See past your direct vendors
Practical approaches to mapping and triaging risk that extends into your fourth- through Nth-party ecosystem, not just the vendors you contract with directly.
Presented with Black Kite as lead sponsor
OK-TPRM Cyber Community Summit
A working session for Oklahoma's security and risk leaders on where fourth- and Nth-party exposure actually hides — and what AI is changing about how fast it moves.
Why this session
Your vendors' vendors are where the risk lives now.
Most third-party programs stop at the vendor they signed a contract with. The exposure that actually causes incidents sits one or two hops further out, in the Nth-party ecosystem nobody's watching — and it's compounding as AI tools get folded into everyday vendor operations. This session is built for Oklahoma's cyber community to get in front of it.
Hear it from the field
Devon Energy walks through a real triage story: what the exposure looked like, how it was assessed, and what changed afterward.
Get ahead of AI-driven risk
Where AI adoption inside your vendor base is creating new exposure, and how to build visibility into it before it becomes a finding.
Connect with local peers
A half-day built for Oklahoma-based practitioners to compare notes with others doing this work in the same region.
Agenda · Central Time
Two and a half hours, four sessions.
| Time | Session |
|---|---|
10:00 – 10:30 | Introductions & the state of the ecosystem Setting the frame for the day: fourth- through Nth-party visibility, and where AI risk fits into the picture. |
10:30 – 11:00 | Fourth- to Nth-party triaging A working approach to prioritizing exposure once you can see past your direct vendors. Real-life story with Nathan Nguyen, Devon Energy. |
11:00 – 11:30 | Lunch Onsite buffet at Devon Energy Center. |
11:30 – 12:30 | AI risk exposure What's changing in your vendor ecosystem as AI gets adopted, and how to get visibility into it early. |
10:00 – 10:30
Session
Introductions & the state of the ecosystem
Setting the frame for the day: fourth- through Nth-party visibility, and where AI risk fits into the picture.
10:30 – 11:00
Session
Fourth- to Nth-party triaging
A working approach to prioritizing exposure once you can see past your direct vendors.
Real-life story with Nathan Nguyen, Devon Energy.
11:00 – 11:30
Session
Lunch
Onsite buffet at Devon Energy Center.
11:30 – 12:30
Session
AI risk exposure
What's changing in your vendor ecosystem as AI gets adopted, and how to get visibility into it early.
Getting there
Devon Energy Center
333 W Sheridan Ave, Oklahoma City, OK 73102
Hosted onsite at Devon Energy Center in downtown Oklahoma City. Parking and building access details will go out with your confirmation.
Format
In-person, half-day, lunch included.
Who it's for
Oklahoma-based security & risk practitioners.
Reserve your seat
RSVP for September 29
What you get
- A half-day of practitioner sessions, not pitches
- Lunch onsite at Devon Energy Center
- Parking and building access details on confirmation