Episode 3 - Cristiano Adjuto e Campos

Our latest interviewee on Tenchi Insights is Erica Correa, Senior Information Security Manager at Banco Bradesco, with over 20 years of experience in the field. At the latest Tenchi Conference, Erica presented the Call for Papers session titled “Innovation and Security: Bradesco’s Journey in Managing Third-Party Cyber Risk,” where she shared how the bank structured and evolved its Third-Party Cyber Risk Management (TPCRM) program. In her presentation, she outlined the regulatory landscape shaped by Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados – LGPD) and Central Bank Resolution No. 4,893 issued by the Banco Central do Brasil. She also addressed the challenges of engaging business units and integrating procurement and risk management processes, as well as the importance of continuous monitoring and automation in overseeing critical third-party vendors.

The seventh guest on Tenchi Insights is Felipe Fernandes, Associate Director at Banco BTG Pactual. A CFP winner at the most recent Tenchi Conference, Felipe presented the session “Inside-out: Correlating Security Domains for Third-Party Cyber Risk Management,” where he demonstrated how different internal security teams can work in a coordinated manner to transform TPCRM (Third-Party Cyber Risk Management) into a strategic line of defense.

In the new episode of Tenchi Insights, Nycholas Szucko speaks with José Lama, Cybersecurity Manager – Offshore Branches at Itaú Unibanco, about the evolution of third-party cyber risk management—now at the core of strategy for large organizations. The conversation builds on the Call for Papers “The Journey of Cultural Change and Governance Centralization at Itaú,” presented by Lama at the Tenchi Conference, and dives into how the bank has been strengthening governance and risk management on a global scale, fostering integration, cultural alignment, and trust across its international units.

In this episode, we speak with Luiz Henrique Lobo, an Independent Board Member and seasoned executive with strong market experience. Lobo emphasizes that CISOs must act as “risk translators,” bringing clear and effective communication to the board.

O Tenchi Insights segue ampliando as conversas que nasceram no palco da Tenchi Conference 2025, trazendo a visão de quem lidera a gestão de riscos cibernéticos de terceiros hoje. Desta vez, Nycholas Szucko bate um papo com Caroline de Zorzi, Legal Manager do Bradesco, sobre o papel estratégico do Jurídico na construção de um ecossistema digital mais resiliente - viabilizando negócios, fortalecendo parcerias e protegendo o consumidor final. A conversa passa por segurança contratual, cláusulas de continuidade de negócios, ANS, cibersegurança e o desafio de integrar Compras, Riscos e Jurídico para ganhar agilidade sem abrir mão da conformidade. Em um ambiente cada vez mais interconectado, fortalecer a gestão de riscos cibernéticos de terceiros exige mais do que controles técnicos: requer alinhamento entre áreas, decisões compartilhadas e uma visão comum de risco e negócio. Quando Jurídico, Compras, Riscos e Segurança atuam de forma integrada, o TPCRM passa a ser um habilitador da inovação, da confiança e da resiliência organizacional.

In this episode we chat to Dave Lewis, Global Advisory CISO at 1Password, to discuss the evolution of Third-Party Cyber Risk Management, the real-world challenges of applying AI to security, and the role of the community in building a more resilient ecosystem.

In the first episode, Nycholas Szucko interviews our CEO, Felipe Bouças, who shares his perspective on how the market has been maturing around TPCRM - and how Tenchi Conference has helped drive this conversation forward.