Fourth-Party Risk: The Exposure You Can’t Always See
2:00 PM - 2:50 PM
Dependencies on sub-contractors and upstream providers can introduce risk that is not obvious from primary contracts. This session considers how organizations are identifying and managing fourth-party and Nth-party risk in a practical way. It focuses on methods that provide enough visibility to inform decisions without requiring exhaustive mapping of every connection.
Typical sources of downstream risk behind primary third-party services
Tactics for gaining useful visibility through contracts, questionnaires, and data sources
Ways to determine where deeper fourth-party analysis is warranted
Speaker(s)
Tracey Forney
previously Sr Information Security Manager
Federal Reserve
With more than 25 years of leadership in technology, cybersecurity, and third-party risk, Tracey Forney is a trusted advisor to executives navigating complex risk decisions in highly regulated environments. A Certified Third Party Risk Professional (CTPRP), Tracey is known for translating cyber, technology, and vendor risk into clear, actionable insight that supports strategic decision-making and strengthens regulatory confidence.