Internal Audit
Description
True enterprise risk lies beyond third parties, hidden deep within complex supply chain dependencies, like subcontractors and shared cloud services, demanding a complete shift in focus for TPRM programs. This practical session will equip you with the strategies to move past static onboarding, helping you uncover critical fourth-party exposures and implement necessary continuous monitoring practices. We will provide real world insights on balancing program priorities, making the case for security ROI, and ensuring your business continuity planning is robustly challenged to withstand a failure anywhere in your extended vendor ecosystem.
About the speakers
Mary Carmichael, CPA, CISA, CISM, CRISC is a governance, risk, and cybersecurity leader with deep expertise in helping organizations manage emerging technology risk. As principal at Momentum Technology, she advises both public and private sector clients on AI governance, third-party risk, and modernizing GRC practices. Mary is a Catalyst Fellow at Toronto Metropolitan University’s Rogers Cybersecure Catalyst, where she focuses on AI supply chain and third-party risk research. She is the immediate past President of ISACA Vancouver (Canada). She has presented at major industry events such as RSAC, ISACA North America, ISACA Europe, and IIA/ISACA GRC. In 2025, she was recognized as one of Security Magazine’s Women in Security and received the ‘Lift As You Climb’ Mentorship Award from Canadian Women in Cybersecurity.
Loading form...
Related resources
Accounting
Go public with confidence: SEC reporting and SOX readiness for Pre-IPO companies
Management Services
InfoSec
Why AI governance is the foundation of secure MCP adoption
Internal Audit
Closing the business resiliency gap around internal controls
Accounting
Go public with confidence: SEC reporting and SOX readiness for Pre-IPO companies
Management Services
Why AI governance is the foundation of secure MCP adoption
Discover why industry leaders choose Optro
SCHEDULE A DEMO
