Name: The 5 Criteria for Long-Term Third-Party Risk Management Program Success
Start: 2022-11-30T16:00:00Z
End: 2022-11-30T17:01:40.000Z
Location: BrightTALK
Rating: 5

Shared Assessments is a global membership organization dedicated to developing the best practices, education, and tools to drive third party risk assurance. We are creators of the industry standard third party risk toolkit, used by over 15,000 organizations worldwide. 

Shared Assessments has updated and upgraded the 2023 Third Party Risk Management Product Suite to align with a changing regulatory and threat environment. Content has been adjusted to focus on Cybersecurity, Data Governance, Operational Risk, and Resilience. This session includes full details about updates and upgrades to the SIG, SCA, VRMMM, Data Governance Tools, including content organization and updates to industry and regulatory standards.

New 2023 Product Suite: Standardized Excellence To Meet Today’s Risk Environment

The increased focus on efficiency of Third-Party Risk control assessments, performed on vendors and supply chains requires all organizations to improve their use and integration of products, techniques, and technologies. Regulators are increasing their focus on nth parties and recognize the increased need for more collaboration. This webinar will examine the benefits and challenges of using assessment exchanges and seek to provide guidance to organizations using and or considering the use of a TPRM exchange.

Exchange/Assessment Efficency

In third-party risk management, to lower vendor and supplier risks to an acceptable level, practitioners must recognize which controls need to be in place. Understanding the types of vendors being onboarded and their potential inherent risks is key. This webinar will explore strategies for mitigating risk through consideration of crucial factors including location, type of data, and connection to the corporate network.

Third-Party Risk Assessments: Beyond Compliance Checks & IT Risk Management

Vendor onboarding is an essential early step in the third-party risk management lifecycle. What types of risk insights are helpful as you establish approved providers of technology, goods, or services? What should a successful supplier onboarding process look like in your organization? This session, presented by Director, TPRM Professional Services, Echelon Risk + Cyber, and Alastair Parr, Senior Vice President of Global Products & Services at Prevalent, will: <p>
<ul><li>• Identify challenges organizations face when onboarding new suppliers</li>
<li>• Explore the right metrics and risks to consider prior to onboarding a vendor including Cyber, Business, Hack/Breach, Financial, ESG, and Sanctions Intelligence</li>
<li>• Review the opportunities consolidated risk insights provide</li></ul>

The Top 4 Ways to Ease Third-Party Vendor Onboarding In Risk Management

Just as managing the risk of your direct suppliers is critical, understanding the risk of your suppliers' suppliers is imperative. While you may work most directly with secure third-party vendors and platforms, unknown Fourth Parties (vendors of vendors) can cause significant disruptions to your business. How do you manage the threats posed by these Fourth or Nth Parties? Participants will learn practical ways to identify and manage fourth parties through an overview of the tools and techniques experienced risk professionals use to effectively measure and address risk across all levels of the supply chain.

Fourth Parties And Beyond: Managing Risk In The Extended Supply Chain

Join Tom Garrubba and Paul Poh for a lively discussion about innovations that could change the way application developers approach common security pitfalls.

This session will explore application security best practices, and how adherence to these practices can prevent putting company networks, systems, and data at risk.

Innovations In Third Party Risk Processes: Application Security Controls

Modern businesses rely on numerous third parties and their supply chains to keep their businesses running. But many lack robust processes to assess and understand how these supply chains can pose additional risks. Understanding these risks to the supply chain enables businesses to take advantage of tried-and-true strategies that mitigate risk.

This session will feature third-party risk leaders to discuss trends in the supply chain.

Topics to be discussed include:
-Techniques for addressing supply chain risks
-Challenges – global footprint, supply chain complexity, cyber-attacks, regulations…
-Environmental, Social and Governance (ESG) – collaboration opportunities ,etc.
-Integrating and leveraging IT/OT processes, technologies and solutions
-Standardizing due diligence, risk assessments, standards (ISO, ISA 62443, …)
-Improving efficiencies and reducing costs
-Addressing organizational silos, process / technology solution integration, risk mitigation, and communication challenges

Managing Your Supply Chain Risk

Third parties operate globally, in unpredictable landscapes and geographies. As localized geopolitical events emerge, businesses need to react and adjust to ensure resilience of the supply chain and supporting parties.

This session will explore how to:
-Identify third parties impacted by geopolitical events
-Respond to events in a timely and proportionate manner
-Reduce the impact to key business functions

Geopolitical Events & Third Parties: How To React Across The Supply Chain

As more companies incorporate ESG across corporate programs, third party risk managers need to explore how new ESG regulations and standards will impact their third party risk management programs. This session will examine how risk leaders can shift to adopt ESG principles. Panelists will share best practices and emerging research on how to mitigate ESG Risk to ensure due diligence in their third party risk programs.

How Risk Leaders Mitigate ESG Risk In Supply Chains and Expedite Due Diligence

After nearly two years of responding to constant disruption, many organizations are now reevaluating how their TPRM programs comply with surging regulations and adapt and respond to emerging risks. So, what's over the horizon for TPRM and resilience?

In this session, experts will examine regulatory TPRM/Resilience expectations, with a focus on the US, Europe, and the Monetary Authority of Singapore. We'll review DORA (Digital Operational Resilience Act) status, US regulatory response to last summer's request for comments, PRA and MAS activities, and ESG regulatory direction.

Peeking Over The TPRM Resilience Regulatory Horizon

Business Continuity is constantly under attack from rising natural disasters, software and hardware failures, escalating and increasing instances of cyberattacks, and all the risks that accompany them. The effects of any one of these events could be devastating. While there is no sure way to avoid certain risks, there are things you can do to protect your business from any potential fallout that may follow.

In this session, we will uncover the business resilience risks that you are inheriting from your third parties and discuss how to create a disaster recovery plan that can address these ever-growing threats.

Third Party Business Continuity and Disaster Recovery Programs

There are numerous third-party risk assessments available to security and risk management professionals, each with different requirements. The process of standardizing risk assessments enables you to adapt to complex TPRM situations, ensure consistent results, and monitor trends.

Join Andrew Moyad, CEO of Shared Assessments, and compliance expert Thomas Humphreys as they tackle why standardizing your third-party risk assessments is key to your program’s success.

Andrew and Thomas discuss:

Why you need to establish shared standards for efficiency and control over risk
How to deliver harmonized risk management assessments that improve consistency and simplify reporting
How standardization enables you to focus on key risks
...and more!
Join these leading experts and establish an efficient and adaptable baseline for your third-party risk assessments.

Why Assessment Standardization is Critical to TPRM Success

ESG fallout from the crisis in Ukraine has been considerable; nations and organizations under pressure have taken short term actions at odds with stated ESG goals. Until now, the geopolitical impact of ESG has been largely out of the spotlight, but the recent crises has changed that reality.

This session will explore the short and long-term consequences of significant geopolitical events on ESG strategy, and discuss ways for organizations to best navigate those consequences.

Russia-Ukraine Conflict: Geopolitical ESG Fallout

As Risk Management has developed into a central business issue, senior management has become interested in understanding the risk environment.

In this session, we will cover what metrics reveal about the health of your vendor risk management program and how they can be used to build a risk-aware culture.

What risk metrics best tell the story of your risk management program’s performance to the board, C-Suite and other key stakeholders?

Set The Right KPIs and KRIs For Your Program

The increasingly complicated Russia-Ukraine crisis has triggered a rise in cyberattacks against Ukrainian interests and Ukrainian-allied governments, forcing organizations to bolster their enterprise cyber security defenses and create contingency plans for raising their defensive postures.

Join Richard Clarke, Chairman and CEO of Good Harbor, as he gives his perspective on the conflict in Ukraine and what impacts it has on national security.

Threat Briefing: Russia's War on Ukraine, A National Security Perspective

Cyberattacks on the supply chain have become a board-level issue for organizations and will continue to plague executives in 2022. The number and sophistication of security breaches is rising; attacks like ransomware cause significant disruptions to the supply chain, putting security at the forefront of business decisions.

In this session, we will discuss cyberattack readiness and how to ensure that business resiliency is in place for timely detection and mitigation of attacks.

Top 5 Priorities for Third Party Cyber Risk for 2022

Your third-party risk management program is on solid footing and bringing in short term success. But how do you keep the momentum going? What does a dynamic, agile program look like? Join Tom Garrubba, Vice President of Shared Assessments, and Alastair Parr, Senior Vice President of Global Products & Services at Prevalent, as they: <p>
<ul><li> • Discuss pragmatic, actionable long-term TPRM program goals</li>
<li> • Review considerations for appropriate resource planning and constraint management</li>
<li> • Show you best practices for business engagement and data collection</li>
<li> • Assess mechanisms for improving vendor interaction</li>
<li> • Explore how to create consistency in metrics for analysis and reporting</li>

The 5 Criteria for Long-Term Third-Party Risk Management Program Success

TPRM

Third Party Risk Management

Risk Management

Risk Assessment

Risk Management Success

SuccessFactors

Program Management

Risk Framework

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful environmental insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on environmental strategies and initiatives with reliable data that is sorely missing from this community.

Environment

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Get powerful procurement and sourcing insights for your business. Connect with experts and colleagues to get the most up-to-date knowledge on which strategies are proving to be the most effective for managing vendors, improving performance and reducing cost.

Procurement and Sourcing

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

The 5 Criteria for Long-Term Third-Party Risk Management Program Success

Presented by

About this talk

More from this channel