Third-Party Risk: What Companies Get Wrong | The International Risk Podcast with Tom GarrubbaAs organisations increasingly rely on outsourcing, cloud providers, and complex global supply chains, third-party risk has become one of the biggest challenges facing business leaders. But where do organisations most often go wrong—and how can they build more resilient supplier relationships?In this episode, we explore how organisations can strengthen third-party risk assurance through better supplier due diligence, governance, and ongoing oversight.We break down:- Why third-party risk has evolved far beyond procurement and contract management- How to assess suppliers before outsourcing critical technology and business services- Managing concentration risk and overreliance on strategic suppliers- The importance of supplier due diligence, on-site assessments, and continuous assurance- Building realistic risk-adjusted business cases that balance cost savings with resilience- Deciding what should—and should not—be outsourced- Practical lessons from DORA, NIS2, and modern third-party risk management- The international risks that concern Tom Garrubba mostAbout the guestTom Garrubba is Co-Founder and Chief Commercial & Partnership Officer at FusionAIrre, an AI-powered assurance software company helping organisations modernise third-party risk management. With nearly 20 years of experience advising Fortune 100 organisations across financial services, healthcare, and technology, Tom has designed and led large-scale third-party risk, cybersecurity, and supplier assurance programmes. He is also a global speaker, published author, university lecturer, and trainer for the internationally recognised Certified Third Party Risk Professional (CTPRP) and Certified Third Party Risk Assessor (CTPRA) certification programmes.About the hostDominic Bowen is Head of Strategic Advisory and Partner at one of Europe's leading risk management consulting firms. He advises CEOs, boards, and senior executives on crisis management, geopolitical risk, operational resilience, and strategy, drawing on decades of experience across government, humanitarian operations, and corporate leadership.🔔 Subscribe for new episodes every week💬 Tell us what you thought in the comments below📩 Share this episode with colleagues working in risk, cybersecurity, governance, and resilienceSee more at www.theinternationalriskpodcast.com Tell us what you liked!

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related