Day One | November 10
Here is the latest edition of the agenda. As we approach the event, we will be adding speakers and sessions to enhance your experience. To stay informed, please register your interest
8:00
Breakfast and Networking
9:00
Conference Kick-Off
9:15
Resilience in an Interconnected World – KEYNOTE
Interconnectedness is transforming the global risk landscape. As organisations become increasingly reliant on complex ecosystems of suppliers, technology, data, and critical services, resilience must evolve beyond organisational boundaries. This keynote explores how leaders can rethink resilience in a world where disruption is shared, dependencies are growing, and risk is increasingly systemic.
 | Terri Duhon,Board Member,Wise and Rathbones |
9:50
Speaker Transition
9:55
Regulation Is Raising the Bar — What Does That Mean for Third-Party Risk – PANEL
As regulatory scrutiny intensifies across third-party ecosystems, organisations face growing pressure to demonstrate not only compliance, but genuine resilience, accountability and control
Key topics
- Where regulation is driving meaningful change versus creating additional complexity
- Why many organisations continue to struggle between compliance and execution
- Managing overlapping expectations across DORA, NIS2, AI regulation, operational resilience and outsourcing frameworks
- What regulators are increasingly expecting to see beyond policies and documentation
- Turning regulatory pressure into stronger risk management and resilience outcomes
| Chris Knox,Director, Global FS Regulatory & Strategy Policy,Microsoft |
| Orlando Fernandez Ruiz,Senior Policy Specialist,Bank of England |
10:40
Coffee Break / Table Refresh / Transition to Breakout Sessions
Operational Risk & Resilience
Tower Suite 3
Innovation & Automation
Tower Suite 1
Regulation & Standards
Tower Suite 2
Chair :
Chair :
Chair :
Chair :
11:10
From Spreadsheet to System: Building a Supplier Risk Programme That Actually Works in Operations – Presentation
This session explores how Travelodge built a practical, operationalised supplier risk framework from the ground up, embedding ethical and environmental risk assessment into daily sourcing decisions without adding bureaucracy or slowing down commercial activity.
Key topics
- Moving from manual tracking to structured risk segmentation across a complex supplier base
- Integrating third-party risk data into procurement workflows and supplier reviews
- Managing real escalations: what happens when high-risk suppliers refuse to engage
- Aligning sustainability, procurement, and operational resilience into a single framework.
- Navigating fragmented global standards: managing suppliers across different countries, regulatory regimes, and accreditation frameworks where no single platform covers everything
- What we got wrong, what we fixed, and what we would do differently
| Martin Mirimo,Head of Supplier Management,Travelodge |
11:10
Scaling TPRM with AI Through Balancing Automation and Oversight – Panel Discussion
Using AI to scale TPRM activities across onboarding, monitoring, and assessment without compromising control or visibility
Key topics
- Automating due diligence, monitoring, and risk assessment processes at scale
- Integrating internal and external data sources for continuous risk insight
- Improving efficiency and coverage across large, complex third-party ecosystems
- Managing trade-offs between speed, scale, and control
- Identifying where AI delivers value vs where human intervention remains critical
| Stuart Barnett,CyberSec Consultant/Deputy Director GRC,BlueVoyant |
| Joseph Harrison,Head of Procurement Operations and Third Party Risk,The AA |
| Meletis Rentoumis,Head of Contracts Management & Projects Coordination,Eurobank |
11:10
Regulatory Convergence: DORA, NIS2, EU AI, GDPR and Cross-Industry Implications – Presentation
Understanding how overlapping regulatory frameworks are shaping third-party risk expectations across industries
Key topics
- Interpreting overlapping regulatory intent across frameworks
- Identifying where requirements converge vs conflict
- Understanding systemic risk expectations across supply chains
- Anticipating regulatory expansion beyond financial services
| Dr Isabela Parisio,Postdoctoral Research Associate,Tech and Policy, King’s College London |
11:10
Regulatory Convergence: DORA, NIS2, EU AI, GDPR and Cross-Industry Implications – Presentation
Understanding how overlapping regulatory frameworks are shaping third-party risk expectations across industries
Key topics
- Interpreting overlapping regulatory intent across frameworks
- Identifying where requirements converge vs conflict
- Understanding systemic risk expectations across supply chains
- Anticipating regulatory expansion beyond financial services
| Dr Isabela Parisio,Postdoctoral Research Associate,Tech and Policy, King’s College London |
11:10
From Spreadsheet to System: Building a Supplier Risk Programme That Actually Works in Operations – Presentation
This session explores how Travelodge built a practical, operationalised supplier risk framework from the ground up, embedding ethical and environmental risk assessment into daily sourcing decisions without adding bureaucracy or slowing down commercial activity.
Key topics
- Moving from manual tracking to structured risk segmentation across a complex supplier base
- Integrating third-party risk data into procurement workflows and supplier reviews
- Managing real escalations: what happens when high-risk suppliers refuse to engage
- Aligning sustainability, procurement, and operational resilience into a single framework.
- Navigating fragmented global standards: managing suppliers across different countries, regulatory regimes, and accreditation frameworks where no single platform covers everything
- What we got wrong, what we fixed, and what we would do differently
| Martin Mirimo,Head of Supplier Management,Travelodge |
11:10
Scaling TPRM with AI Through Balancing Automation and Oversight – Panel Discussion
Using AI to scale TPRM activities across onboarding, monitoring, and assessment without compromising control or visibility
Key topics
- Automating due diligence, monitoring, and risk assessment processes at scale
- Integrating internal and external data sources for continuous risk insight
- Improving efficiency and coverage across large, complex third-party ecosystems
- Managing trade-offs between speed, scale, and control
- Identifying where AI delivers value vs where human intervention remains critical
| Stuart Barnett,CyberSec Consultant/Deputy Director GRC,BlueVoyant |
| Joseph Harrison,Head of Procurement Operations and Third Party Risk,The AA |
| Meletis Rentoumis,Head of Contracts Management & Projects Coordination,Eurobank |
11:10
Regulatory Convergence: DORA, NIS2, EU AI, GDPR and Cross-Industry Implications – Presentation
Understanding how overlapping regulatory frameworks are shaping third-party risk expectations across industries
Key topics
- Interpreting overlapping regulatory intent across frameworks
- Identifying where requirements converge vs conflict
- Understanding systemic risk expectations across supply chains
- Anticipating regulatory expansion beyond financial services
| Dr Isabela Parisio,Postdoctoral Research Associate,Tech and Policy, King’s College London |
5:25-6:30
Open Networking Cocktail Reception