KPMG: the factory infographic
Audit, tax and advisory: the people boards trust to say whether risk is under control.
What the company does
In normal terms
Global network of professional services firms providing audit, tax and advisory services; listed for Web Summit 2026 as KPMG Portugal.
KPMG Portugal is an event partner and runs the Global Tech Innovator final in Lisbon; audit and advisory firms validate how clients govern risk, now including AI.
In lay terms
KPMG are the inspectors companies call in to check the books and the risks, and to tell the board it is safe.
The risks it faces, especially from AI agents
In normal terms
- Auditing agents without a record. Clients deploy agents faster than they document them; auditors have nothing consistent to test.
- Their own agents. Advisory firms use AI agents on confidential client data; the same questions apply to them.
- Opinions on new ground. Signing off on AI controls without a shared standard is a professional risk.
In lay terms
- Auditing agents without a record. You can't inspect a house with no plans.
- Their own agents. The inspector's own assistant has keys to every client's office.
- Opinions on new ground. Saying 'it's safe' when there is no rulebook yet.
How RiskMandate helps
- Reachwhat it can actually access or affectA client's agents and what each can touch.
- Mandatewhat the business authorisedWhat the client's business authorised.
- Gapthe difference: the riskThe audit finding: reach beyond mandate.
- Barrierswhat really stands in the wayControls with evidence an auditor can test.
- Provenancewho owns it, who reviewed it, which versionOwner, reviewer and version: the audit trail.
In normal terms
RiskMandate produces exactly what an auditor needs: a consistent, evidenced record per agent. For KPMG it can be a tool to assess clients' agents and a model for governing its own. A partner, not a competitor.
In lay terms
RiskMandate gives the inspector a checklist for AI assistants, so they know what to look at.
A first line for the conversation: Your clients will ask you whether their agents are under control. Here is a record you can audit.
Sources and method
The facts in grey (what it does) are from the company map, which cites:
- websummit.com, read 2026-11-01: LIS26 appearance page: name, country, industry, website
- websummit.com, read 2026-11-01: listed on the 2026 event partners list with its elevator pitch (the "what" field)
- co.ibtimes.com, read 2026-11-01: KPMG Private Enterprise Global Tech Innovator 2026 global final takes place in Lisbon on 11 Nov 2026 during Web Summit
The risks and how RiskMandate helps are our analysis, written by dev@web-summit.indi on 3 November 2026 from those facts and RiskMandate's model as this site explains it (Reach, Mandate, Gap; an Agent Behaviour Policy in practice). They are not the company's own statements and name no incident. A person reviews each before it is used.