Skip to main content
ISC2 Security Congress 2025 Main banner
 
Icon Legend
Additional Fee Required
Additional Fee Required
Pre-Registration Required
Pre-Registration Required
Onsite & Virtual
Onsite & Virtual
Onsite Only
Onsite Only
Earn CPE Credits
Earn CPE Credits
Livestreamed Session
Livestreamed Session
Included in Guest Pass
Included in Guest Pass
Session Recorded
Session Recorded
Student Experience
Student Experience

Call for Papers Proposals

Governance, Risk and Compliance (GRC)

Bright Ideas Roundtable: Do You Know Your Vendor’s Partners? Healthcare’s Supply Chain is More Than Third-Party Risk

Wednesday, October 29, 2025
9:10 AM - 10:10 AM CT
Location: Davidson Breakout 2
CPE Credits 1
Onsite Only Earn CPE Credits
Healthcare organizations rely on thousands of vendors, yet many overlook the indirect third-party risks—leaving them vulnerable to supply chain disruptions and hidden security gaps. The Change Healthcare cyberattack showcased how a single point of failure can cripple operations throughout the industry.

This interactive roundtable will examine how healthcare organizations can achieve better visibility into extended vendor networks, streamline risk assessments, and prioritize remediation efforts. Participants will discuss common barriers to action, the role of Business Impact Analysis (BIA) and Third-Party Risk Management (TPRM), and real-world strategies for mitigating cascading vendor risks. Attendees will depart with practical solutions to enhance vendor governance, simplify assessments, and strengthen resilience in an increasingly interconnected supply chain.

Learning Objectives:

  • Identify essential services and dependencies in extended healthcare supply chains and incorporate third-party risk management (TPRM) strategies to reduce risks.
  • Evaluate the business impacts of cyber incidents resulting from third-party vendors and consider their potential disruptions to healthcare operations and patient care.
  • Implement collaborative strategies and exchange insights with industry peers to improve vendor governance, streamline risk assessments, and tackle risks that extend beyond direct third-party relationships.