2027 Programme
Conference Agenda
Senior TPRM, procurement, risk and resilience experts from across Financial Services unite for invaluable peer benchmarking at this annual, industry-led conference in Central London.
08.30 Registration & Informal Networking
OPENING REMARKS
09.00 GIC Welcome & Morning Chair’s Opening Remarks
Kurt Neilson, Global Head of Third Party Risk Management, Schroders
Nth Party & Supply Chain Management
THOUGHT-LEADERSHIP PANEL | Q&A
09.10 Strengthen Nth Party Risk Management & Build Supply Chain Resilience Through Enhanced Visibility & Proactive Risk Strategies
- How can organisations gain greater visibility of 4th, 5th and nth party dependencies as supply chains become increasingly interconnected?
- Develop dynamic mapping strategies to identify hidden dependencies, vulnerabilities and concentration risks across complex supply chains
- With AI, geopolitical instability and cyber threats creating new vulnerabilities, how can firms ensure their supply chain risk assessments keep pace with emerging risks?
- How can organisations use scenario testing to identify where nth party disruption could impact critical services and strengthen resilience across the wider supply chain?
Sarah Grimes, Senior Manager – Procurement & Third Party Risk, Coventry Building Society
Arvind Kannan, Principal Regulatory & AI Risk Management Specialist, Amazon Web Services
Neil Stevenson, Head of Supplier & Contract Management, Aegon
Anne McGowan, Head of Supplier Management, Group Sourcing & Supplier Management, Lloyds Banking Group
Strategic Supplier Relationship Management
OPENING KEYNOTE
09.40 Develop Stronger Partnerships With Key Suppliers To Improve Transparency, Collaboration & Resilience Across Critical Services
- Move beyond transactional supplier management and build strategic relationships that drive greater collaboration and transparency
- What approaches can firms take to build the right relationships with critical third parties, strengthen assurance and improve resilience?
- How can firms risk manage the 4th party usage of cloud service providers within their own supply chain?
- Develop stronger supplier engagement strategies to identify emerging risks earlier and improve collaboration during periods of disruption
- How can firms ensure strategic supplier relationships remain aligned with changing business objectives, risk appetite and regulatory expectations?
Arvind Kannan, Principal Regulatory & AI Risk Management Specialist, Amazon Web Services
10.00 Bonus Session; Reserved For Exclusive Conference Partner
Regulatory Updates & Expectations
UPDATED FOR 2027
10.15 Meet Existing & Emerging UK & European Requirements While Building Flexible Third-Party Risk Frameworks That Can Adapt To Changing Regulatory Expectations
- DORA, UK CTP oversight and evolving PRA and FCA requirements: what key lessons should firms take from recent implementation and regulatory developments?
- With new UK material third-party reporting requirements coming into force in 2027, how can organisations prepare effectively and strengthen their data, governance and reporting capabilities?
- Build flexible TPRM frameworks that can navigate increasingly complex and divergent regulatory requirements across UK and European jurisdictions
- With regulators gaining greater visibility of systemic and concentrated third-party risks, what should firms prioritise now to stay ahead of future supervisory expectations?
Gemma Page, Senior Internal Audit Manager, Third Parties, Citi
10.35 Morning Refreshment Break With Informal Networking
AI Governance – Panel Discussion
Q&A | NEW FOR 2027
11.05 Govern AI Usage Across Third Parties & Strengthen Internal TPRM Structures To Manage Emerging Risks
- How can organisations establish clear TPRM structures and accountability for AI usage across internal teams and external suppliers?
- Develop effective controls around third-party AI usage to ensure data, security, privacy and regulatory risks are understood and appropriately managed
- As AI adoption accelerates across the supply chain, how can firms maintain transparency over where AI is being used and the risks it creates further down the ecosystem?
- How should TPRM teams work with technology, risk and compliance functions to ensure AI governance frameworks remain flexible enough to keep pace with rapid innovation?
Ana Arxer, Managing Director, Enterprise Resiliency Office: Client Engagement Lead, State Street
11.35 Bonus Session; Reserved For Exclusive Conference Partner
Starting AI-Powered TPRM
11.50 Harness AI-Powered Capabilities To Streamline Third-Party Risk Assessments, Processes & Stakeholders
- How can AI automate time-intensive TPRM assessments?
- What to consider before process automation – How to solve the challenges of stakeholder and data management?
- As AI-powered TPRM capabilities mature, how can organisations balance automation with human oversight to improve efficiency while maintaining robust risk management?
Daniel Tyart, Third Party Risk Officer, ING Germany
Critical Third Parties
FIRESIDE CHAT
12.25 Navigate Critical Third-Party Dependencies & Strengthen Resilience Across Financial Services
- What best practices can assist firms in identifying, monitoring and managing critical third parties across increasingly complex supplier ecosystems?
- How can organisations build stronger relationships with critical providers to improve transparency, assurance and resilience whilst managing regulatory expectations?
- With increasing reliance on a small number of technology and cloud providers, how can firms reduce overdependence and ensure continuity of critical services?
12.45 Lunch & Informal Networking For Speakers, Delegates & Partners
Facilitated Peer-To-Peer Discussions & Brainstorming:
Network & Discuss Hot Topics With Insightful Experts & Have Your Key Issues Answered With Peer Brainstorming
13.15
A. ESG
B. Exit Planning
C. Intragroup TPRM
D. Third Party Within Enterprise Risk Management
E. Geopolitical Risk
Joe Bakowski, Group Head of Procurement, Vendor Management, Starling Bank
OPENING REMARKS
13.45 Afternoon Chair’s Opening Remarks
Sarah Garrington, Head of Resilience, Royal London
Concentration Risk Strategies
PANEL | Q&A
13.55 Identify Hidden Concentrations Across Suppliers, Technologies & Locations To Reduce Overreliance & Protect The Continuity Of Critical Services
- How can organisations identify concentration risks across direct and nth party dependencies and establish the right triggers for action?
- With increasing reliance on a small number of cloud and technology providers, what strategies can firms use to balance the benefits of scale with the need for greater diversification and resilience?
- As geopolitical instability and common infrastructure dependencies create new sources of concentration, how can firms strengthen scenario testing and contingency planning to reduce potential points of failure?
Joe Bakowski, Group Head of Procurement, Vendor Management, Starling Bank
Erika Mackie, Resilience Lead, HSBC
Cyber & Cloud Security
14.25 Develop Robust Security Strategies Across Cloud & Technology Suppliers To Manage Evolving Threats & Strengthen Operational Resilience
- How can organisations embed a security-first approach across third party relationships and ensure cyber controls remain effective throughout the supplier lifecycle?
- With increasing reliance on common cloud and technology providers, how can firms manage cyber vulnerabilities, concentration risks and potential points of systemic failure?
- When cyber disruption strikes a third party, how can organisations strengthen incident response, recovery and contingency strategies to maintain critical services?
14.45 Bonus Session; Reserved For Exclusive Conference Partner
Continuous Risk Management
NEW FOR 2027
15.15 Move Beyond Periodic Assessments To Deliver Proactive, Intelligence-Led Oversight Across The Supplier Lifecycle
- How can marketing leaders successfully embed new digital processes, ensuring lasting behavioural change rather than short-term adoption?
- How can professionals overcome resistance and change fatigue to create shared ownership of digital transformation across teams?
- Equip teams with the skills, governance and confidence to embrace new technologies, ways of working and data-driven decision-making without disrupting business priorities
Joshua James, Head Resilience – Africa, Middle East, Europe & Americas, Standard Chartered Bank
15.35 Afternoon Refreshment Break With Informal Networking
Risk Assessments & Risk Frameworks
16.05 Develop Proportionate, Risk-Based Approaches That Deliver Insight Into Supplier Exposure & Adapt To Increasingly Complex Third Party Ecosystems
- How can organisations evolve risk assessments to capture a broader picture of supplier exposure, including financial, cyber, geopolitical and operational risks?
- Develop proportionate and risk-based frameworks that can adapt to the complexity of different suppliers, criticality levels and 3rd, 4th and nth party relationships
- As regulatory expectations and third party dependencies continue to evolve, how can firms ensure their TPRM frameworks remain flexible, consistent and aligned with wider business and resilience objectives?
Robert Bouwmeester, Head of Operational Risk Management, NIBC Bank
The Future of TPRM & Proving Value Internally
PANEL | Q&A
16.25 Move Beyond Compliance & Risk Mitigation To Demonstrate How Effective TPRM Can Support Resilience, Business Objectives & Better Strategic Decision-Making
- How can TPRM teams strengthen their position within the wider business and demonstrate the value they bring beyond regulatory compliance and risk reduction?
- As third party ecosystems become increasingly complex, what should the future TPRM operating model look like and how can organisations build the capabilities needed to manage emerging risks?
- Develop stronger metrics and reporting to demonstrate the impact of TPRM investment, support informed decision-making and secure greater engagement from senior leadership?
Gary Lock, Head of Third Party Controls (TPRM), CFO Controls, Fidelity International
Sarah Bateman, Third Party Risk & Resilience Manager, Admiral Group PLC
Rose Calzado, Head Cyber Security Supplier Management, Fidelity International
Michael Georgiou, Group Head of Operational Resilience & Third Party Risk Management, Bupa Group
16.55 Afternoon Chair’s Closing Remarks & Official Close Of Conference