Name: Thomas Fertal
Designation: Technology Risk & Information Security Manager
Organization: Cyber Governance Consulting LLC
Topic: Third Party Technology Risk Management
Date of Webinar: 28th August, 2019
Time and Location: 12pm EST/ 9:30pm IST/ 5pm GMT
Speaker Bio: Thomas Fertal has more than 17 years of experience working in technology, with 14+ years concentrating on governance-risk-compliance (GRC) and information security. He has designed, implemented, and operated enterprise-wide programs covering regulatory compliance as well as management of technology risks for applications, infrastructure, processes, and third-parties. These efforts helped earn him formal recognition awards at Morgan Stanley (Technology Leadership & Excellence for Risk Control Category) and more recently at AIG (CIO 100 for Cloud Transformation Journey). Thomas has strived to be regarded as trusted advisor by his business stakeholders and partners via coverage of the “First Line of Defense” at three systemically important financial institutions.
Topic Abstract: Effectively managing technology risk becomes ever more challenging with increases in vulnerabilities, threats, and exploit likelihoods. A subset of technology risk associated with third parties is particularly difficult to manage due to the inability to apply standardized risk assessment and control processes. The complexity becomes compounded when vendors leverage their own third-party relationships (i.e., “Fourth” or N-Party Risk). Finally, the regulatory environment is now explicitly calling for the management of third-party technology risk, pointing out that “transferred” risks still require the same degree of mitigation as in-house technology. This webcast aims to simplify the problem and layout the basic governance and procedures to achieve the desired mitigation.
*Examples, analysis, views and opinion shared by the speakers are personal and not endorsed by EC-Council or their respective employer(s)
