Andy Fiumefreddo, Sr Manager - Third Party Cyber Risk, American Family Insurance The Resilience Revolution Starts with Your Culture Track 2: Fortifying the Shoreline (Operational Risk & Resilience) Wednesday, April 9, 2025 2:10 - 3:00 PM Atlantic Ballroom 2 SESSION DESCRIPTION SPEAKERS Previous Next

Mark Ewert, Director, Vendor Management, Penn National Insurance & Mary Granville, Assistant Vice President – Account Executive, Alliant Insurance Services Navigating the Insurance Waters Track 4: Charting the Course (Regulation & Compliance) Tuesday, April 8, 2025 4:10 - 5:00 PM Atlantic Ballroom 1 SESSION DESCRIPTION Third party insurance related best practices. The conversation will include a discussion of: Types of insurance coverages and Minimum Limits Reviewing a certificate of insurance AM Best Ratings Insurance Tracking Best Practices SPEAKERS Mark Ewert Director, Vendor Management Penn National Insurance President and Secretary of Partners Mutual Insurance Company. He joined the company full-time in 1994 as Manager-Human Relations, Product Analysis, and Home Office Services. He was elected to the position of Secretary in 1999 and was elected to his current position of Executive Vice President effective January 1, 2002. Mark served as Treasurer from January 2014 to May 2015. The Secretary duties were returned to Mark in May 2015. Mark… Show More Mary Granville Assistant Vice President – Account Executive Alliant Insurance Services Joined Gallagher in 2022 | Started in Insurance in 2005 Mary brings prior client service and leadership experience, coupled with her drive and passion to help protect her clients from manageable risks. Prior to joining Gallagher, Mary was an Account Executive at Aon, Assured Partners, and Hub International. Mary started her career as an intern in 2003 and then Assistant Account Executive in Gallagher’s NYC office. Mary attended Temple University,… Show More Previous Next

Steve Cobb, CISO, SecurityScorecard Supply Chain Resilience: Enhancing Detection and Response Strategies Track 2: Fortifying the Shoreline (Operational Risk & Resilience) Tuesday, April 8, 2025 10:00 - 10:50 AM Atlantic Ballroom 2 SESSION DESCRIPTION Recent supply chain disruptions have highlighted the critical need for effective Supply Chain Detection and Response (SCDR) to achieve deep visibility and proactive risk management. Join SecurityScorecard’s CISO, Steve Cobb, as he examines the global impact of recent outages and the lessons learned. This session will explore the essential role… Show More SPEAKERS Steve Cobb CISO SecurityScorecard Steve Cobb is SecurityScorecard's Chief Information Security Officer (CISO) bringing more than 30 years of leadership consulting surrounding IT infrastructure, cybersecurity, incident response, and cyber threat intelligence. Since joining SecurityScorecard in 2023, Steve has been responsible for providing strategic direction for the IT and Information Security strategies for the organization. Steve manages the entire IT and cybersecurity budgets, leads the effort to achieve FedRAMP Ready and StateRAMP Ready statuses, regularly… Show More Previous Next

Rob Sheehan, SCRM/TPRM Project/Program Manager, 10X National Security Risk Assessment Techniques Identifying and Evaluating Third-Party Risks Track 1: Anchoring TPRM Essentials & Best Practices Wednesday, April 9, 2025 1:00 - 1:50 PM Atlantic Ballroom 1 SESSION DESCRIPTION While there's no "one size fits all" approach to a risk assessment, there are fundamental principles to consider that are applicable regardless of your industry. SPEAKERS Robert Sheehan SCRM/TPRM Project/Program Manager 10X National Security Robert Sheehan is the SCRM/TPRM Project/Program Manager at 10X National Security. He believes in bridging the gaps between security, intelligence, logistics and acquisitions, while enabling and supporting agencies to perform their mission without fail. Within his role, Robert is responsible for establishing the agency’s program of systematically managing acquisition risks, identifying vulnerabilities and threats throughout the supply chain, and navigating and developing mitigation strategies to combat those risks. Mr. Sheehan… Show More Previous Next

Jonathan Ehret, Vice President, Strategy & Risk, RiskRecon by Mastercard Navigating the High Seas of Third-Party Risk: A Swashbuckling Approach to TPRM Track 2: Fortifying the Shoreline (Operational Risk & Resilience) Wednesday, April 9, 2025 10:00 - 10:50 AM Atlantic Ballroom 2 SESSION DESCRIPTION Avast, ye CISOs! The waters of third-party risk management (TPRM) are treacherous, filled with hidden threats and unpredictable storms. Traditional tools like vendor questionnaires are but flimsy rafts in a sea of cyber threats—leaving organizations vulnerable to pirates lurking in their supply chain. To sail safely, modern risk leaders must… Show More SPEAKERS Jonathan Ehret Vice President, Strategy & Risk RiskRecon by Mastercard Jon Ehret serves as the Vice President of Business Enablement at Mastercard. With over 20 years of experience in technology and risk, Jon has a rich background in developing, advancing, and managing third-party risk programs within the financial and healthcare sectors. Prior to his role at Mastercard, he established and led the third-party risk program at BlueCross BlueShield of WNY and was also the President and Co-founder of the Third… Show More Previous Next

Michael Gall, Solutions Leader, Black Kite DEMO: Black Kite Solutions for Streamlining Vendor Assessments Track 4: Charting the Course (Regulation & Compliance) Tuesday, April 8, 2025 11:00 - 11:50 AM Tides 1 & 2 SESSION DESCRIPTION Vendor assessments can be slow, manual, and inconsistent. In this demo, we’ll show how Black Kite simplifies the process by automating data collection, standardizing risk scoring, and delivering real-time insights. You’ll see how to quickly assess vendors, prioritize risks, and align with compliance standards—without drowning in spreadsheets or chasing down… Show More SPEAKERS Michael Gall Solutions Leader Black Kite Mike Gall leads the Solutions team at Black Kite, bringing over a decade of experience as a transformational leader in technology and digital innovation. He has designed and delivered impactful solutions for major brands across retail, manufacturing, Critical Infrastructure, IoT, and financial industries. Known for his expertise in cybersecurity, strategic problem-solving, and technology integration, Mike excels in bridging technical concepts with business outcomes. His leadership at Black Kite focuses on… Show More Previous Next

Jillian Kwong, Research Scientist, Cybersecurity at MIT Sloan (CAMS) Roundtable: MIT Research "Securing the Fleet: Collaborative Cybersecurity Strategies for Large Firms and their Small and Medium Suppliers" Track 4: Charting the Course (Regulation & Compliance) Wednesday, April 9, 2025 2:10 - 3:00 PM Tides 1 & 2 SESSION DESCRIPTION Tired of seeing your supply chain vulnerable to cyberattacks? Many large companies expect their small and medium suppliers to fend for themselves against cyber threats. The reality is that increasing security requirements coupled with limited resources, knowledge gaps, and understaffed security teams cripple small and medium enterprises’ (SMEs) ability to be… Show More SPEAKERS Previous Next

Michael Siegrist, Cloud Manager | Risk Solutions (GRC, IRM, Ethics, Third Party Risk and ESG), OneTrust & Michael Duggan, Managing Partner, CastleHill Managed Risk Solutions LLC Operational Resiliency: Best Practices to Enhance Your Program & Ensure Regulatory Compliance Track 4: Charting the Course (Regulation & Compliance) Wednesday, April 9, 2025 11:00 - 11:50 AM Tides 1 & 2 SESSION DESCRIPTION Amidst growing regulatory pressure, a rapidly evolving threat landscape, and a global uptick in third-party risk and AI governance, resiliency has never been more top of mind for TPRM programs. As DORA, NIS2 and other regulations come into effect, organizations across verticals and geographies are actively prioritizing their digital operational… Show More SPEAKERS Michael Siegrist Cloud Manager | Risk Solutions OneTrust Michael is a seasoned veteran in the Governance, Risk and Compliance Industry with 20 years of experience. Michael started as a compliance counsel for companies in a diverse set of industries including Hospitality, Retail, Gaming and Healthcare. He then transitioned into GRC technology serving in senior roles at LockPath (acquired by Navex); MetricStream, RSA Archer and ServiceNow. He is currently the Cloud Manager for the Risk Solutions at OneTrust. Michael… Show More Michael Duggan Managing Partner CastleHill Managed Risk Solutions, LLC Michael Duggan is a Managing Partner at CastleHill Managed Risk Solutions. He leads CastleHill’s Third-Party Risk and GRCaaS (managed services) practices. With over 25 years of professional experience in global finance, risk and compliance, mergers and acquisitions, and general operations, he has led large-scale transformation projects that create efficient, scalable risk and compliance programs. Previous Next

Brian Shaw, VP of North America, Certa AI Third Party Risk By Exception Track 3: Surfing the Waves of Innovation & Automation Wednesday, April 9, 2025 2:10 - 3:00 PM Atlantic Ballroom 3 SESSION DESCRIPTION Managing third-party risk is becoming increasingly complex, requiring organizations to balance speed, accuracy, and compliance while mitigating security threats. The latest industry trends emphasize a proactive, exception-based approach to risk management, leveraging automation and AI to enhance efficiency. By shifting from periodic assessments to real-time risk assessment, businesses can streamline… Show More SPEAKERS Brian Shaw VP of North America Certa.ai Brian has automated risk and compliance for over 25 years, supporting hundreds of Fortune 500 and mid-market firms across all industries. Since 2011, Brian has focused on Third-Party Risk, Compliance and Performance Management, Master Data Management and Know your Customer (KYC). At Certa, Brian serves as Vice President, Head of North America. Previous Next

Rafael DeLeon, SVP, Industry Engagement & Chinyere Watson, Lead Third Party Risk Expert –Content and Education, Venminder, an Ncontracts Company Decoding Risk: ERM, IRM, GRC and Everything in Between Track 4: Charting the Course (Regulation & Compliance) Tuesday, April 8, 2025 2:10 - 3:00 PM Tides 1 & 2 SESSION DESCRIPTION Risk management is packed with acronyms like Enterprise Risk Management (ERM), Integrated Risk Management (IRM), and Governance, Risk and Compliance (GRC). What’s the difference? Does it really matter for your financial institution? This session is a deep dive into the core components of each of these risk management frameworks. It… Show More SPEAKERS Chinyere Watson Lead Third Party Risk Expert - Content and Education Venminder an NContracts Company Chinyere Watson is a seasoned third-party risk professional with extensive experience in regulatory risk management for financial institutions. As the Third-Party Risk Expert for Ncontracts, she advises on the compliance and effectiveness of products with the latest regulatory requirements. She has a proven track record of overseeing compliance and risk management for third-party services across various sectors, including affiliate relationships, IT, marketing, and insurance. With over 20 years of experience,… Show More Rafael DeLeon SVP, Industry Engagement Venminder, an Ncontracts Company Rafael E. DeLeon is a vibrant spokesperson with a wealth of knowledge on risk management, governance, and regulatory compliance for financial institutions. In addition to handling educational initiatives, thought leadership, and outreach to regulators, industry leaders, and association partners for Ncontracts, Mr. DeLeon is on the Board of Directors of MainStreet Bancshares, Inc., parent company of MainStreet Bank in Fairfax, Virginia. Before joining Ncontracts, Mr. DeLeon completed a successful career… Show More Previous Next

Aidan Thaggard, Senior Solutions Engineer, Supply Wisdom Key Trends & Insights from Supply Wisdom’s 2nd Annual Risk Management Survey Track 4: Charting the Course (Regulation & Compliance) Wednesday, April 9, 2025 1:00 - 1:50 PM Tides 1 & 2 SESSION DESCRIPTION How are companies evolving their risk management strategies in 2025? Join us for an exclusive presentation of the results from Supply Wisdom’s 2nd Annual Risk Management Survey. We’ll reveal key trends, industry benchmarks, and the biggest challenges risk professionals are facing today. Discover where your organization stands compared to peers… Show More SPEAKERS Aidan Thaggard Senior Solutions Engineer Supply Wisdom A native of Western Maryland, Aidan Thaggard graduated from Georgetown University with a double major in Marketing and Finance and a minor in English. He began his career in Risk with Fannie Mae’s Risk and Controls department, and from there transitioned to Iron Mountain’s Third-Party Risk Management team as a Risk Analyst. Over two years at Iron Mountain, Aidan facilitated the detailed profiling and assessment of thousands of third parties across a complex global… Show More Previous Next

Eric Rosendaul, Manager, Third Party Risk, VP, Citizens Roundtable: Nth Parties Track 1: Anchoring TPRM Essentials & Best Practices Wednesday, April 9, 2025 2:10 - 3:00 PM Atlantic Ballroom 1 SESSION DESCRIPTION The Endless Depths of Nth Parties: A Risky Voyage Beyond the Horizon Avast, brave souls ready to explore the uncharted depths of Nth-party risk ! In this interactive roundtable, we’ll navigate the murky waters of managing risk beyond immediate vendors, diving deep into the complexities of sub-tier relationships and hidden dependencies.… Show More SPEAKERS Eric Rosendaul Manager, Third Party Risk, VP Citizens Eric Rosendaul has spent the last nine years of his career in various capacities within third-party risk. Currently, he’s a manager at Citizens leading a highly skilled team of senior analysts. Prior to that, he was a senior analyst on the team, conducting onsite and virtual assessments on critical and high-risk third parties. Before joining Citizens, Eric spent 5 years at Alliance Data Systems (now Bread Financial). While there, he… Show More Previous Next