Skip to content

Event · Presentation

Third-Party Risk Management: How to apply due diligence to supply chain control.

A practical, multidisciplinary guide coordinated by Carlos Alberto Saiz Peña with more than a dozen experts in compliance, cybersecurity, privacy and AI.

  • 10 November 2026
  • 18:00h - 20:00h
  • ICAB — Barcelona Bar AssociationC/ Mallorca 283, 08037 Barcelona
New publication
Book Third-Party Risk Management
Third-Party Risk ManagementCoordinated by Carlos Alberto Saiz Peña
Available on Amazon

Attendance request

Fill in your details to register for the event.

Verify your email before submitting the form.

ECIX GROUP, S.L., as the data controller, will process your personal data to register you for the Event. Additionally, if you give us your consent, we will send you marketing communications with our information and news. You can find more information in the Data Protection Policy and exercise your rights, or contact our Data Protection Officer at privacidad@ecix.tech.

About the book

A guide to governing the risk that enters through every link.

This work offers a practical, multidisciplinary guide to identify, assess and monitor legal, reputational and cybersecurity risks against requirements such as GDPR, NIS2, DORA and AI regulation.

  • GDPR
  • NIS2
  • DORA
  • AI regulation

The context

The regulatory and operational challenge

Suppliers, subcontractors and business partners now form an extensive and complex value chain. An error in any link creates legal, reputational and operational risks that the organisation ultimately assumes. Due diligence on third parties is a central compliance obligation.

Value proposition

From the risk map to actionable decisions.

A work designed to turn regulatory complexity into a clear, efficient and shared working model.

01

Multidisciplinary vision

Risk, AI, Cybersecurity and Legal connected in a single reading.

02

Applicable criteria

Clear criteria and methodologies that can be put into practice from day one.

03

Scale and efficiency

Efficient models to manage extensive supplier chains.

Target audience

For those who protect the value chain.

A shared perspective for roles that need to coordinate on third-party risk.

  • Compliance Officers and Legal Directors
  • CISOs and Cybersecurity Leaders
  • Data Protection Officers (DPO)
  • Procurement and Innovation Directors
Carlos Alberto Saiz Peña

Work direction

Carlos Alberto Saiz Peña

Coordinator of the work and lead participant in the presentation

Vice President and Partner of Risk & Compliance at ECIX Tech

Partner and Vice President of ECIX Group, Carlos Alberto Saiz Peña has 25 years of experience in Privacy, Cybersecurity, Risk Management, Compliance and Legaltech. He is Vice President of CUMPLEN, ISMS Forum Spain and ENATIC, Director of the Data Privacy Institute and a member of specialised Artificial Intelligence groups and observatories. He has studied at MIT and ESADE and has been recognised for 13 consecutive years by Best Lawyers in Privacy and Technology in Spain.

“This work brings together the practical experience of top-tier professionals to offer a real toolbox that helps build, improve or strengthen the third-party risk management model.”

Carlos Alberto on LinkedIn

Book presentation

Session on 10 November.

I invite you to join me for a day of networking and presentation.

18:00 — 20:00

ICAB — Barcelona Bar Association

C/ Mallorca 283, 08037 Barcelona

In person · by invitation

Agenda

  • Institutional welcome
    • Alexander SalvadorOn behalf of ICAB.
  • Opening address
    • Meritxell Borràs i SoléPresident of the Catalan Data Protection Authority (APDCAT).
  • Presentation of the book “Third-Party Risk Management”

    Interventions by

    • Belén ArribasPresident of ENATIC.
    • Miquel FortunyPartner at Fortuny Legal and Vice President of CUMPLEN.
    • Rodolfo TesoneCEO and Managing Partner of Meta Legal Group. President Emeritus and Founder of ENATIC.
    • Carlos Alberto Saiz PeñaPartner and Vice President of Ecix Tech, Vice President of ISMS Forum and Cumplen.
  • Round table: “The phenomenon of due diligence and supplier control”

    Moderated by Carlos Alberto Saiz Peña

    • Pablo DíazDPO at CaixaBank.
    • Montse CarreraDPO at Naturgy.
    • Nikola KovacicManaging Partner of Ecix Tech’s Barcelona office.
    • Laura CaballeroDirector of the Catalan Cybersecurity Agency (Agència de Ciberseguretat de Catalunya).
  • Cocktail and Networking

AVAILABLE

The book is available for purchase.

Available on Amazon
Book Third-Party Risk Management

More information:

comunicacion@ecix.tech