Designing Effective Third-Party Risk Governance: Oversight, Metrics and Assurance
Description
Focus topic: Designing Effective Third-Party Risk Governance: Oversight, Metrics and Assurance
Date: 17 September 2026
Time: 12 to 1PM AEST
Online: Teams | 1.0 CPE. REGISTER ONLINE.
In person: Because of changes with logistics - the professional development event is virtual. Please register to join online.
Please provide your ISACA Membership Number AND ISACA Membership Email when you register so our volunteers can upload your CPEs for you to apply.
Abstract
Learn how to design and mature a Third-Party Risk Management (TPRM) program through practical steps: identify, risk rank, assess, risk treatment, monitor, oversight and escalations. Explore contract security clauses, risk-tiered assessments and remediation tracking. Addresses program architecture: welcome packet, process diagram, procedures manual, SOC 2 report analysis, shared responsibilities matrices, system of record, reporting and metrics. Gain a roadmap to align TPRM with GRC objectives, risk tolerance and audit assurance over a three-year maturity path.
Lineup
Gideon T. Rasmussen
Gideon T. Rasmussen is a seasoned cybersecurity executive, speaker, author, and U.S. Air Force veteran with over 20 years of experience designing and managing enterprise security programs. He has served as a Chief Information Security Officer (CISO) across diverse industries, including banking, pharmaceuticals, defense, and state government. A #1 bestselling author of Program Architecture: Fight the Good Fight and holds top industry credentials (CISSP, CRISC, CISA, CISM, CIPP), Gideon specialises in AI governance, third-party risk management, and regulatory compliance programs.
Agenda
Tickets for good, not greed Humanitix dedicates 100% of profits from booking fees to charity
