The Ncast

Ncontracts

A podcast focused on the people and stories from the front lines of managing risk, compliance, and the insane number of regulations in financial institutions today.

  1. May 12

    You Can't Outsource the Risk: Reg S-P and Vendor Oversight

    The SEC's amended Regulation S-P raises the bar on how investment advisors protect customer data — and the compliance timeline isn't moving. In this episode of the Ncast, Rafael DeLeon sits down with Tracy Soehle, Associate General Counsel at the Investment Advisors Association, to work through what the rule demands in practice: building an incident response program, meeting the 30-day notification requirement, and managing service providers in a regulatory environment that still leaves a lot open to interpretation.For RIAs, this isn't just a compliance exercise. It runs directly through fiduciary duty — and Tracy walks through how firms can meet that obligation while navigating vendor relationships that don't always cooperate.In this episode:The two most significant changes in amended Reg S-P: mandatory incident response programs and the 30-day customer notification requirementWhy that 30-day clock is harder than it sounds — and what firms need in place before a breach happensWhat "reasonable assurances" from vendors actually means when the rule doesn't require it in the contractWhich service providers will renegotiate and which won't — and how to document the diligence either wayWhy you can delegate notification to a vendor but can't delegate the liabilityData mapping as the non-negotiable foundation of the entire programWhat SEC examiners are asking for and what "reasonably designed" has to mean in practice To get insights on how your peers are managing third-party risks, download our State of Third-Party Risk Management Survey: https://www.ncontracts.com/state-of-third-party-risk-management-survey-report

  2. 02/14/2024

    Unlocking the Future of Contract Management: How AI and Ncontracts Are Changing the Game

    In this episode of the Industry Insights podcast, Rafael is joined by CEO and Founder of Ncontracts Michael Berman to talk about the evolution of contract management at financial institutions. It’s a timely topic as Michael’s company celebrates its 15th anniversary and he unveils Ncontracts' newest innovation - the Ntelligent Contracts Assistant.    Contracts are single most effective control a financial institution has when working with third-party vendors. An oversight when drafting or managing contracts can lead to expensive mistakes. It’s not just about pricing. Inadequate analysis of terms and conditions, failure to monitor vendor performance, and deficiencies in handling data security during transitions can all spell trouble. Contract management includes every aspect of the TPRM lifecycle, including vendor onboarding, ongoing oversight, and termination. Meanwhile regulatory scrutiny of contracts continues to increase, with over 100 references in recent guidance impacting banks. Over the years, Michael has watched contract management best practices evolve along with features that can mitigate insider threats that lead to data breaches, like vendor employee background checks, security training, and cyber insurance.  Now AI is transforming contract management again by uncovering risks and driving efficiency. Michael’s company, Ncontracts is leading the way with Ntelligent Contracts Assistant leading the way. It’s an exciting development for financial institutions that want to maximize their understanding of contract while minimizing the staff hours to get it done.

5
out of 5
5 Ratings

About

A podcast focused on the people and stories from the front lines of managing risk, compliance, and the insane number of regulations in financial institutions today.

You Might Also Like