PREMIUM CONTENT
This is premium content, available to Connect Plus users only
Unlock this content and more with Connect Plus membership.
Join a community of professionals and get:
Join a community of professionals and get:
15% discount
on all CeFPro events.
on all CeFPro events.
Post-event access:
unlock speaker decks and audience polls.
unlock speaker decks and audience polls.
Instant insights:
Full library access the moment you sign up.
Full library access the moment you sign up.
Digital Content

Log in to continue
Thank you for visiting CeFPro Connect and reading our latest industry updates. To continue reading more, please create your free account. You'll enjoy the following great benefits:
WHAT'S INCLUDED —
- Unlimited access to peer-contribution articles and insights
- Global research and market intelligence reports
- Discover Connect Magazine, a monthly publication
- Panel discussion and presentation recordings
Log in to continue or register for free
WHAT'S INCLUDED:
Access to peer-contribution articles and insights
Access to the latest global research and market intelligence reports
Access to the latest Connect Magazine, a monthly publication
Insight articles, panel discussions, webinars, podcasts and peer-led interviews
CONNECT+ MEMBERSHIP
Become a Connect+ member for unlimited access to our knowledge hub, receive 15% discount on all events, and access to audience insights and speaker presentations for up to three CeFPro events.
Log in or register for free in order to save this content
WHAT'S INCLUDED:
Unlimited access to peer-contribution articles and insights
Global research and market intelligence reports
Discover Connect Magazine, a monthly publication
Panel discussion and presentation recordings
Event Q&A
Modernising legacy contracts for a new era of third-party risk
Ahead of Vendor & Third Party Risk Europe, Michal Drohomirecki explores why legacy contracts are increasingly failing to meet modern regulatory expectations. He discusses key gaps around cyber, resilience, subcontractor oversight, and exit rights, while outlining how organisations can overcome vendor pushback and standardise remediation across large contract portfolios.
May 14, 2026
Michal Drohomirecki, Head of Information and Cybesecurity Contract Support -Third Party Security Risk, Standard Chartered Bank
Tags:
Vendor and Third Party Risk
Resilience
Operational and Non Financial Risk
The views and opinions expressed in this content are those of the thought leader as an individual and are not attributed to CeFPro or any other organization
- Explores why legacy contracts are struggling to meet evolving regulatory expectations
- Examines key gaps related to DORA, NIS2, cyber resilience, and third-party oversight
- Discusses common forms of vendor pushback during contract remediation
- Highlights the growing importance of subcontractor and nth-party transparency
- Outlines how firms are using compensating controls to manage contractual gaps
- Explains how organisations prioritise remediation across large vendor portfolios
- Emphasises the role of governance, risk-based approaches, and operational resilience in modern contract management.
Log in to continue or register for free
WHAT'S INCLUDED:
Unlimited access to peer-contribution articles and insights
Global research and market intelligence reports
Discover Connect Magazine, a monthly publication
Panel discussion and presentation recordings
Sign in to view comments
Related insights —