Join a community of professionals and get:
on all CeFPro events.
unlock speaker decks and audience polls.
Full library access the moment you sign up.
Digital Content

- Unlimited access to peer-contribution articles and insights
- Global research and market intelligence reports
- Discover Connect Magazine, a monthly publication
- Panel discussion and presentation recordings
Video

Francesco De Lucia Dattolo, TPRM Program Manager at Schlumberger, shares his perspective on why traditional third-party risk reporting often fails to provide value to business leaders. He explains that risk professionals should translate technical findings into meaningful business outcomes, focusing on operational, financial, and reputational impacts rather than vendor ratings alone.
During the interview, Dattolo discusses the growing need for predictive risk intelligence, executive-focused communication, and a deeper understanding of business context. He argues that organizations must evolve from measuring risk through scores and assessments to delivering insights that improve decision-making, increase resilience, and help businesses anticipate future challenges.
Francesco De Lucia is a seasoned cybersecurity and technology program leader with more than 25 years of experience driving enterprise governance, risk management, and digital supply chain resilience across global organizations. He specializes in transforming complex compliance expectations into practical, scalable controls embedded throughout procurement, third party risk, and cross functional operational processes. Known for his ability to bridge executive strategy with real world execution, Francesco builds programs that strengthen supplier resilience, elevate cyber maturity, and deliver sustainable security outcomes at scale. His work centers on aligning organizations to frameworks such as NIST CSF while ensuring that governance models remain adaptable, efficient, and globally consistent. Francesco is recognized for advancing enterprise security through disciplined leadership, clear operational design, and a pragmatic approach that turns cyber risk management into a measurable business enabler.