Provision 29: From Limping Along to Board-Ready

Building Coherent Governance Narratives From Fragmented Systems

Most organisations preparing for Provision 29 have controls frameworks in place. The problem is that those frameworks were built for a different purpose. Spreadsheets, disconnected tools, and siloed risk and audit data were never designed to support a formal board declaration, and the fragmentation that was once just inefficient is now a genuine governance liability.

The first mandatory declarations will arrive in 2027 annual reports. Boards are inside their first live reporting cycle, and the question is no longer whether Provision 29 matters. It is whether existing processes can produce a coherent, transparent narrative when declarations go on the record.

Why Attend

This session is designed for risk, compliance, audit, and governance leaders at premium-listed LSE organisations, as well as regulated and private equity-backed firms seeking stronger controls maturity and governance discipline.

In this session, Michael Rasmussen, GRC Pundit at GRC 20/20, draws on direct, recent experience advising UK organisations on Provision 29 readiness to examine what the provision actually requires in practice. The discussion covers how organisations define and assess material controls, integrate risk management and internal controls into a single governance workflow, and build the kind of evidence that supports board statements that stand up to scrutiny.

Key Learning Areas

In this webinar, you will learn:

Material Controls Definition: What "material controls" means in practice and how boards assess them with confidence

Fragmentation and Disclosure Risk: Why fragmented GRC tooling creates disclosure risk and what an integrated controls workflow looks like

Coherent Board Narrative: How to aggregate assurance results across functions into a single, coherent board narrative

Evidence Requirements: What evidence is required to support a robust board declaration that withstands scrutiny

Board Readiness Assessment: What separates organisations that are genuinely board-ready from those still operating on borrowed time

What to Expect

This webinar with Michael Rasmussen delivers practical guidance on moving from fragmented controls systems to integrated governance capable of supporting formal board declarations under Provision 29. Through examination of material controls assessment, integration of risk and internal control workflows, evidence aggregation across functions, and what distinguishes board-ready organisations from those facing disclosure risk, participants gain actionable frameworks for achieving genuine governance maturity. A recording will be made available to those unable to attend the live session.

Event schedule

Tuesday, July 21, 2026, 9:00 am BST