In this episode of the ORX Operational Risk Podcast, Helen L’Abbate, Deputy Director of Research and Information, is joined by Emilie Odin and Nikki Truss‑West, ORX Research Senior Managers, to unpack how digital transformation, new customer expectations, tighter margins and modern operating models have accelerated firms’ reliance on external suppliers. Drawing on insights from the Third Party Ecosystem Risk Management practice paper and the Third Party Cyber Risk Oversight and Assessment 2025 report, the discussion translates emerging risks and community insights into practical, actionable guidance for risk teams.
Listen in as we explore what’s behind the surge in third‑party relationships, the cyber and resilience risks created by increasingly complex supply chains, and the steps firms are taking to strengthen oversight across both TPRM and cyber functions.
Topic highlights:
What third‑party ecosystem really meansWhat’s driving the rapid expansionThe risks created by the expanding ecosystemHow ORX members are evolving their TPRM frameworksA first look at ORX’s 2026 third‑party deliverablesEpisode resources
Available to ORX members
Third Party Ecosystem Risk Management paper: https://orx.org/resource/third-party-ecosystem-risk-management-2025
Third Party Ecosystem Risk Initiative: https://orx.org/project/third-party-ecosystem-risk-initiative
Insurance sector review of navigating third party risk management blog: https://orx.org/blog/insurance-sector-review-of-navigating-third-party-risk-management
Blog - Third party risk management: Summary of LeadersConnect discussions: https://orx.org/blog/third-party-risk-management-summary-discussions
Available to ORX Cyber subscribers
Third Party Cyber Risk Oversight & Assessment report: https://orx.org/resource/third-party-cyber-risk-oversight-and-assessment-2025
Blogs available to everyone
BCBS third-party risk principles: What you need to know: https://orx.org/blog/bcbs-third-party-risk-principles-what-you-need-to-know
Embedding TPRM in business strategy: Seven steps to success: https://orx.org/blog/bcbs-third-party-risk-principles-what-you-need-to-know
EBA finalises new operational risk event taxonomy: https://orx.org/blog/eba-finalises-new-operational-risk-event-taxonomy
Third Party Ecosystem Risk Initiative: Key TPRM challenges revealed: https://orx.org/blog/third-party-ecosystem-risk-key-challenges
Geopolitics, AI and third parties drive surge in op risk materiality: https://orx.org/blog/geopolitics-ai-and-third-parties-drive-surge-in-op-risk-materiality
To find out more about ORX Membership, ORX subscription services, and access other operational risk resources, just search ‘ORX’ or visit: www.orx.org.