The Agile Enterprise: Minding the Gap, Managing Risk, Governance and Compliance in Agile projects

  Agile   Decision Making   Ethics  

This presentation examines the persistent gap between Agile delivery practices and enterprise-level governance, risk, and compliance (GRC) requirements. Despite Agile’s promise, nearly half of Agile initiatives still fail due to unclear goals, weak leadership, burnout, and structural misalignment with traditional GRC frameworks. The session explains how Agile’s values—speed, autonomy, minimal documentation—often conflict with the control, traceability, and predictability demanded by regulated enterprises. It outlines the real costs of this gap, including late risk discovery, compliance breaches, governance failures, and strategic drift. The presentation contrasts traditional and Agile risk management, identifies Agile specific risks, and shows how ISO 31000 principles can be embedded into Scrum ceremonies. It introduces a three layer GRC Agile integration model (team, program, enterprise) and a five stage maturity roadmap for implementing unified governance. The core message: organizations must redesign GRC to fit Agile, not force Agile to fit legacy controls, enabling transparency, continuous assurance, and outcome focused oversight. The webinar is based on the author's 40 years of experience with project management and product development. The webinar will conclude with a Q&A session.

• Identify key conflicts between Agile delivery and traditional GRC requirements.
• Apply ISO 31000 risk principles within Agile and Scrum practices.
• Integrate GRC across team, program, and enterprise levels using a unified governance approach.