When companies outsource technology and security solutions, the question on everyone’s mind is: When does our liability for a cyber-attack end, and my vendor’s begin?
The answer is not really simple. In most industries, you can contract away a responsibility or task, but not the liability of an attack or the compliance obligations. If your organization was breached today, whose name is going to be in the news? Who are your customers going to call? Who is going to get fined and possibly sued as a result of the breach? The list of questions goes on. At the end of the day, your organization will suffer the negative publicity, the reputation damage, and financial loss of the attack, even if your vendor actually caused your incident. Then there is the other side of the equation – how do you know that your vendor can truly support your organization, perform the tasks you’ve contracted them for, or cover your losses if the breach is their fault?
Vendor risk management and due diligence is something every organization should perform carefully, and there are a number of unique issues when considering the inherent risks associated with technology and security providers.
The benefits of outsourcing are attractive for many reasons, but you need to ask yourself: Can you stake your organization’s well-being and financial stability on a vendor? If you answered no, then join us to discover:
- Weighing vendor risk and classifying critical / high risk vendors
- Imperative questions you need to ask your vendors
- Documentation to gather when outsourcing your technology and/or security solutions
- The big differences in cyber insurance
- The unique ongoing due diligence needs of outsourced technology and/or security solutions
- Critical contract provisions
This course offers a unique opportunity for attendees to develop critical risk management skills to apply immediately upon returning to the office. This is a fast-paced, highly interactive workshop where attendees will develop a risk profile and risk management strategy using one of their own current or future vendors of choice.
Complementary Handouts/ Bonus Material for Easy Implementation:
- Course materials,
- Sample profile matrix,
- Critical questions to ask your vendors,
- A sample checklist of minimum documentation requirements,
- Other valuable resources.
Learning Objectives:
- Record unique risks of vendors who support an organizations' technology and/or security solutions
- List the organization's unique critical vendors
- Develop a risk profile for a chosen critical vendor
- Inventory appropriate risk management strategies
- Assemble a plan for managing vendor risk
Areas Covered:
- Defining critical / high risk vendors
- Liability
- Risk identification
- Developing a risk profile
- Vendor due diligence before boarding
- Ongoing risk management
- Critical contract provisions
- Evidence of security
- Cybersecurity insurance
- Guidance / resources
Who will Benefit:
Any individual responsible for managing risk related to outsourced technology and/or security vendors. Includes, but not limited to:
- Information security,
- Information technology,
- CPAs,
- Operations,
- Accounts Payable,
- Risk management,
- Risk managers,
- Business continuity,
- Top management.
Organizations:
- Financial Institutions (banks, credit unions, etc.)
- Businesses of any size
- Non-profits
- 08.30 AM - 09.00 AM: Registration
- 9:00 – 9:30: Objectives; introductions; formally establish the agenda (participants identify their unique needs)
- 9:30 – 10:15:
- Liability
- Risk related to outsourcing technology and security solutions
- Identifying and profiling critical vendors
- Individual exercise - Critical vendor assignment
- 10:15 – 10:30: Break
- 10:30 – 11:45: Developing a risk profile
- 11:45 – 12:45: Lunch
- 12:45 – 2:15:
- Risk Management Strategies
- Developing appropriate questionnaires
- Evidence and documentation
- Initial and ongoing due diligence
- Details you should know about every critical vendor
- 2:15 – 2:30: Break
- 2:30 – 4:00:
- Strategies Cont’d
- Automating risk management efforts
- Using technology to enhance due diligence and risk management
- Auditing and documenting findings
- Contracts
- 4:00 – 4:30: Individual exercises
- 9:00 – 10:15: Group discussion & Workshop
- 10:15 – 10:30: Break
- 10:30 – 11:30:
Challenge – given a specific industry and business need, attendees identify unique risks the vendor presents, develop a risk profile, and document appropriate risk management strategies
Please note: We will cover all of the topics below, but the attendees establish the formal agenda on day 1 which will determine how much time we spend on a certain section. While all areas are important, attendees will establish our goals to ensure they leave with the knowledge they need to be successful.
Rayleen M. Pirnie, AAP
CEO and Founder, RP Payments Risk Consulting Services, LLC
Rayleen is a recognized payments risk and fraud expert who works with financial institutions and businesses across the nation to help them understand today's threats and develop appropriate risk mitigation strategies. She also speaks to consumer groups revealing real-world methods to reduce the chances of devastating frauds, and law enforcement on payment system processing and evidence collection in electronic payment channels. Rayleen's areas of expertise include regulatory compliance, payment system risk management, cybercrimes, and information security.
Rayleen conveys current trends via conference presentations, blogs, and newsletter articles plus supports groups with special projects.
Prior to her leap to private consulting, Rayleen was the Director of Payments Risk & Fraud at EPCOR for 8 years. She joined EPCOR after a 10-year career as a fraud investigator in banking.
Rayleen graduated with honors from The University of Phoenix earning a Bachelor's of Science in Criminal Justice Administration and is an Accredited ACH Professional (AAP).
Rayleen enjoys gardening with the best helper in the world, her grandson. She also enjoys reading and music. She is an advocate and supporter of The Animal Rescue Alliance. Rayleen and her husband Mike currently have four adopted fur-kids of their own.
Anonymous feedback from 2014 360REACH:
“Rayleen exemplifies knowledge and integrity. Her outstanding presentation style conveys her strengths as well as inspires confidence.”
“Her organizational skills - over the years she has been involved in multiple projects/committees at any given time and I have not seen her ever appear unprepared. She is also quite successful in asking for others to become more active/involved in a manner that makes the person asked WANT to be involved.”
Register Now
Online using Credit card
Get the Invitation
Pre-Register yourself and get the official Invite when venue and dates are announced for this seminar.
Call here to register +1-888-717-2436 or email at [email protected]
Other Registration Option
- Download the Order Form
- Fill this form with attendee details & payment details
- Fax it to +1-650-362-2367, or
- Email it to [email protected]
Payment Mode
ComplianceOnline (MetricStream, Inc),
6201 America Center Drive Suite 240
San Jose, CA 95002
USA
Register / Pay by Wire Transfer
Please contact us at +1-888-717-2436 to get details of wire transfer option.Terms & Conditions to Register for the Seminar/Conference/Event
Your registration for the seminar is subject to following terms and conditions. If you need any clarification before registering for this seminar please call us @ +1-888-717-2436 or email us @ [email protected]
Payment:
Payment is required 2 days before the date of the conference. We accept American Express, Visa and MasterCard. Make checks payable to MetricStream Inc. (our parent company).
Cancellations and substitutions:
Written cancellations through fax or email (from the person who has registered for this conference) received at least 10 calendar days prior to the start date of the event will receive a refund - less a $300 administration fee. No cancellations will be accepted - nor refunds issued - within 10 calendar days before the start date of the event.
On request by email or fax (before the seminar) a credit for the amount paid minus administration fees ($300) will be transferred to any future ComplianceOnline event and a credit note will be issued.
Substitutions may be made at any time. No-shows will be charged the full amount.
We discourage onsite registrations, however if you wish to register onsite, payment to happen through credit card immediately or check to be submitted onsite. Conference material will be given on the spot if it is available after distributing to other attendees. In case it is not available, we will send the material after the conference is over.
In the event ComplianceOnline cancels the seminar, ComplianceOnline is not responsible for any airfare, hotel, other costs or losses incurred by registrants. Some topics and speakers may be subject to change without notice.
Attendance confirmation and documents to carry to the seminar venue:
After we receive the payment from the registered attendee, an electronic event pass will be sent to the email address associated with the registrant 5 working days before the seminar date. Please bring the pass to the venue of the event.
Conference photograph / video:
By registering and attending ComplianceOnline conference, you agree to have your photographs or videos taken at the conference venue and you do not have any objections to ComplianceOnline using these photos and videos for marketing, archiving or any other conference related activities. You agree to release ComplianceOnline from any kind of claims arising out of copyright or privacy violations.
We are pleased to offer several exhibitor, sponsorship and media partnership options designed to maximize your company's exposure and networking opportunities before, during and after the event.
Benefits of becoming a Sponsor/Exhibitor/Media Partner:
- Logo on website, marketing email, branding materials & the registration booth
- Exhibit Space
- Free event pass
- Speaking opportunity
- Social media campaign
For more details and other sponsorship options at this event, please contact Event Manager: [email protected] or call: +1-650-238-9656
Media Partner:
Local Attractions of Miami, FL
South Beach
South Beach is the most popular tourist attractions in Miami Florida located at east of Miami city, proper between Biscayne Bay and the Atlantic Ocean. The beach is the ideal place for a breath of fresh air beach style. It is perfect place for sunbathing, shopping or just watching people passing by on the beach.When the sun sets on South Beach, daytime shoppers become nighttime club-hoppers at a diverse array of nightspots.
Miami Seaquarium
It is a 38-acre (15 ha) oceanarium (oldest in the US) located on the island of Virginia Key in Biscayne Bay. In addition to marine mammals, it houses fish, sharks, sea turtles, birds, reptiles, and manatees. The park offers daily presentations and hosts overnight camps, events for boy scouts, and group programs.
Zoo Miami
Zoo Miami is the largest and oldest zoological garden in Florida, and the only tropical zoo in the United States. It houses over 2,000 animals on 740 acres (299 ha), 324 acres (131 ha) of which are developed.
Miami Science Museum
The Miami Science Museum is a great learning place. The museum itself also contains the Space-Transit Planetarium, Weintraub Observatory and a wildlife center. Those interested in galaxies, stars, planets and the intricate workings of the universe can quench their thirst for knowledge here.
Coral Castle
Coral Castle is a stone structure created by the Latvian American eccentric Edward Leedskalnin (1887-1951 in Miami-Dade County at the intersection of South Dixie Highway (U.S. 1) and SW 157th Avenue. The structure comprises numerous megalithic stones (mostly limestone formed from coral), each weighing several tons. It currently serves as a privately-operated tourist attraction. Coral Castle is noted for legends surrounding its creation that claim it was built single-handedly by Leedskalnin using magnetism and/or supernatural abilities.
Oleta River State Park
The Oleta River State Park is a 1,043-acre (4.22 km2) Florida State Park on Biscayne Bay. Although it offers a variety of recreation, it is best known for its miles of off-road bicycling trails, ranging from novice trails to more than 10 miles challenging trails for experienced mountain bikers.
Jungle Island
Jungle Island (formerly Parrot Jungle) is an interactive zoological park in Watson Island, Miami. It offers visitors a fun, educational opportunity to get an up-close look at tropical birds in replicas of their natural habitats. The attraction routinely hosts field trips and offers frequent educational programs. Jungle Island is home to animal wonders like Hercules, a 900-pound liger and Peanut and Pumpkin, our twin orangutans.
Vizcaya
No visit to Miami is complete without a stop at the historical 50-acre Vizcaya estate. This European-style mansion offers a glimpse at life in turn-of-the-century South Florida. It's also an extremely popular venue for galas, weddings and other entertainment events.
