Day One | 28 September | London
8:00 Breakfast and registration
8:50 Chair’s opening remarks
COVID-19 – PANEL DISCUSSION
9:00 Reviewing changes in uses of outsourcing and long term implications of COVID-19
- Increased reliance on outsourcing with rapid change in working environment
- Risk considerations with flexible, remote and hybrid models
- Embedding new solutions into processes
- Long term contracts for short term conditions
- Impact on employment rights with remote working
- Global supply shortages across industries as a result of COVID-19
- Reviewing COVID-19 practices and changes to controls
- Transforming services and business processes to remote working
- Shift in InfoSec risks with remote infrastructure
Chris Sparks, Chief Risk Officer, Atom Bank
Tendai Bwanya, Director, Quality Assurance, Risk & Controls, Franklin Templeton
Gary Lock, Head of Supplier Risk & Relationship Management, Fidelity International
GEOPOLITICAL RISK
9:50 Understanding new risks as the geopolitical environment evolves and impact to supply chain risks
- Data sharing rules outside of Europe
- Volatility with nation state threats
- Protecting intellectual property in supply chain
- Global adequacy routes and alignment across jurisdictions
- Assessing geographic risk with teams working from home
- Reviewing changes to risk landscape after Brexit and socio-economic impact
- Impact of COVID-19 on business objections
10:30 Morning refreshment break and networking
ESG – PANEL DISCUSSION
11:00 Developing environmental policies and targets and executing throughout supply chain
- Implementing emission reduction targets outside of operational control
- Remaining competitive and resilient
- Reviewing supply chain and impact to long term goals
- Translating environmental targets into business strategy
- Considering environmental policies during onboarding
- Selection criteria during procurement
- Balancing increased costs with carbon zero institutions
- Pressures from central governments on climate and zero emissions targets
- Reputational risks associated with ESG positions throughout supply chain
Martina Macpherson, Head of ESG Strategy and Member of the General Management Committee, ODDO BHF
Laura Simmonds, Third Party ESG Thought Leader, BT
Jonathan Hughes, Head of Procurement and Estate, Shawbrook Bank Limited
RESILIENCE
11:50 Reviewing supply chain resilience and developing controls to maintain resilience of processes
- Managing third party services and linking to resilience
- Move from supplier resilience to process resilience
- Mapping BCM and disaster recovery plans to the whole process
- Management information reporting throughout the organization
- Engaging boards and understanding risks
- Managing contracts through to termination
Ros Aryee, Regional Third Party Risk Governance Manager, Standard Chartered Bank
12:30 Lunch break and networking
FINANCIAL STABILITY
1:30 Monitoring financial stability of suppliers and impact of service disruptions in event of failure
- Managing insolvency risks of key suppliers
- Risks across supplier structure
- Impact to suppliers once government stimulus is retracted
- Reviewing maturity levels of suppliers
- Risk rating based on results and industry performance
Orlando Fernández Ruiz, Senior Technical Specialist, Governance, Remuneration and Controls Team, Prudential Policy, Bank of England
4TH PARTY & OUTSOURCING RISK
2:10 Implementing oversight processes to track and monitor fourth parties and outsourcing for an end-to-end view of risks
- Exercising level of rigor and oversight to subcontractors
- Legal limitations of oversight of fourth parties
- Practical solutions and viability of oversight in a business environment
- Legal enforcement with no direct contract
- Effectively mapping fourth parties
- Determining appropriate levels of concentration
- Understanding the end-to-end chain
CONCENTRATION RISK
2:50 Monitoring internal and external concentration of supply chain to minimize over reliance on individual third parties
- Ensuring effective controls to manage risk
- Monitoring geographical concentration
- Types of concentration to monitor across supply chain
- Concentration of fourth parties to mitigate indirect concentration
- Treatment of non-regulated institutions in the supply chain
- Mapping services and processes to understand outsourcing concentration
Sean Miles, Head of Risk & Compliance, Motor Insurers’ Bureau
3:30 Afternoon refreshment break and networking
CLOUD
4:00 Reviewing exposure and risk of cloud reliance and maintaining visibility for security and control of data
- Treating third parties leveraging cloud vendors
- Global reach of cloud management
- Preventing global spread of data
- Updating contractual agreements to include cloud
- Developing reporting and surveillance techniques
- Technical expertise to understand and monitor data risks
- Working with larger cloud companies and conducting due diligence
- Maintaining transparency and obtaining assessment information
DIGITALIZATION
4:40 Managing increased reliance on technology vendors to advance business practices
- Understanding technical requirements of the relationship
- Maintaining due diligence and liability with fast moving innovation
- Long term commitment to vendors
- Leveraging infrastructure and understanding long term costs
- Sustainability of service with fast moving technology
- Outsourcing innovation to allow business to focus on core operations
- Developing a digital culture and processes
Rajiv Arora, Head of Process Optimisation, Mizuho
5:20 Chair’s closing remarks
5:30 End of day one
Day Two | 28 September | London
8:00 Breakfast and registration
8:50 Chair’s opening remarks
CYBER SECURITY
9:00 Developing preventative and detective controls to mitigate cyber risks across vendors and third parties
– Identifying dependencies and third party readiness in cyber security
– Solar winds case study and lessons learnt
– Maturity of cyber resilience and incident response plans
– Response time to a breach: contractual review to include obligation to report
– Viewing cyber risks globally not functionally
– Protecting reputation as a result of a breach
– Checking controls across supply chain to protect information
– Aligning oversight and management across functions
Hasintha Gunawickrema, Chief Control Officer, Wealth and Personal Banking, HSBC
DATA PRIVACY – PANEL DISCUSSION
9:40 Managing global data privacy requirements and impacts on global operations and transfer of data
– Impact of Brexit to offshoring and data storage
– Impact of global legislative requirements
– Reviewing contracts to ensure compliance
– Protecting information with continually changing requirements
— Identifying contracts impacted by change
Jensen Penalosa, Assistant Legal Attaché, FBI
10:30 Morning refreshment break and networking
Financial Services
REGULATION
11:00 PRA supervisory statement: Understanding what it means for treatment of vendors and third parties
- Tradeoff between risk, efficiency and necessity
- Applying proportionality to regulations
- Gap analysis against previous work from the EBA
- Inclusion of notification to regulators of all critical outsources
- Expansion to any material third party services or products
- Impact to European banks post-Brexit
Cross Industries
COVID-19
11:00 Reviewing impacts of COVID-19 on global supply chains and long term lessons learnt
- Supply chain shortages caused by the pandemic across industries
- Planning ahead for post pandemic demands and supply chain impacts
- Capacity at manufacturers to meet demand amidst continued uncertainty
- Digitized or A.I model to approach uncertainty
- Setting up standard risk management processes with cross functional stakeholders
- Politicizing supply chains – where are the next vaccine supply chain examples?
Brendon Hill, Global Head of Aerospace, BSI
RESILIENCE – PANEL DISCUSSION
11:40 Monitoring supplier resilience capability and compliance with regulatory expectations
- Understanding business and process flows
- Mapping where vendors interact with process
- Progress towards implementation and compliance
- Determining key processes and functions
- Mapping material applications for processes
- Monitoring processes and conducting ongoing risk assessments
Ben Joyce, Head of Sourcing, ICBM Bank
Jean-Francois Valette, Global Vendor Management Risk & Compliance Leader, eBay
Alex Dorlandt, Head of Supply Chain Risk, Lloyds Banking Group
Hasintha Gunawickrema, Chief Control Officer, Wealth and Personal Banking, HSBC
SUPPLY DEMAND – PANEL DISCUSSION
11:40 Developing processes to manage uncertainty in global supply chain demand and availability
- Demand fluctuation across industries
- Forecasting based on market development
- Production planning and stable capacity planning
- Leveraging AI technology to track supply chain availability
- Operational planning with advanced technologies
- Reliance on global supply chain and protecting core supply chain
- Suez canal impact to supply chains globally
Alastair Parr, Senior Vice President, Global Products & Delivery, Prevalent
12:30 Lunch break and networking
4TH PARTY RISK
1:30 Regulatory expectations for managing 4th parties and beyond and oversight of outsourced companies
- Developing globally accepted minimum standards
- Managing relationships with no contractual arrangements
- Expectations on subcontractors for audit and governance
- Centralized facilities to track to end party
- Developing standardized industry approaches
- How far to go to understand material supply chain
TECHNOLOGY & AUTOMATION
1:30 The use of technology in TPRM: Leveraging technology to enhance efficiency
- AI and machine learning capabilities
- Building out data capabilities
- Leveraging for decision making and predictive analytics
- Using technology capabilities to monitor SLAs
- Leveraging technology to review contract performance and exposures
- Digitally transforming business with new technology
- Leveraging technology services from rapidly developing technology companies
Stéphanie Gautier, Chief Product Officer, Silex
INTERNAL OUTSOURCING
2:10 Oversight of internal outsourcing and managing risk when outsourcing to internal suppliers
- Due diligence on internal shared service centers
- Heterogeneity of regulation around internal outsourcing
- Divergence in supervisory and policy statements
- Assessment criteria for internal suppliers
- Same level of application internally and externally
- Using external standards as minimum benchmark
- Uses of shared service centers
BREXIT
2:10 Reviewing the impact of Brexit on global supply chains and potential disruptions
- Adapting business in a post Brexit era
- Developing clear principles
- Understanding impacts on markets
- Impacts to logistics, lead time and transportation costs
- Changes to how people and industries travel
2:50 Afternoon refreshment break and networking
INVENTORY
3:20 Developing an accurate and complete inventory of vendors and third parties for a holistic view of risk
- Data quality of all contracts
- Developing an accurate and complete inventory
- Completeness of data for all contracts
- Including third parties and outsourcing
- Reviewing contractual arrangement with third parties and beyond
Julie-Hoesli Stewart, Executive Director, UBS
ETHICAL SUPPLY CHAINS – PANEL DISCUSSION
3:20 Engaging suppliers to engage with environmental and social requirements to develop ethical supply chains
- Is environment the new health and safety?
- Tracking supply chains for compliance with ethics regulations
- Climate and sustainability risk
- Developing environmental and carbon net zero targets
- Reputation risk of failure to meet targets
- Reviewing corporate social responsibility of supply chains
Eirini Etoimou, Group Procurement Manager, Odeon & UCI Cinemas
Laura Simmonds, Third Party ESG Thought Leader, BT
Daniel Cameron, Chief Procurement Officer, Quilter
CONTINUOUS MONITORING – PANEL DISCUSSION
4:10 Developing continuous monitoring for oversight processes across contract lifecycle
- Moving from point in time to continuous monitoring
- Collecting quality data for continued oversight
- Determining level of oversight requirements for vendors providing multiple services
- Legal entity, service or contract level
- Developing efficiency and effectiveness of programs
- Due diligence before engaging a third party
- Level of due diligence on an ongoing basis
Julie-Hoesli Stewart, Executive Director, UBS
Ben Joyce, Head of Sourcing, ICBM Bank
Des Campbell, Programme Lead, Vodafone
Samikendra Ghosh, Global Lead – Third Party Risk, HSBC
TRANSPARENCY
4:10 Ensuring transparency within supply chain and developing controls to identify risk
- Compliance with ethics in the supply chain
- Controls to identify risks and protect business and customers
- Understanding opportunity and challenge of risks
- Tracking compliance with regulation and ESG goals
- Documenting supply chain sources
- Protecting reputation by understanding supply chain
Eirini Etoimou, Group Procurement Manager, Odeon & UCI Cinemas
ASSURANCE
4:50 Standardizing assurance over third parties to track and monitor performance and SLA compliance
- Defining responsibilities of each party
- Ensuring appropriate controls are embedded in contract
- Mechanisms to correct under performance
- Tracking contract SLA compliance
- Developing a minimum standard
- Building efficiency and effectiveness in teams
- Effectiveness of remote assessments
BCM
4:50 Developing comprehensive business continuity and disaster recovery plans in event of supply chain disruption
- Continuity assurance in the event of a failure
- Disaster planning for a smooth exit with failing suppliers
- Reviewing vendors ability to respond to challenges and crises
- Protecting critical services
- Orderly exit from supplier relationship
5:30 Chair’s closing remarks and end of Summit