Agenda

►Building a modern global third party risk management framework

Kurt Neilson, Global Head of Third Party Risk Management, Schroders

• The challenge of managing third parties consistently across multiple jurisdictions.
• Leveraging technology to create a single front door for procurement, onboarding and risk oversight.
• Lessons learned from implementing a new operating model, framework and system simultaneously.
• Future opportunities including AI, continuous monitoring and data-driven risk intelligence.

►From AI-Powered to AI-Proven: Turning Security Automation into Measurable Value

Steve Brown, Vice President, Cybersecurity & Threat Intelligence, Mastercard

• Beyond the AI Hype: Moving from AI-powered promises to measurable improvements in cybersecurity outcomes and operational efficiency.
• Measuring What Matters: Assessing AI’s impact on threat detection, response times, analyst productivity and risk reduction.
• The ROI of AI in Cybersecurity: How CISOs can assess the true cost of AI adoption and determine whether the security and business benefits justify the investment.

►From Cryptographic Blind Spots to Quantum Readiness: Building a Cryptographic Inventory with Cryptoptic

Mehran Koushkebaghi, Head of Product Security, Nationwide Building Society

• Why post-quantum preparation starts with understanding where cryptography is used
• What is a Cryptographic Bill of Materials (CBOM), and how does it enable crypto-agility?
• Introducing Cryptoptic: an open-source tool for cryptographic discovery
• Integrating cryptographic discovery into software development workflow
• How does it work in practice? A sample workflow and discovery results

►MITRE F3™: A Common Language for Tackling Cyber-Enabled Fraud

James Kwaan, CIO - GS&S, Lloyds Banking Group

• Common language: Connect cyber, fraud and intelligence through observable behaviours. 
• How F3 works: Why actors act and how they achieve their objectives. 
• Fraud lifecycle: Map behaviours from reconnaissance through to monetisation. 
• Operational value: Apply F3 to incidents, intelligence, defences and information sharing.