Managing Third-Party and Supply Chain Risk - OneTrust

‍

Overview

In this CISO Inspired Summit masterclass, Chloe Dellow, Strategic Risk Specialist at OneTrust, shares what she is hearing from customers and prospects about one of the hottest topics in security: third-party and supply chain risk.

Third-party ecosystems introduce systemic risk, and regulations such as NIS2 are bringing many more sectors into scope. Chloe explores how organisations are improving due diligence, contractual security and real-time visibility, and why mature programmes embed third-party risk into procurement, privacy and cyber processes rather than running it in a silo.

Key takeaways

  • Regulatory pressure is growing, with NIS2's revision pulling many more industries and businesses into scope.
  • Move away from point-in-time assessments towards continuous monitoring embedded in procurement, privacy and cyber processes.
  • Siloed programmes are costly and make holistic reporting difficult; third-party risk is only one part of the wider risk landscape.
  • Assess large providers such as AWS or Microsoft at the level of each service or product you use, not just as a single vendor, and be prepared to offboard vendors that are too risky.
  • You're only as compliant as your riskiest third party, so bring screening tools and AI risk, including home-built agents, into one view of risk.

Watch the full session on YouTube: Managing Third-Party & Supply Chain Risk: Chloe Dellow, OneTrust - CISO Inspired Summit

Explore more masterclasses

View all
AI: Where Ambition Meets Reality - CAIO Inspired Summit Closing Panel
Artificial Intelligence
2
November
2026
AI: Where Ambition Meets Reality - CAIO Inspired Summit Closing Panel
Leaders from NatWest Group, HSBC and Reckitt discuss where AI is delivering real value, who should own it, why humans must stay in the loop and how organisations need to redesign work around it.
Rediscovering Proposition Innovation - E.ON
Marketing
2
November
2026
Rediscovering Proposition Innovation - E.ON
Andy Sage of E.ON explains how behavioural drivers, Maslow’s hierarchy of needs and the adoption curve can help marketers rethink product design, pricing, channels and partnerships.
Designing Embedded Systems with AI inside - Thales UK
Artificial Intelligence
2
November
2026
Designing Embedded Systems with AI inside - Thales UK
Anthony Collins of Thales UK explains how to design, explain and trust AI inside mission-critical embedded systems, from defining outcomes and managing data to guard rails, human oversight and red teaming.