While individual vendor risk is routinely assessed, concentration risk – the cumulative exposure created by reliance on shared providers, platforms, or geographies – often goes unmeasured and unmanaged. However, disruptions , from supply chain breakdowns to technology failures, reveal how quickly localized issues can cascade across the enterprise.

This session will show how to identify and quantify concentration risk across your third-party ecosystem, elevate it from a TPRM concern to an enterprise-level risk, and apply lessons from real-world failures to strengthen resilience. You will learn how to uncover hidden dependencies, integrate concentration risk into ERM reporting, and develop diversification and contingency strategies before disruption exposes the gaps.