Description:
Third-party risk management (TPRM) is one of the most complex and high-stakes areas of compliance today. Vendors are not just service providers—they are extensions of your institution, carrying with them operational, regulatory, and reputational risk. The toughest part is knowing the right questions to ask, what to independently verify, and how to maintain oversight in an environment where risks are constantly evolving. The challenge is amplified by artificial intelligence: vendors are using AI to deliver services, analyze data, and even manage compliance, creating new oversight concerns.
This session will unpack how to sharpen due diligence, strengthen contracts, and build continuous monitoring into your vendor program without drowning in paperwork. Using case studies, we’ll highlight real-world failures, red flags, and best practices that can be applied immediately to fintech partners, processors, and outsourced solutions. Participants will leave with frameworks, tools, and practical insights to make third-party risk management both smarter and safer.
Who is this Designed for: Compliance officers, Vendor risk managers, oversight teams, Operations and procurement leaders, and Risk professionals managing partner/vendor relationships
Agenda:
Reframing Third-Party Risk – Why due diligence is more than checklists, and what regulators now expect
Beyond the Checklist: Functional Risk Assessment – Evaluating the true impact and risk profile of vendors
Where AI Fits in TPRM – Using AI to streamline assessments and detect emerging risks safely
AI as a Vendor – Oversight challenges when the “third party” is an algorithm or AI-powered platform
Contracts, Controls, and Ongoing Oversight – Building effective agreements and monitoring without micromanaging
Case Studies & Red Flags – Lessons learned from breakdowns and best-in-class programs
By the end of this webinar, you will know how to:
Identify and assess high-risk vendors using function- and impact-based frameworks
Design controls, contract terms, and oversight procedures that minimize exposure
Incorporate AI-driven tools responsibly into third-party risk monitoring
Recognize unique risks when outsourcing to AI-powered vendors
Respond effectively when vendor risk events arise, from operational failures to compliance breaches