Explore innovative solutions in Enterprise GRC, Third-Party & Vendor Risk Management, and Model Risk Management. This channel delivers thought leadership on critical topics like TPRM, MRM, EUC management, cyber risk, IT risk, and more, helping organizations navigate the complexities of modern risk landscapes.

In this episode of Mitratech's Morning Coffee Show, join Claudia Howe, Executive Director of GRC Solutions, and Henry Umney, Managing Director of GRC Strategy at Mitratech, as they sit down for a #MorningCoffee. 

B is broad not border! Watch the full episode as our hosts discuss how in today's global business landscape, regulatory compliance is more interconnected than ever before. What might seem local, can potentially translate to a global scale.

Furthermore, they deep dive into the importance of ensuring regulatory compliance across the organization's full value chain. Whether you call it third-party, vendor or supply chain risk management, it is highly important to have a program in place.

Time to grab a coffee!

Mitratech's Morning Coffee Show - Global & Extended Regulatory Environments

In this episode of Mitratech's Morning Coffee Show, join Henry Umney, Managing Director of GRC Strategy at Mitratech, and Adam Tan, Head of Model Risk Management in the UK for KPMG, as they sit down for a #MorningCoffee. 

Our hosts will dive into the PRA's definition of DQMs and non-models, why they deem them important, and what approaches firms are taking to address them.

Time to grab your cup!

Mitratech's Morning Coffee Show - SS1/23 have brought DQMs and Non Models into banks prevue

Happy 20th Birthday SOX!

In this episode, join Karl Viertel, General Manager of GRC at Mitratech, and Claudia Howe, Head of Sales DACH at Mitratech, as they sit down for a #MorningCoffee.

Mitratech's Morning Coffee Show - Happy Birthday SOX

Mitratech's very own talkshow! In this first episode, join Karl Viertel, General Manager of GRC at #Mitratech, as he shines the spotlight on #ESG. Watch the full episode for valuable insights and an expert analysis of this #GRC topic.

Mitratech's Morning Coffee Show - ESG

In this episode of Mitratech's Morning Coffee Show, join Ryan Fox, GRC Sales Manager at Mitratech, and Stephanie Fox, GRC Client Success Manager at Mitratech, as they sit down for a #MorningCoffee. 

Watch the full episode as our hosts discuss vendor risk management, from regulatory pressures and resource constraints facing organizations to automation, best practices and various tools to use based on your desired program maturity.

Time to grab a coffee!

Mitratech's Coffee Morning Show - Vendor Risk Management

In this episode, join Karl Viertel, General Manager of GRC at Mitratech, as he sits down for a #MorningCoffee with a very special guest, Mitratech's CEO, Mike Williams. Watch the full episode for an insider look into Mitratech's #Technology, innovation within the organization and a detailed look into how lines are blurring between business units.

Mitratech's Morning Coffee Show - Technology

In this episode of Mitratech's Morning Coffee Show, join Henry Umney, Director of GRC Strategy at Mitratech, and Alex Subba Row, GRC Sales Director at Mitratech, as they sit down for a #MorningCoffee. 

Watch the full episode as our hosts discuss End-User Computing (EUC), from EUC risk management to the ever-evolving business resilience agenda

Time to grab a coffee!

Mitratech's Morning Coffee Show - Vendor Risk Managament

AI has transformed how organizations conduct their work. But for every improvement in productivity that AI delivers comes risk - data security, transparency, bias and more. How can organisations understand the types of risk exposures arising from AI and its growing and pervasive application across industries?

In this webinar, risk management experts from 3VRM and Mitratech will examine how to ensure your third parties have the proper controls over their usage of AI. 

The webinar will:
- Identify tools to integrate AI as a risk domain.
- Review the impact of the EU AI Act and other AI-related legislation in determine third-party preparedness.
- Examine the roles involved in managing AI risk: Who owns AI risk, who is responsible for managing it.

Clarify oversight and risk management mechanisms required to ensure AI governance.

This webinar will deliver the guidance and best practices necessary to ensure third party AI usage aligns with your organization's governance standards.

How to Manage the Rise of AI in Third-Party Risk Management

The EU's NIS2 Directive introduces new cyber security requirements to enhance the resilience of critical sectors against growing cyber threats.
 Join Toro Solutions and Mitratech risk and compliance experts as they explore the key provisions of NIS2, focusing on risk management, incident reporting, and third-party risk management.
 In this webinar, our experts will share: 
- The key essential requirements of NIS2 and the practical steps your organisation can take to meet them.
- Best practices for managing cyber security risks and securing supply chains
- Insights into the evolving cyber threat landscape and how to protect your organization.

Mastering Third-Party Risk Management Compliance Requirements in NIS2

As organizations rely more on third-party vendors and complex supply chains, managing cyber risk within these external relationships has become critical. But with so many standards, how do you know which is right for your organization?

Join compliance experts Thomas Humphreys and Sophie Pothecary as they explore how common National Institute of Standards and Technology (NIST) supply chain security frameworks can be applied to enhance visibility, control, and risk mitigation in third-party and supply chain environments.

During the webinar, Thomas and Sophie will:
- Examine the core components of key NIST cybersecurity frameworks and how they apply to supply chain risk management.
- Review real-world examples of successful NIST control implementation, including best practices for improving supplier compliance.
- Discuss practical strategies to assess, monitor, and mitigate risks associated with third-party vendors using the NIST frameworks.
- Reveal actionable insights on how to implement continuous monitoring to detect and respond to emerging threats in the extended enterprise.

How to Use NIST Cybersecurity Frameworks to De-Risk Third-Party and Supply Chain Management

AI is transforming every function—Legal, Compliance, Finance, IT, Operations, Third-Party Risk, and beyond. But without AI readiness, governance, and risk management, organizations face compliance gaps, security vulnerabilities, and ethical challenges.

How can you integrate AI governance effectively? Do you have the right data, frameworks, and controls to manage AI’s risks and opportunities? Is your AI strategy future-proof against rapid advancements?

Join our expert-led webinar to gain actionable insights, real-world use cases, and technology-driven solutions to build a strong AI governance strategy.

What You’ll Learn:
- Artificial Intelligence 101: Establish a consistent AI definition and distinguish it from ML.
- AI as a New Risk Driver: Identify key risk categories, domains, and frameworks affected by AI.
- Building an AI Inventory & Future Strategy.
- Practical Steps for AI Governance: Evaluate existing governance structures and integrate AI-specific controls.
- Leveraging Technology for AI Compliance: How to use automation, monitoring, and reporting tools for AI oversight.

Strategic AI Governance: Implementing Effective Controls in Financial Services

Artificial Intelligence (AI) has revolutionized how businesses get work done, offering enhanced efficiency and streamlined decision-making. However, AI usage in third-party relationships introduces a host of governance challenges, from ethical considerations and compliance risks to data security and accountability concerns.

Watch Michael Rasmussen, GRC Pundit and principal analyst at GRC 20/20, and Henry Umney, managing director of GRC strategy at Mitratech, as they delve into the complexities of managing AI within vendor ecosystems.

In this on-demand webinar, Michael and Henry:

Examine real-world case studies on the successes and pitfalls of AI governance in third-party contexts.
Navigate the regulatory landscape of AI in third-party engagements.
Review strategies for balancing innovation with ethical responsibility.
Identify best practices for establishing security, accountability, and transparency in AI-powered tools.

How to Govern the Use of AI in Third-Parties with Michael Rasmussen of GRC 2020

Considering the growing dependency on third-party relationships, ensuring the security, compliance, and operational resilience of your vendors and suppliers is more critical than ever. Yet, even the most robust due diligence programs can leave gaps that expose organizations to security, financial, operational, and reputational risks.

Join Bryan Littlefair, past Global CISO of Vodafone Group and Aviva, as he uncovers the most common weaknesses in third-party due diligence approaches and provides practical strategies to address them.

In this webinar, Bryan will:

- Identify the most overlooked areas in third-party due diligence.
- Suggest approaches to enhance risk assessment processes with modern tools and technologies.
- Provide tailored due diligence guidance based on industry and vendor type.
- Examine frameworks and best practices to build a comprehensive due diligence strategy.

Top Tips for Filling in Third-Party Due Diligence Gaps

Third-party risk professionals must prioritise holding vendors and partners accountable to internal cybersecurity standards to mitigate the risks posed by potential cyber-attacks. Building and maintaining resilient relationships with third parties—from the initial contracting phase through the partnership lifecycle—is critical to safeguarding data integrity and ensuring timely, transparent incident reporting. With increasing regulatory focus on cybersecurity, such as the EU’s updated Network and Information Systems Directive (NIS2) and the US Cybersecurity Maturity Model Certification (CMMC), organisations must evaluate their vendors’ cybersecurity readiness and adopt proactive, efficient risk management processes to meet these heightened expectations.

This webinar will explore actionable strategies to establish and enforce strong cybersecurity practices across all third parties, fostering accountability throughout the third-party lifecycle. By identifying high-risk areas and implementing effective monitoring tools, third-party risk professionals can enhance their organisation's defence against vulnerabilities, protect sensitive data, and uphold operational resilience in an era of increasing cyber threats.

Learning Objectives:

- Gain comprehensive visibility into cybersecurity risks across your vendor network.
- Shift from reactive to proactive cyber risk management to align with CMMC and NIS2 regulatory standards.
- Position your third-party risk framework as a cornerstone of enterprise-wide compliance and resilience strategies.
- Recognize the value of an integrated supply chain approach to strengthen incident response capabilities and enhance operational resilience.

Preparing for NIS2/CMMC -  the Evolving Cybersecurity Regulatory  Landscape in 2025

Fourth and Nth parties are the vendors of your vendors – many of which you may not even be aware of. With increasing numbers of supply chain breaches, understanding risks in your extended vendor ecosystem is more critical than ever. The problem is that most risk management programs cannot effectively evaluate threats at all levels of a supply chain without the right visibility.
 
Join Bob Wilkinson, CEO of Cyber Marathon Solutions and former CISO at Citigroup, as he discusses best practices for gaining deeper risk visibility into your organization's extended fourth and Nth party vendor and supply chain ecosystem.
 
In this webinar, Bob examines:
·    Techniques for discovering and mapping your 4th and Nth-party relationships
·    Strategies for building a deeper and broader vendor risk management database
·    Solutions that can accelerate fourth-party risk identification and remediation
·    Executive and board-level tips for responding to fourth-party incidents
·    Program requirements for avoiding "one-and-done" audit clauses

How to Incorporate 4th Parties Into Your TPRM Program

As trends and advancements in the automotive industry (like autonomous driving or artificial intelligence) continue to drive a flurry of regulatory activity and recalls, maintaining a strong cyber maturity framework has become not only a matter of regulatory compliance – but a critical driver of stakeholder confidence and larger competitive advantage.

Join Mitratech and ETAS for this exclusive webinar, where we will explore practical solutions designed to help automotive risk professionals elevate their cybersecurity posture. This session will highlight the innovative ETAS PROOF model, a proven methodology for enhancing cyber maturity and compliance, and demonstrate how Mitratech’s leading risk platform utilizes the ETAS PROOF model to help organizations stay ahead of ever-changing global regulations.

Key Takeaways Include:
- A Deeper Understanding the ETAS PROOF Model: Dive into ETAS's comprehensive framework for assessing and managing cybersecurity risks in the automotive sector.
- From Framework to Execution: Learn how Mitratech's Alyne platform brings the ETAS PROOF model to life, simplifying ongoing compliance management and enhancing cybersecurity practices across your organization.
- Compliance as a Competitive Advantage: Discover how a robust cyber maturity framework can build stakeholder confidence and differentiate your organization in the marketplace.
- Actionable Insights for Risk Leaders: Gain practical insights and best practices tailored to the needs of CISOs, Heads of Risk, CTOs, Security Managers, Product Security Officers, and PSIRT teams.

Practical Cyber Maturity Solutions for Automotive Risk Professionals

From real-life examples of conducting thorough business impact assessments and protection need evaluations to pinpointing potential compliance weaknesses and disruptions, our experts will guide you through the intricate process of mapping vendors to critical business functions. Ready to bridge the gap between your vendor management and Third-Party Risk Management (TPRM)?  

Join us for our webinar and walk away with insights on how to: 

- Identify and assess which mandatory contract clauses are required for vendors and nth parties to ensure compliance and mitigate risk.
- Link these processes to a robust control framework and regulatory technical standards (RTS) for comprehensive TPRM.
- Highlight and assess critical business functions and their protection needs.
- See this in action within Mitratech’s Alyne solution and learn how it can elevate your risk management and compliance strategies.

Join us to master the intricacies of business impact and vendor risk management and empower your organization with the tools and knowledge to stay resilient and compliant ahead of the DORA deadline in January 2025, with practical steps to achieve readiness within the one-month compliance window.

(German Version) Ensuring Compliance and Operational Resilience Ahead of the January 2025 DORA Deadline

Implementing DORA: Mastering the Challenges and Opportunities

DORA

From real-life examples of conducting thorough business impact assessments and protection need evaluations to pinpointing potential compliance weaknesses and disruptions, our experts will guide you through the intricate process of mapping vendors to critical business functions. Ready to bridge the gap between your vendor management and Third-Party Risk Management (TPRM)?  

Join us on for our webinar and walk away with insights on how to: 

- Identify and assess which mandatory contract clauses are required for vendors and nth parties to ensure compliance and mitigate risk.
- Link these processes to a robust control framework and regulatory technical standards (RTS) for comprehensive TPRM.
- Highlight and assess critical business functions and their protection needs.
See this in action within Mitratech’s Alyne solution and learn how it can elevate your risk management and compliance strategies.

Join us to master the intricacies of business impact and vendor risk management and empower your organization with the tools and knowledge to stay resilient and compliant ahead of the DORA deadline in January 2025, with practical steps to achieve readiness within the one-month compliance window.

Ensuring Compliance and Operational Resilience Ahead of the January 2025 DORA Deadline

Operational Risk

Risk Management

Operational Resilience

TPRM

Third-Party Risk Management

Compliance

Cyber Risk Management

Cyber Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Ensuring Compliance and Operational Resilience Ahead of the January 2025 DORA Deadline

Presented by

About this talk

More from this channel