Episode 4 - Caroline de Zorzi

Our latest interviewee on Tenchi Insights is Erica Correa, Senior Information Security Manager at Banco Bradesco, with over 20 years of experience in the field. At the latest Tenchi Conference, Erica presented the Call for Papers session titled “Innovation and Security: Bradesco’s Journey in Managing Third-Party Cyber Risk,” where she shared how the bank structured and evolved its Third-Party Cyber Risk Management (TPCRM) program. In her presentation, she outlined the regulatory landscape shaped by Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados – LGPD) and Central Bank Resolution No. 4,893 issued by the Banco Central do Brasil. She also addressed the challenges of engaging business units and integrating procurement and risk management processes, as well as the importance of continuous monitoring and automation in overseeing critical third-party vendors.

The seventh guest on Tenchi Insights is Felipe Fernandes, Associate Director at Banco BTG Pactual. A CFP winner at the most recent Tenchi Conference, Felipe presented the session “Inside-out: Correlating Security Domains for Third-Party Cyber Risk Management,” where he demonstrated how different internal security teams can work in a coordinated manner to transform TPCRM (Third-Party Cyber Risk Management) into a strategic line of defense.

In the new episode of Tenchi Insights, Nycholas Szucko speaks with José Lama, Cybersecurity Manager – Offshore Branches at Itaú Unibanco, about the evolution of third-party cyber risk management—now at the core of strategy for large organizations. The conversation builds on the Call for Papers “The Journey of Cultural Change and Governance Centralization at Itaú,” presented by Lama at the Tenchi Conference, and dives into how the bank has been strengthening governance and risk management on a global scale, fostering integration, cultural alignment, and trust across its international units.

In this episode, we speak with Luiz Henrique Lobo, an Independent Board Member and seasoned executive with strong market experience. Lobo emphasizes that CISOs must act as “risk translators,” bringing clear and effective communication to the board.

We’ve just launched another brand-new episode of Tenchi Insights 2025. This series was created with a clear purpose: to distill, through focused conversations, the core of the discussions from the Tenchi Conference stage and amplify the voices of the leaders shaping third-party cyber risk management. In this episode, Nycholas Szucko speaks with Cristiano Adjuto e Campos, CISO at Banco Bradesco and moderator of the panel “From Silos to Synergy: How to Integrate TPCRM into Corporate Strategy,” which brought together leaders from Security, Tech Procurement, and Legal.

In this episode we chat to Dave Lewis, Global Advisory CISO at 1Password, to discuss the evolution of Third-Party Cyber Risk Management, the real-world challenges of applying AI to security, and the role of the community in building a more resilient ecosystem.

In the first episode, Nycholas Szucko interviews our CEO, Felipe Bouças, who shares his perspective on how the market has been maturing around TPCRM - and how Tenchi Conference has helped drive this conversation forward.