Day One | November 10
Here is the latest edition of the agenda. As we approach the event, we will be adding speakers and sessions to enhance your experience. To stay informed, please register your interest
 | Terri Duhon,Board Member,Wise and Rathbones |
Key topics
- Where regulation is driving meaningful change versus creating additional complexity
- Why many organisations continue to struggle between compliance and execution
- Managing overlapping expectations across DORA, NIS2, AI regulation, operational resilience and outsourcing frameworks
- What regulators are increasingly expecting to see beyond policies and documentation
- Turning regulatory pressure into stronger risk management and resilience outcomes
 | Chris Knox,Regulatory Strategy & Policy,Microsoft |
 | Orlando Fernandez Ruiz,Senior Policy Specialist,Bank of England |
 | Alison McQuaker,Head of Procurement and Supplier Management,FNZ |
Key topics
- Moving from manual tracking to structured risk segmentation across a complex supplier base
- Integrating third-party risk data into procurement workflows and supplier reviews
- Managing real escalations: what happens when high-risk suppliers refuse to engage
- Aligning sustainability, procurement, and operational resilience into a single framework.
- Navigating fragmented global standards: managing suppliers across different countries, regulatory regimes, and accreditation frameworks where no single platform covers everything
- What we got wrong, what we fixed, and what we would do differently
 | Martin Mirimo,Head of Supplier Management,Travelodge |
Key topics
- Automating due diligence, monitoring, and risk assessment processes at scale
- Integrating internal and external data sources for continuous risk insight
- Improving efficiency and coverage across large, complex third-party ecosystems
- Managing trade-offs between speed, scale, and control
- Identifying where AI delivers value vs where human intervention remains critical
 | Stuart Barnett,CyberSec Consultant/Deputy Director GRC,BlueVoyant |
 | Joseph Harrison,Head of Procurement Operations and Third Party Risk,The AA |
 | Meletis Rentoumis,Head of Contracts Management & Projects Coordination,Eurobank |
Key topics
- Interpreting overlapping regulatory intent across frameworks
- Identifying where requirements converge vs conflict
- Understanding systemic risk expectations across supply chains
- Anticipating regulatory expansion beyond financial services
 | Dr Isabela Parisio,Postdoctoral Research Associate,Tech and Policy, King’s College London |
Key topics
- Assessing exposure to dominant, irreplaceable, and “too critical to exit” providers
- Strengthening oversight, controls, and performance management for critical vendors
- Building resilience through contingency planning, substitution options, and fallback strategies
- Defining escalation and governance approaches when vendor risk cannot be reduced
 | Gary Lock,Director, Global Head of Third Party Supplier Assurance,Fidelity International |
 | Kurt Neilson,Global Head of Third Party Risk Management,Schroders |
 | Ronan Levelle, Director, Black Kite International, Black Kite (Moderator) |
 | Vassiliki Ntoupi,Senior Director, Outsourcing Officer,Piraeus Bank |
Key topics
- The signal before the event: What analysis of over 430 supplier failure events tells us about the value of cross-domain patterns versus isolated severe alerts.
- When should risk trigger a deeper review? A real-world case challenging traditional High/Critical-only escalation models.
- Foresight without pretending to predict: How historical patterns can create a better calendar for recurring disruption and a better watchlist for human review.
- Cutting through the noise: Why the objective is not more alerts, but knowing where to focus limited risk resources.
- Where AI earns its keep: Using technology to contextualize, correlate, map exposure and route attention while keeping risk appetite, judgment and decision rights human.
- From monitoring to decisioning: Why the future of TPRM is continuous, dependency-aware, pattern-based and action-oriented.
 | Maya Calabrese,Head of Customer ExperienceSupply Wisdom |
Key topics
- Designing a unified regulatory operating model across functions
- Embedding compliance into business and procurement workflows
- Streamlining controls, testing, and assurance across frameworks
- Scaling compliance alongside business growth and change
 | Anna Tsopelaki,Outsourcing Officer – Head of Outsourcing & ICT Third-Party Risk,Eurobank |
Key topics
- Why evidence analysis remains difficult but possible to scale
- The limitations of manual reviews and generic AI methods
- How benchmarking improves the quality and consistency of AI analysis
- Why different evidence types require different specialized AI agents
- A practical methodology for evaluating AI solutions for evidence analysis
 | Michael Keslassy,CTO and Co-Founder,Vendict |
- Extended networking lunch
- Meetings with peers, speakers and sponsors
- Networking lounge and exhibition area
- Limited to 30 attendees per table
- Interactive peer-to-peer discussion format
 | Anne McGowan,Head of Supplier Management,Lloyds Banking Group |
 | Gemma Stewart,Global Head Third Party Risk Management,Zurich Insurance |
 | Verity Billson,Group Head – Third Party Operations,Experian |
 | Jia Fu,Head of Cybersecurity (CISO),British Film Institute |
| Meletis Rentoumis,Head of Contracts Management & Projects Coordination,Eurobank |
| Anna Tsopelaki,Outsourcing Officer – Head of Outsourcing & ICT Third-Party Risk,Eurobank |
Key topics
- Aligning critical services with supporting third-party providers
- Embedding third-party scenarios into resilience planning
- Defining criticality and impact across internal and external services
- Integrating third-party risk into resilience frameworks
 | James Spink,Director Enterprise Resilience,IHG ® Hotels & Resorts |
 | Shamial Afzal,Global TPRM Lead,Beazley |
 | Faye Wilde,Operational Risk & Compliance,Independent |
Key topics
- Reducing manual effort in supplier onboarding and assessments
- Using automation to validate responses and identify inconsistencies
- Using automation to validate responses and identify inconsistencies
- Balancing automation with human review and accountability
- Ensuring consistency across large supplier populations
 | Michel Teughels,Innovation & Strategy Manager,ExxonMobil |
This session will provide a practical roadmap for integrating sanctions screening, risk assessment, escalation procedures, and ongoing monitoring into existing third-party risk management programs. Attendees will leave with actionable guidance for building a scalable and defensible sanctions risk framework.
Key topics
- Integrating sanctions controls throughout the third-party lifecycle
- Establishing effective monitoring and escalation processes
- Aligning sanctions compliance activities with broader TPRM governance
 | Michael Volkov,CEO,The Volkov Law Group PC |
Key topics
- Aligning testing programmes with regulatory expectations and impact tolerances
- Prioritising systemic and concentration risk exposure
- Using outputs to drive investment and board-level decision-making
- Expanding testing maturity across business functions and supplier tiers
 | Kehinde (Kenny) Otto,Head of Supply Chain Management,Royal Papworth Hospital, NHS |
Key topics
-
The vulnerability deluge: How AI is accelerating vulnerability discovery and creating more noise for TPRM teams to navigate
-
AI and the attack landscape: How AI is making reconnaissance, social engineering and other parts of the attack lifecycle faster and more scalable
-
The emerging AI supply chain: Understanding the risk introduced by AI companies and the AI providers your suppliers increasingly depend on
-
Rethinking TPRM with AI: How AI can automate manual processes like assessments and evidence review, while helping teams identify, prioritise and act on risk faster
 | Mike Gall,Director, Sales Engineering,Black Kite |
Key topics
- Moving beyond static questionnaires to dynamic assessment models
- Ensuring consistency and completeness in supplier evaluations
- Integrating due diligence with ongoing monitoring processes
- Demonstrating compliance through robust documentation and evidence
 | Paul McLaughlin,Head of Controls Transformation,Costain |
Key topics
- Integrating cyber resilience into enterprise and third-party risk frameworks
- Aligning cyber and operational resilience into a unified strategy
- Moving from control-based models to resilience-based approaches
- Strengthening collaboration with critical suppliers to manage systemic cyber risk
 | Sean Wright,Head of Oversight Operational Risk (Third Party Risk & Operational Resilience) | Operational Risk Oversight | Risk Function,Nationwide Building Society |
| Jia Fu,Head of Cybersecurity (CISO),British Film Institute |
 | Justin Kuruvilla,Chief Cyber Security Strategist,Risk Ledger |
Key topics
- Reducing manual effort across onboarding and due diligence workflows
- Streamlining approvals, assessments, and escalation processes
- Improving consistency across large supplier populations
- Embedding governance and accountability into automated workflows
- Enhancing operational efficiency across cross-functional teams
| Shamial Afzal,Global TPRM Lead,Beazley |
Key topics
- Building trust and credibility to position TPRM as a strategic business partner
- Increasing stakeholder engagement across procurement, legal, technology and the wider business
- Overcoming resistance and changing perceptions of third-party risk as a barrier to business
- Embedding a culture of collaboration to support sustainable programme adoption
- Practical lessons for leading transformation and driving long-term organisational change
| Verity Billson,Group Head – Third Party Operations,Experian |