Committee Meeting
All Committees – “Inside Third-Party Risk Board Reporting: Roles, Best Practices, and Lessons Learned”
Thursday, June 18, 2026 | 11:30am – 1:00pm ET
Effective board-level reporting on third-party risk doesn't happen by accident—it requires coordination across the organization, from the analysts pulling data to the executives framing the narrative. Rising incidents and emerging risks like AI and geopolitical disruption are driving boards to demand greater visibility into how risk is being identified, measured, and managed.
We'll examine what boards need to see and why, explore best practices for making metrics meaningful rather than merely voluminous, and share candid lessons learned—including common pitfalls and what not to do.
Whether you're early in your TPRM journey or refining a mature program, you'll leave with practical takeaways for strengthening the quality, clarity, and credibility of your board reporting.
We'll examine what boards need to see and why, explore best practices for making metrics meaningful rather than merely voluminous, and share candid lessons learned—including common pitfalls and what not to do.
Whether you're early in your TPRM journey or refining a mature program, you'll leave with practical takeaways for strengthening the quality, clarity, and credibility of your board reporting.
Speakers:
- Susan KeatingChief Executive Officer, Board Risk CommitteeSusan Keating has extensive experience as a chief executive and board member for financial services companies and membership organizations. She is recognized for her leadership impact and deep understanding of industry consolidation, regulation and risk management, and is a global corporate governance expert on best practices and emerging trends. She has served on bank and insurance company board audit, finance, compensation and executive committees.View full bio
Susan is currently the chair and chief executive officer for Board Risk Committee (BRC). The BRC is the foremost thought leadership peer council for board directors and risk committee members, company executives and chief risk officers.
As CEO of Women Corporate Directors (WCD) for four years, Susan advanced governance excellence and diversity around the world. WCD is the largest global organization of women serving on public company and large private company boards.
During the 2008 financial crisis, as CEO and director of NFCC, Susan played a critical role in guiding landmark legislation and policy decisions working with Congress, regulators and financial services companies specifically on Dodd-Frank and other consumer protections. She was visibly the voice of the consumer through testimony on Capitol Hill, op-eds and media interviews. Susan led taking the NFCC counseling network to scale, and directly improved the lives of millions of Americans.
Susan served in CEO, key executive and board roles with eight financial services companies during widespread industry consolidation and transformation. Her strategic leadership during bank mergers, and managing capital allocation and P&L’s is recognized. Her strategic vision and experience as a board member of Allied Irish Bank also shaped her world view as globalization increased.
Susan is sought after for her understanding of cutting-edge trends and issues facing companies, and her contacts with influencers and public and private company directors around the world. She is an Advisor for the Artemis Fund and served on CNBC’s ESG Advisory Council, spoke on diversity at the IMF and S&P global conferences and published articles about leading strategic transformation through board leadership.
Susan has interest in financial and health wellness having served on nonprofit boards with wellness and community development missions. She chaired the USA Swimming Foundation and was instrumental in guiding the team to the 2008 Olympics in Beijing. She also led a nationwide campaign to provide swimming lessons to families in underserved communities. - Aisling McCannVP, Third Party Risk Management, Axiom BankAisling McCann is Vice President of Third-Party Risk Management at Axiom Bank, N.A., where she leads enterprise third-party risk strategy in a complex financial services environment.View full bio
With 20 years of experience in banking and financial services, Aisling has extensive expertise in governance, strategic operations, regulatory compliance, and risk management. She has built and enhanced risk frameworks within highly regulated institutions, with a focus on third-party risk, fintech partnerships, fraud prevention, BSA/AML compliance, information security, and operational resilience. Her experience includes working within the OCC risk framework and guiding organizations through regulatory examinations, remediation initiatives, and program transformation efforts.
Prior to her current role, Aisling held leadership positions at BNY and Macquarie Bank in governance, financial crimes compliance quality assurance, and regulatory response. She is known for modernizing and scaling risk programs, aligning cross-functional stakeholders, and implementing practical, risk-based solutions that support innovation while maintaining strong regulatory standards. - Scott McMichaelDeputy Chief Information Security Officer, Cyber Governance and Risk, Live Oak BankScott McMichael is the Deputy Chief Information Security Officer, Cyber Governance and Risk at Live Oak Bank, a digital, cloud-based bank serving small business owners across the country. Prior to this role, he spent nearly two decades in third party risk management and cyber governance roles at Live Oak Bank, Capital One Bank and Navy Federal Credit Union. With a career spanning more than 35 years, Scott has broad and deep experience creating and leading enterprise-wide functions such as Third Party Risk Management, Regulatory Compliance, Metrics and Reporting, Strategy, Innovation, Physical Security, Governance and Relationship Management, Partnerships, and Security Education and Awareness, among many others.View full bio
While earning his Juris Doctorate from the University of Richmond, Scott studied international law at the University of Cambridge. He is certified as a Chief Information Security Officer through Carnegie Mellon University and holds many other industry certifications: Certified Data Privacy Solutions Engineer (CDPSE), Certified Information System Security Professional (CISSP), Certified Information Systems Auditor (CISA), and Certified Information Privacy Professional US (CIPP/US) and Canada (CIPP/C).