Third-party risk management
About the course
Growing dependence on outside vendors increases an organisations exposure to operational, cyber and resilience risks. As a result, a senior management and regulators are placing a greater emphasis on the importance of having a robust third-party risk framework. This course will help participants build a deeper understand of third-party risk management, with a focus on regulatory compliance, operational resilience and effective governance throughout the outsourcing lifecycle.
Participants will analyse best practices for designing scalable TPRM programmes, while ensuring compliance and implementing continuous monitoring procedures and control assessments.
Key sessions will assess risks associated with supply chain and technology, including cyber risk, and embed resilience by mapping business processes and managing critical suppliers.
What participants say:
- ‘Speakers are very knowledgeable and well prepared’
- ‘Very well organised course with extremely knowledgeable instructors. It was a pleasure to attend’
- ‘The overall course is easy to follow as tutors were actively engaged to explain the topics’
Learning objectives
- Assess the impact of regulatory expectations and discuss best practices for maintaining compliance
- Develop vendor segmentation and due diligence that prioritise oversight of critical suppliers
- Implement continuous monitoring, performance management and reporting processes
- Apply risk-based approaches to managing critical service providers
- Evaluate the implications of emerging risks including AI and ESG
- Establish governance, accountability and escalation processes across the three lines
Who should attend
Relevant departments may include but are not limited to:
- Third-party risk management
- Vendor management
- Operational risk
- Resiliency
- Business continuity
- Risk management
- Internal audit
- Procurement and supplier oversight
- Enterprise risk
- Cloud and IT governance
- Data governance
- Information security
- Cyber risk
Agenda
Tutors
Jimi Hinchliffe
NJ Risk and Regulatory Consulting
Former regulator and executive director MUFG
Jimi has over 25 years of experience in operational risk and regulation. Jimi has held several roles at the UK regulator, including as an operational risk policy SME (attending the EU Commission Working Group on Other Risks), Basel 2 technical specialist and manager of the Basel 2 implementation team, during which time Jimi attended Basel colleges in Canada, USA and Japan and worked with overseas regulators on AMA and IRB applications for their banks in the UK.
Jimi was also a UK FSA supervisor of GSIFI banks from Japan and America leading many inspection visits and examinations on a broad range of topics. Jimi then held senior positions within the GSIFI MUFG, including as head of EMEA regulatory affairs, as head of compliance policy, risk and regulatory affairs and as regional head of Middle East compliance. Between May 2017 to March 2021 Jimi was chairman of the Institute of Operational Risk (IOR) in England & Wales (having been a member since 2006 and a fellow since 2016, and for 2 years as a board member), and is an advisory board member at CeFPro. Since 2016 Jimi has been a consultant specialising in operational risk, resilience and regulatory advisory and training and in 2023 became a faculty member at Risk Learning.
Courses:
Operational resilience and business continuity
Andrew Sheen
AJ Sheen Consulting
Former regulator and director
Andrew is best known for the 8 years he spent at the UK regulator, firstly in the FSA and subsequently at the PRA. Andrew was manager of the Operational Risk Policy Team before moving to head the team responsible for providing Operational Risk subject matter expertise to supervisors. Andrew also represented the UK on the BIS Operational Risk Working Group and the EBA Operational Risk Working Group. After the PRA Andrew became Head of Operational Risk Use and Embedding at HSBC and subsequently Head of Operational Risk Regulatory Risk Management a Credit Suisse.
Andrew is also a recognised speaker and panellist at major operational-risk conferences globally, and co-author (with Dr Jimi Hinchliffe) of the book Integrated Operational Risk Management: Tools, Techniques and Meeting Regulatory Expectations
Courses:
Operational resilience and business continuity
Registration
October 6–8, 2026
Online
08:30 BST
$2,499
Enquire about:
- Agenda and registration process
- Group booking rates
- Customisation of this programme
- Season tickets options
Accreditation
This course is CPD (Continued Professional Development) accredited. One credit is awarded for every hour of learning at the event.
Enquire now
Expand your learning
The premier meeting place for the risk community. Providing clarity and guidance on the fast-changing regulatory landscape of capital, credit and market risk, liquidity and derivates use.
Risk Journals deliver academically rigorous, practitioner-focused content and resources for the rapidly evolving discipline of financial risk management.
Risk Books are authored by leading professionals and academics. With over 150 books spanning 1,000s of chapters, our publications team is committed to connecting readers with these world class experts.
Regularly updated by our team analysts, journalists and producers, our glossary demystifies the terminology and acronyms used in risk management, risk transfer, policy, technology and innovation.