The 2026 TPRM Playbook: Mastering SEC Disclosure & Third-Party Transparency

As the SEC’s Division of Examinations places vendor oversight at the center of its 2026 priorities, public companies and financial institutions are entering a period where a vendor’s cybersecurity failure becomes a direct legal, financial, and reputational exposure.

This webinar offers a practical roadmap for navigating the evolving SEC disclosure landscape and understanding how new rules reshape incident response, governance, and third‑party accountability. We move beyond the abstract notion of the four‑day reporting window and focus on the operational realities of Item 1.05 of Form 8‑K, including automation, cross‑functional coordination, and the heightened expectations regulators now apply to vendor‑originated incidents.

The session also examines the expanded obligations under the Amended Regulation S‑P, which becomes enforceable for smaller firms in June 2026 and introduces mandatory customer notification timelines and renewed pressure to re‑paper vendor contracts. Attendees will gain clarity on evaluating emerging “Agentic AI” risks within the supply chain, closing visibility gaps across N‑th parties, and producing audit‑ready documentation that demonstrates active Board oversight as required under Item 106 of Regulation S‑K. Finally, we address how organizations can use TPRM to meet overlapping state and global requirements, including California’s SB 253 and the EU’s CSRD.