Using Subjective and Deductive Reasoning When Performing Third-Party Risk Assessments

Monday, October 14, 2024

10:20am – 11:20am PT

Location: Milano VII - VIII

CPE Credits 1

Co-Speaker(s)

Alicia M. Gristmacher, MBA, MSISM, CLP, CRVPM V, CVMPRA

Manager, Cyber Security Compliance Operations
Hyatt Hotels Corporation, United States
Steven Tipton

Director of Cyber Security Architecture
Hyatt Hotels, United States

Unleash the power of proactive third-party risk management! Discover a unique perspective on conducting third-party risk assessments. Learn to build a risk rating framework, essential for evaluating vendors and new technologies, and make informed decisions. Dive into the MITRE ATT&CK Framework, a globally accessible knowledge base of adversary tactics and techniques. Apply this to your third-party risk sssessment process, enhancing your ability to identify, understand and manage third-party risks. Train to apply subjective reasoning in determining vendor risk, a vital skill when quantitative data falls short. This comprehensive approach equips you with a robust toolkit for effective risk management. Join us and transform your third-party risk assessment strategy!

Learning Objectives:

Participants will be guided to adopt innovative approaches in crafting third-party risk assessments based on their own unique environment and risk tolerance, enabling a comprehensive exploration of the third-party’s control environment.
Understand and apply the MITRE ATT&CK framework. Participants will learn how to apply this globally accessible knowledge base of adversary tactics and techniques to their third-party risk assessment process.
Ignite your cognitive power! Participants will channel their inner detective, employing personalized and logical analysis to comprehend a third party’s risk on a much deeper level.