On Demand Events

Join Shared Assessments and Mirato as we explore how MARS Incorporated leverages AI to drive impactful efficiencies in their risk management processes. As a global snacking, petcare, food & nutrition company, operating in over 80 countries with a diverse product range, MARS skilfully navigates the complexities of supply chains and vendor networks. By utilizing the Mirato Questionnaire Killer™ (MQK), MARS has significantly reduced assessment time while increasing accuracy. This session offers a real-world AI risk management use case—bring your own Skittles, M&M's, or Snickers!

This session will feature an overview of the 2025 Shared Assessments Product Family, focused on Regulatory Mappings: DORA, NIS2, and CSF NIST 2.0. We will review the impact of the new regulatory mappings covered by the Standardized Information Gathering (SIG) Questionnaire and discuss new updates to the TPSIR, such as clarity, weighting, and customizability. We will also preview the new SIG Content Library API.

If the recent CrowdStrike incident taught us anything it's that we need to drastically change how we assess third-party service providers in the face of emerging threats and vulnerabilities. There are too many vendors to assess, compounded by the increasing volume of threats we face each year. On a normal day, TPRM teams already have too much to do. When an incident like this occurs, they need to stop what they're doing and conduct an emergency assessment -- an ugly process that overburdens companies and their vendors, and typically takes weeks, if not months. As a result, companies may remain exposed to vulnerabilities that could eventually result in loss. But does it really have to be that way? Join third party risk experts from ProcessUnity and RiskRecon to discuss best practices and emerging technologies for: • Improving monitoring for critical vulnerabilities to determine which ones matter • Identifying, Prioritizing and Assessing affected third parties in real-time • Incorporating objective data into the decision-making processes • Streamlining workflows and scaling your operations

What is the role of Third Party Risk Management during and after a widespread incident? How can TPRM programs best prepare for potential security incidents? When and how should TPRM programs conduct “ad hoc” vendor assessments? With whom should TPRM practitioners communicate during incidents? Join this webinar to explore recommended “best practices” for TPRM professionals during incident response and management situations.

This meeting covered Microsoft's nuclear-powered data center. We discussed NIST standards for post-quantum cryptography (PQC), emphasizing the transition from RSA to ML Chem and ML DSA for key encapsulation and digital signatures. The conversation highlighted the rapid advancements in AI and the need for agile governance to balance innovation and regulation. The discussion also touched on the lessons learned from Y2K, the importance of asset management, and the potential risks and benefits of AI, drawing parallels to past technological fears and uncertainties.

The Shared Assessments Healthcare Committee discussed the rapid evolution of technology, particularly AI, and its impact on third-party risk management. Key points included the importance of aligning risk assessments with contractual terms and business impact analysis. The committee members shared their assessment volumes, with some performing over 500 assessments annually. They also discussed the use of AI tools to streamline the assessment process and the challenges of managing large volumes of assessment questions. The meeting concluded with a review of the committee's achievements in 2024 and plans for 2025, emphasizing the need for continuous improvement and adaptation to emerging risks.

The Shared Assessments Global ESG TPRM Committee discussed the consideration of rebranding from ESG to Sustainability, with 62% of respondents supporting the change. Gary Roboff, Senior Advisor, Shared Assessments, discussed the EU's new regulation on deforestation, emphasizing its importance for global supply chains. Rhonda Cook, Senior Advisor, reviewed Noteworthy News on ESG &TPRM. A Deloitte survey revealed that 66% of private company leaders view climate change as a high or very high risk. The US Department of Commerce unveiled the SCALE tool to assess supply chain risks, though it is not publicly accessible. Members expressed interest in AI’s role in Sustainability as a topic for future discussion in the Committee. Links to suggested reading are included in the Master Deck, attached. The meeting concluded with a ShopTalk on integrating sustainability into third-party risk programs, highlighting practical steps and challenges.

Strong program governance helps foster efficient use of resources, greater transparency, and an environment of trust. This webinar will highlight best practices in governance of Third Party Risk Management (TPRM). During this webinar, we will discuss governance goals and objectives, reporting on key indicators, and program evaluation. This member forum call will be open to nonmembers.

The Federal Reserve Board (the Board), Federal Deposit Insurance Corporation (FDIC), and Office of the Comptroller of the Currency (OCC) collectively introduced the Interagency Guidance on Third-Party Relationships: Risk Management. In June 2023, the guidance officially became effective – now, you are expected to comply! This session takes a closer look at what we've learned over the past year and provides a walkthrough of the NEW Shared Assessment Interagency Guidance Gap Analysis tool.

In today's interconnected business landscape, continuous monitoring has emerged as a critical strategy to ensure ongoing compliance, mitigate risks, and protect your organization. This webinar will provide an overview of continuous monitoring and best practices for implementation. In this webinar we will:

• • Discuss the definition of continuous monitoring and its role in third-party risk management
• • We will outline effective strategies for selecting, implementing, and maintaining a continuous monitoring program
• We will examine real-world case studies of organizations that have successfully leveraged continuous monitoring to mitigate risks.

Join us for this informative webinar and gain valuable insights into how to effectively manage third-party risk through continuous monitoring.