done to move beyond rhetoric and build cultures that deliver performance, reduce risk, and sustain the business in the long term.
Digital value chains, new business models, informal intermediation, and alternative payment methods have increased risk exposure. In this workshop, participants will reassess, design, or redesign AML/CFT programs based on the real risks of the business, considering emerging risks and regulatory requirements. The approach is practical and decision-oriented, focused on building proportional, effective, and sustainable systems while avoiding both excessive formalism and critical control gaps.
Risk assessment has evolved from a technical exercise into a strategic decision about allocating attention, resources, and political capital. Faced with more aggressive enforcement, new geopolitical risks, budget constraints, and increasing expectations from boards and regulators, organizations are forced to make choices. This panel discusses the real dilemmas of prioritization: what to deepen, what to simplify, what to accept as residual risk, and what to consciously leave unaddressed. The focus is less on methodology and more on making defensible, proportional, and sustainable decisions — even when there are no clear answers.
The adoption of AI in compliance programs is no longer optional and now requires practical and responsible decision-making. This workshop presents a foundational approach to initiating the use of AI in compliance, exploring initial use cases, ethical and legal risks, prioritization criteria, and essential safeguards before automation. The focus is on implementing AI as a support tool, with minimum governance, clear accountability, and alignment with the real risks of the business
The healthcare sector faces growing challenges at the intersection of clinical research, the use of sensitive data, artificial intelligence, and regulated relationships with healthcare professionals. Accelerated innovation increases risks related to integrity, privacy, and information governance. This panel discusses how organizations in the sector are structuring governance for data and AI, managing risks in healthcare and clinical research, and establishing clear boundaries in interactions with healthcare professionals in an ethical, sustainable, and defensible manner.
With the growing adoption of intelligent systems, AI models and data flows have become auditable objects in their own right, creating new technical, ethical, and governance demands — and, consequently, new career paths. This panel discusses which new professions are emerging in this context and which technical and behavioral skills are becoming essential.
Although many risks are already known, due diligence processes still rely on traditional verification approaches that are not fully adapted to today’s complexity. Fragmented global supply chains, opaque third parties, new business models, and emerging risks demand new perspectives and sources of analysis. This panel proposes a practical reflection on how to go beyond checklists, exploring new verification approaches, lessons learned from recurring mistakes, and the smarter use of technology to support proportional, clear, and defensible decisions.
Legal and compliance departments are undergoing a structural transformation. Increasing complexity, technological advancement, pressure for efficiency, and the need for closer integration with the business require new management models. In this context, Legal Ops is gaining prominence as a driver of governance, productivity, and decision intelligence. This panel discusses how to structure more agile, data-driven legal and compliance functions capable of supporting more consistent, strategic, and business-aligned decisions.
Forensic extraction of mobile data — even without passwords and after file deletion — has become central to complex investigations, with direct implications for compliance, privacy, and governance. Through a guided simulation, this session demonstrates what can and cannot be extracted, the legal boundaries, and how the Federal Police ensures chain of custody and evidentiary validity. It also addresses the corporate perspective: how to respond, protect legitimate data, and, in internal investigations, what can and cannot be done with mobile devices.
Recent corporate scandals, both in Brazil and globally, have revealed systemic weaknesses that go beyond individual misconduct, exposing failures in governance, internal controls, auditing, compliance, and leadership. This panel offers a critical and practical analysis of these cases, focusing less on “who failed” and more on where systems broke down, which decisions amplified damage, and what could have been detected or mitigated before the crisis.
International organizations such as the UN Global Compact and the OECD shape global integrity standards in a non-coercive way, often preceding laws, enforcement, and market requirements. This panel discusses how these agendas are built, why they function as early signals of risk and opportunity, and how organizations that can interpret them effectively are able to prepare — while others only react once these standards become regulatory or commercial obligations.
The intensification of enforcement and the expansion of risks related to third parties, sanctions, fraud, and organized crime require a practical reassessment of internal investigations. Overly broad protocols, slow investigations, or poorly documented decisions can increase risks rather than mitigate them. This panel discusses how to conduct efficient and defensible investigations, addressing critical decisions such as when to initiate an investigation, how to define and adjust scope, when to deepen or contain inquiries, and how to document decisions in a proportional and sustainable way.
As certificações ISO 37001 e ISO 37301 são referências em integridade, mas seu valor depende de decisões estratégicas, escopo adequado e patrocínio da alta administração. Mais do que implementar, o desafio está em sustentar sua efetividade ao longo do tempo. A agenda emergente da ISO 37201, ainda em desenvolvimento, sinaliza a evolução dos sistemas de gestão ao incorporar temas como prevenção e combate à violência contra a mulher. A oficina aborda como implementar, revisar e sustentar certificações de forma proporcional e baseada em risco, preparando a organização para auditorias e fortalecendo o programa de integridade com o engajamento da alta liderança.
The consolidation of the regulated sports betting market has increased demands on operators and the broader sports ecosystem. The discussion goes beyond regulation, encompassing enforcement, governance, AML/CFT, data protection, advertising, conflicts of interest, and sports integrity. This panel explores the impact of these changes on betting operations and their relationships with clubs, athletes, and partners, highlighting key GRC risks and priorities to sustain reputation and growth in an increasingly exposed environment.
This panel discusses how to move beyond defensive reporting and build indicators and narratives that truly help C-level executives and boards understand risks, set priorities, and make clear decisions. The challenge is not the lack of data, but how it is organized, presented, and connected to business decisions.
Organizations must understand where tax reform creates new risks, how these risks manifest beyond the tax function, and how to structure controls and defensible decisions throughout the transition period.
During periods such as the World Cup and election years, conflicts of interest, gifts, and hospitality become even more complex. This panel analyzes real cases in which legitimate interests come into tension with ethical boundaries, weak documentation, and sensitive public-private interactions. The discussion explores where judgment fails, how context amplifies reputational and regulatory risks, and how to structure defensible criteria and records to support sound decision-making in gray areas beyond formal rules.
Based on lessons from previous editions, this panel analyzes what truly made a difference in the evaluation of integrity programs, where organizations most often fell short, and which signals already point to expected future adjustments. The focus is on using Pró-Ética — an initiative by Brazil’s Office of the Comptroller General (CGU) — as a practical tool for diagnosis and continuous improvement, enhancing compliance effectiveness beyond formal recognition.
feeling that everything is under control. In this new immersive experience, featuring the same speakers from the original “Corporate Squid Game,” you will take on the role of the Chief Compliance Officer (CCO). The numbers are flawless. The market trusts you. Growth is accelerating. But something feels off: minimized alerts, aggressive targets, strategic silence. What happens when the warning signs begin to reach the top? What if the decision stops being technical — and becomes structural? Because, in the end, governance is not comfortable. It is institutional courage.
Copyright © 2026 – 13º Congresso Internacional de Compliance / Website by Mamutt Design