Growing Your Vendor Risk Management Program: from Static Assessment to Dynamic Monitoring

Wednesday, September 30, 2026 | 4:30PM–5:30PM MT
Session Type: Poster Session
Delivery Format: Poster Session
Relying on periodic, paper-based assessments leaves institutions vulnerable to threats that arise between audit cycles. This presentation outlines a strategy for higher education to implement continuous vendor risk monitoring. By integrating real-time data into the risk life cycle, institutions can move beyond "compliance snapshots" to gain a proactive view of their third-party ecosystem, protecting everything from the registrar’s office to the laboratory.

Presenters

  • Mary Stewart

    Associate Director IT Risk and Compliance, Virginia Tech