AGENDA

Speakers

• To Be Announced!, More information to follow.

Third-party vendors and service providers are often very responsive to initial requests for details about their practices. But once the contract is signed, information can be less forthcoming.

Yet ongoing vendor monitoring is a crucial part of third-party risk management. Changes in vendors’ practices or supply chains can expose your business to unexpected risk.

PrivSec Third-Party Risk will explore how to effectively monitor your third-party relationships on an ongoing basis and achieve near-total third-party transparency.

Speakers

• Keitumetsi Tsotetsi, Senior specialist: Group governance, risk and compliance (cyber security), Vodacom
• Gareth Oldale, Partner, Head of Data, Privacy and Cybersecurity, TLT LLP
• Jelle Groenendaal, Ph.D., Senior Associate Researcher, Crisislab
• Sumeet Kukar, CEO, Arascina® - Cyber for non-techies
• Puja Verma, LLM, CIPP/E, Legal & Privacy Counsel, Philips

Questionnaires are an important part of third-party due diligence programmes.

But by relying on questionnaires, businesses entering into third-party relationships assume their service providers will respond with transparency and accuracy.

PrivSec Third-Party Risk will consider whether the risk assessment questionnaire is a sufficiently robust mechanism for lowering risk exposure, and explore how businesses can obtain comprehensive and meaningful responses.

Speaker

• Onur Korucu, M.Sc, LL.M, Sr. GRC, Data Protection, Cyber Security Manager, Avanade
• Guilherme Campion Tovar, CIPP/E, Data Privacy Specialist, Mercado Libre
• Prof. Hernan Huwyler, MBA CPA Sr. Lead IT Controls and Risk at Danske Bank and Compliance Masters Director at IE Law School

Along with security and legal concerns, ethical considerations are an increasingly crucial component of third-party risk management.

By ensuring third parties engage in fair and lawful employment practices to avoid environmentally harmful manufacturers, companies are not only doing what’s right—they are reducing risk and enhancing their reputation.

PrivSec Third-Party Risk will explore the ethical dimension of supply chain management—and consider how to make sure your third-party service providers live up to your values.

Speakers

• André H. Paris, CIPM, CCEP-I, Managing Partner, Fakos – Data Privacy & Compliance Consultancy
• Brian Myers, Esq., Litigation Attorney, Beckage
• Merilyne Davies, Global Director of Privacy / Data Protection Officer, RX Global
• Regine Bonneau, CEO and Founder, RB Advisory

Solarwinds and Kaseya showed the world how dangerous supply chain attacks can get—when one actor in the supply chain becomes compromised, the effects can be devastating to hundreds of organisations downstream.

PrivSec Third-Party Risk will explore the ongoing threat of supply chain attacks and provide actionable advice on reducing your risk exposure.

Host

• Cat Coode, Data Privacy Consultant, Fractional Data Privacy Officer, Binary Tattoo

Speaker

• Anu Kukar, Associate Partner, Cybersecurity cloud, strategy & risk IBM A/NZ; Director, Arascina® – Cyber for non-techies; Switch2Cyber – global campaign
• Marco Túlio Moraes, CISO, Oiti
• Vincent D'Angelo, Global Director, Strategic Alliances, Partnerships & Corporate Strategy, CSC Digital Brand Services
• Patricia Punder, Governance, Compliance, Data Privacy and ESG International Expert, Punder Consulting Office, Punder Advogados

Conducting due diligence on prospective third-party providers is a vital part of ensuring compliance and lowering risk exposure.

The due diligence process can be resource-intensive, but getting this crucial part of third-party risk management wrong can be disastrous for your business and its stakeholders.

PrivSec Third-Party Risk will explore best-practice tips to help systematise and prioritise your company’s third-party due diligence process.

Speakers

• Tsholofelo Rantao, CISM, Data Protection Officer, FNB South Africa
• Todd Boehler, Vice President of Strategy, PROCESS UNITY
• Amanda L. Tilley, VP, Information Security Manager, GRC and Privacy, OceanFirst Bank
• Dominic Newton, Group DPO, IQ-EQ

More information to follow

Speakers

• To Be Announced!, More information to follow.