In this session, we will examine which organizations are most likely to face cybersecurity audit obligations, what those audits are designed to evaluate, and how privacy leaders can work cross-functionally to strengthen readiness before reporting deadlines begin. We will also explore why California’s direction of travel points beyond disclosure and toward more durable, evidence-backed operational accountability.

This session explores how forward-thinking teams are using AI to enhance compliance, automate decision-making, and improve visibility—while building the frameworks needed to manage model risk, data privacy, and regulatory exposure.

Join OneTrust and Deloitte to learn how leading enterprises are striking the right balance between innovation and control in an increasingly AI-driven landscape.

Artificial intelligence is changing more than cyberattacks. It is reshaping how organizations build trust, manage risk, and operate security programs.  

Join Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard, and Dr. Yonesy Núñez, six-time CISO and security executive at Surf AI, for a discussion on how cybersecurity leadership is evolving in an era of machine-speed threats, expanding third-party ecosystems, and agentic technologies.  

Drawing on decades of experience leading security programs at organizations including DTCC, Wells Fargo, Citi, and Jack Henry, Núñez shares lessons on building resilient security organizations, engaging boards and regulators, and preparing for a future where trust, context, and automation increasingly define competitive advantage.  

Topics include AI's impact on cybercrime, the future of third-party risk management, agentic security, board-level cyber leadership, and what separates resilient organizations from reactive ones.

Third-party incidents have become routine — 85% of security teams were hit by one last year. Yet only 13% assess every vendor, most teams say they lack the staffing and tooling to keep up (78%), and just 11% plan to hire to close the gap.

Join Drata and CDW to unpack why questionnaire-based TPRM is breaking and the pitfalls stretching teams thin.

Networking and Education on Critical Third-Party and Cybersecurity Issues, for Mutual Resilience

The conference features dozens of speakers on third-party risk management, cloud security, emerging cybersecurity threats, and AI/machine learning threat mitigation and management.

Attendees will gain an understanding of how some of the largest and most sophisticated organizations in the world are managing risk, and leave the conference better armed to defend their company, regardless of its size or the status of its risk mitigation program.

On October 22, Black Kite is hosting the TPRM Community Summit at Lowe's Tech Hub in Charlotte, NC — a one-day event bringing together senior risk leaders from JPMorganChase, Capital One, and TIAA, alongside Jack Jones, three-time CISO and creator of FAIR and FAIR-CAM. The agenda covers the role of cyber risk quantification (CRQ) in vendor decision-making, managing AI and frontier model risk in the third-party ecosystem, and a panel discussion on current TPRM program challenges and best practices. The day also includes a book signing with Jack Jones for Measuring and Managing Information Risk: A FAIR Approach, plus a networking reception. Full agenda and registration: https://blackkite.com/tprm-community-summit-2026

As a follow-up on our Agentic AI Security Summit held in April, CSA is hosting a second, FREE two-day Virtual Agentic AI Security Summit on October 28–29, 2026. This Summit goes deeper—moving from foundations to real-world deployment, systemic risk, and scalable oversight. Engage global experts to explore multi-agent coordination risks, autonomous cyber defense, governance and policy enforcement, and verifiable trust frameworks for self-improving systems.

The fourth edition of the Tenchi Conference is set to be even bigger and more impactful, featuring renowned speakers and new panels led by seasoned executives in Third-Party Cyber Risk Management (TPCRM).

Under the theme “TPCRM: The New Era of Inside-Out,” this year’s edition will explore a new perspective on third-party risk - shifting from reactive approaches to a more integrated, continuous, and inside-out strategy.

Building on last year’s success, this global leading event dedicated to Third-Party Cyber Risk will once again bring together CISOs, Board Members, Cybersecurity Professionals, GRC Experts, and DPOs from leading organizations across global industries. Expect a full day of in-depth discussions and a dynamic agenda exploring TPCRM best practices, risk mitigation strategies, and enhanced security across multiple industries.

The agenda is currently being carefully curated and will be revealed soon. Watch the highlights from last year’s edition: https://www.tenchisecurity.com/en/company/events

Invitation is personal and non-transferable – subject to confirmation.

And to end the day on a high note, you’re invited to a special Happy Hour featuring a surprise performance - the perfect opportunity to expand your network and connect with industry leaders.

​Have insights or real-world experience in TPCRM? Apply to speak at the Tenchi Conference 2026 and share your perspective with a highly qualified audience – plus the opportunity to win a trip to RSA Conference 2027*.

​We are looking for 30-minute sessions featuring relevant cases or innovative approaches.

​*See more information and submit your proposal here:
https://forms.gle/nen5uQpb1ZQpMMbR6.