Managing Third-Party Risk
Course
Paola Rocco of Ordine degli Ingegneri della Provincia di Roma presents strategies for transforming reactive vendor management into continuous monitoring, covering GDPR, DORA and NIS2 compliance frameworks.
Organizations face a critical vulnerability: third-party suppliers whose security breaches can cripple operations overnight. Traditional annual risk assessments fail when vendors introduce new functionalities or suffer data breaches between evaluation cycles, leaving companies exposed to supply chain attacks.
This session demonstrates how to transform reactive vendor management into proactive, continuous monitoring that ensures operational resilience and regulatory compliance with GDPR, DORA and NIS2. You will learn practical strategies for implementing comprehensive third-party risk management - from vendor identification and due diligence to ongoing monitoring and incident response.
Here is the course outline:
Managing Third-Party Risk: A Strategic Framework for Operational Resilience |
Completion
The following certificates are awarded when the course is completed:
![]() |
CPE Credit Certificate |