In today's complex risk landscape, organizations must effectively assess and manage third-party risks to safeguard their operations and data. The Shared Assessments Program offers two pivotal tools to streamline this process: the Standardized Information Gathering (SIG) questionnaire and the Standardized Control Assessment (SCA) procedures. This webinar will delve into how the SCA complements the SIG, forming a comprehensive "trust but verify" approach to third-party risk management. Attendees will gain insights into: Understanding the SIG and SCA: An overview of each tool's purpose, structure, and application in evaluating vendor risk. Alignment and Integration: Strategies for integrating SCA procedures with SIG responses to validate vendor-provided information and ensure robust risk assessments. Practical Implementation: Best practices for scoping assessments, conducting evaluations, and utilizing findings to enhance your organization's third-party risk posture. Join us to learn how leveraging the synergy between the SIG and SCA can lead to more efficient and effective third-party risk management, ultimately strengthening your organization's resilience against emerging threats.

This session will explore how companies are navigating the challenges of AI adoption, evolving service models, and addressing new risks. The discussion will emphasize the importance of strong governance, talent management, and the strategic integration of AI, digital engineering, and cloud solutions to ensure ongoing competitiveness in a rapidly changing market. We will also share an update what we are seeing from our clients regarding the testing and implementation of AI models and the governance structures that our enterprise clients are deploying. Key discussions will include:
- Evolving Governance: How AI and digital transformation are reshaping governance practices across industries.
- Risk Management: Identifying and mitigating the unique risks associated with AI deployment.
- Future Workforce: Developing strategies to prepare and manage talent in a tech-driven world.

Join Shared Assessments CEO Andrew Moyad and Senior Advisor Jen Hancock for a dynamic, fireside-chat-style discussion on the top trends shaping Third Party Risk Management in 2025. Together, they’ll explore how advancements in Artificial Intelligence, evolving global regulations, complex supply chain risks, governance strategies, and continuous monitoring solutions are redefining the TPRM landscape. This engaging session will provide expert insights into the key challenges practitioners face and offer practical strategies for preparing your organization to adapt and thrive. Don’t miss this opportunity to gain actionable takeaways and listen in on a candid, forward-looking conversation designed to leave you ready to tackle what’s next in TPRM.

Join Shared Assessments and Mirato as we explore how MARS Incorporated leverages AI to drive impactful efficiencies in their risk management processes. As a global snacking, petcare, food & nutrition company, operating in over 80 countries with a diverse product range, MARS skilfully navigates the complexities of supply chains and vendor networks. By utilizing the Mirato Questionnaire Killer™ (MQK), MARS has significantly reduced assessment time while increasing accuracy. This session offers a real-world AI risk management use case—bring your own Skittles, M&M's, or Snickers!

This session will feature an overview of the 2025 Shared Assessments Product Family, focused on Regulatory Mappings: DORA, NIS2, and CSF NIST 2.0. We will review the impact of the new regulatory mappings covered by the Standardized Information Gathering (SIG) Questionnaire and discuss new updates to the TPSIR, such as clarity, weighting, and customizability. We will also preview the new SIG Content Library API.

If the recent CrowdStrike incident taught us anything it's that we need to drastically change how we assess third-party service providers in the face of emerging threats and vulnerabilities. There are too many vendors to assess, compounded by the increasing volume of threats we face each year. On a normal day, TPRM teams already have too much to do. When an incident like this occurs, they need to stop what they're doing and conduct an emergency assessment -- an ugly process that overburdens companies and their vendors, and typically takes weeks, if not months. As a result, companies may remain exposed to vulnerabilities that could eventually result in loss. But does it really have to be that way? Join third party risk experts from ProcessUnity and RiskRecon to discuss best practices and emerging technologies for: • Improving monitoring for critical vulnerabilities to determine which ones matter • Identifying, Prioritizing and Assessing affected third parties in real-time • Incorporating objective data into the decision-making processes • Streamlining workflows and scaling your operations

What is the role of Third Party Risk Management during and after a widespread incident? How can TPRM programs best prepare for potential security incidents? When and how should TPRM programs conduct “ad hoc” vendor assessments? With whom should TPRM practitioners communicate during incidents? Join this webinar to explore recommended “best practices” for TPRM professionals during incident response and management situations.

Strong program governance helps foster efficient use of resources, greater transparency, and an environment of trust. This webinar will highlight best practices in governance of Third Party Risk Management (TPRM). During this webinar, we will discuss governance goals and objectives, reporting on key indicators, and program evaluation. This member forum call will be open to nonmembers.

The Federal Reserve Board (the Board), Federal Deposit Insurance Corporation (FDIC), and Office of the Comptroller of the Currency (OCC) collectively introduced the Interagency Guidance on Third-Party Relationships: Risk Management. In June 2023, the guidance officially became effective – now, you are expected to comply! This session takes a closer look at what we've learned over the past year and provides a walkthrough of the NEW Shared Assessment Interagency Guidance Gap Analysis tool.

In today's interconnected business landscape, continuous monitoring has emerged as a critical strategy to ensure ongoing compliance, mitigate risks, and protect your organization. This webinar will provide an overview of continuous monitoring and best practices for implementation. In this webinar we will:

• • Discuss the definition of continuous monitoring and its role in third-party risk management
• • We will outline effective strategies for selecting, implementing, and maintaining a continuous monitoring program
• We will examine real-world case studies of organizations that have successfully leveraged continuous monitoring to mitigate risks.

Join us for this informative webinar and gain valuable insights into how to effectively manage third-party risk through continuous monitoring.