The International Risk Podcast

Episode 389: Third-Party Risk - What Companies Get Wrong with Tom Garrubba

Dominic Bowen Season 6 Episode 389

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 33:15

Third-Party Risk: What Companies Get Wrong | The International Risk Podcast with Tom Garrubba

As organisations increasingly rely on outsourcing, cloud providers, and complex global supply chains, third-party risk has become one of the biggest challenges facing business leaders. But where do organisations most often go wrong—and how can they build more resilient supplier relationships?

In this episode, we explore how organisations can strengthen third-party risk assurance through better supplier due diligence, governance, and ongoing oversight.

We break down:
- Why third-party risk has evolved far beyond procurement and contract management
- How to assess suppliers before outsourcing critical technology and business services
- Managing concentration risk and overreliance on strategic suppliers
- The importance of supplier due diligence, on-site assessments, and continuous assurance
- Building realistic risk-adjusted business cases that balance cost savings with resilience
- Deciding what should—and should not—be outsourced
- Practical lessons from DORA, NIS2, and modern third-party risk management
- The international risks that concern Tom Garrubba most

About the guest
Tom Garrubba is Co-Founder and Chief Commercial & Partnership Officer at FusionAIrre, an AI-powered assurance software company helping organisations modernise third-party risk management. With nearly 20 years of experience advising Fortune 100 organisations across financial services, healthcare, and technology, Tom has designed and led large-scale third-party risk, cybersecurity, and supplier assurance programmes. He is also a global speaker, published author, university lecturer, and trainer for the internationally recognised Certified Third Party Risk Professional (CTPRP) and Certified Third Party Risk Assessor (CTPRA) certification programmes.

About the host
Dominic Bowen is Head of Strategic Advisory and Partner at one of Europe's leading risk management consulting firms. He advises CEOs, boards, and senior executives on crisis management, geopolitical risk, operational resilience, and strategy, drawing on decades of experience across government, humanitarian operations, and corporate leadership.

🔔 Subscribe for new episodes every week
💬 Tell us what you thought in the comments below
📩 Share this episode with colleagues working in risk, cybersecurity, governance, and resilience

See more at www.theinternationalriskpodcast.com 

Tell us what you liked!