CeFPro Connect

Event Q&A
Modernising legacy contracts for a new era of third-party risk
Ahead of Vendor & Third Party Risk Europe, Michal Drohomirecki explores why legacy contracts are increasingly failing to meet modern regulatory expectations. He discusses key gaps around cyber, resilience, subcontractor oversight, and exit rights, while outlining how organisations can overcome vendor pushback and standardise remediation across large contract portfolios.
May 14, 2026
Michal Drohomirecki
Michal Drohomirecki, Head of Information and Cybesecurity Contract Support -Third Party Security Risk, Standard Chartered Bank
Tags: Vendor and Third Party Risk Resilience Operational and Non Financial Risk
Modernising legacy contracts for a new era of third-party risk
The views and opinions expressed in this content are those of the thought leader as an individual and are not attributed to CeFPro or any other organization
  • Explores why legacy contracts are struggling to meet evolving regulatory expectations
  • Examines key gaps related to DORA, NIS2, cyber resilience, and third-party oversight
  • Discusses common forms of vendor pushback during contract remediation
  • Highlights the growing importance of subcontractor and nth-party transparency
  • Outlines how firms are using compensating controls to manage contractual gaps
  • Explains how organisations prioritise remediation across large vendor portfolios
  • Emphasises the role of governance, risk-based approaches, and operational resilience in modern contract management.



Log in to continue or register for free
WHAT'S INCLUDED:
Unlimited access to peer-contribution articles and insights
Global research and market intelligence reports
Discover Connect Magazine, a monthly publication
Panel discussion and presentation recordings
Sign in to view comments
ad
Related insights