Registration and breakfast

Chair’s opening remarks

DORA - PANEL

Post-DORA implementation: Lessons learned post-implementation

• Insights from the first six months of DORA compliance across Europe
• Key challenges in aligning processes with the Digital Operational Resilience Act
• Strategies for embedding DORA into business-as-usual operations
• Perspectives from financial institutions and regulatory bodies on next steps

RESILIENCE

Integrating operational resilience frameworks into business-as-usual practices

• The integration of operational resilience into third-party risk management
• Overcoming challenges in harmonizing frameworks across regions
• Best practices for identifying vulnerabilities within critical functions
• How operational resilience contributes to overall risk mitigation

Morning refreshment break and networking

CRITICAL THIRD PARTIES (CTP)

Reviewing requirements for critical third parties and alignment with global regulation

• Impact of SS 6/24 on critical third party management
• Comparisons with DORA’s prescriptive requirements for CTPs
• Addressing transparency and compliance challenges with major tech providers
• The role of regulators in monitoring systemic risks posed by CTPs

TPRM BY EXCEPTION

TPRM By Exception

• Automation and AI for TPRM
• Data-Driven TPRM by Exception
• Moving from Assessments to Real-Time Risk Management

Lunch break and networking

EXIT PLANNING PANEL

Designing and implementing stress scenarios for critical vendor exits

• Practical approaches to testing exit strategies with suppliers
• Addressing the complexities of unplanned exits in financial services
• Regulatory expectations for stress testing and exit readiness
• Reviewing industry advances and approaches

AI

The next AI wave is on its way: Are you ready?

• Understanding the three waves of AI:  Machine Learning, Generative, and Agentic
• Exploring how AI is transforming third-party management programs
• Understanding the impact AI Now and AI Next on TPRM
• Practical insights into integrating AI into your TPRM strategy

INCIDENT REPORTING

Setting standards for timely incident reporting and processes for regulatory notification

• Best practices for incident reporting within vendor relationships
• Aligning internal processes with regulatory notification requirements
• Managing communication with regulators during third-party incidents

Afternoon refreshment break and networking

EMERGING RISK PANEL

Managing the usage of AI and Gen AI across the supply chain

• Understanding the use of generative AI by third parties and its implications
• Regulatory considerations, including the EU AI Act, for third-party AI usage
• Managing contractual obligations and oversight for AI-related risks
• Opportunities and challenges of AI integration into due diligence processes

ESG – PANEL DISCUSSION

Approaches for assessing and monitoring ESG risks and compliance with requirements

• Evaluating third-party compliance with environmental, social, and governance (ESG) standards
• The evolving role of climate risk assessments in vendor due diligence
• Industry best practices for embedding ESG factors into supplier selection
• Balancing cost efficiency with ESG commitments in third-party relationships

Chair’s closing remarks

End of day one and networking drinks reception