2025 Onspring Connect User Conference Agenda

7:00 am - Morning Activity

Join us for a stroll down Music Row.

7:30 am - 5:30 pm - Registration Open

Look for registration in the 2nd floor foyer.

7:30 - 9:00 am - Breakfast

Join us on The Lawn for breakfast.

8:00 - 9:00 am - 1-on-1 Labs

Sign-up in advance for a 1-on-1 lab with an Onspring expert. Sign-ups will open in September.

9:00 am - Welcome & Innovation at Onspring: A Collaboration with You and Your Teams

Innovation isn't a top-down process—it's a partnership. In this forward-looking session, our Chief Product Officer, Jeff Ladner and our Director of Platform, Ryan Lougheed, will share Onspring’s vision for innovation. We will go beyond a passive roadmap review and instead, share how we’ve been collaborating with you and your teams to deliver increased value from our platform.

Jeff and Ryan will reveal our strategy for a more open and responsive platform, with AI at its core. They will also discuss how we turn your feedback and ideas into tangible use cases. You'll get an exclusive look at what’s next for Onspring and learn how we're designing it with your needs—and your ingenuity—at the core. We'll explore how this new approach will not only accelerate innovation but also empower you to shape a future where our platform is even more integral to your success.

Presenters:
Jeff Ladner - Onspring
Ryan Lougheed - Onspring

10:00 am - Keynote: Mastering the Art of Influence and Communication

To achieve success in your professional and personal pursuits comes down to one thing and one thing only: your ability to communicate effectively. Having mastered the arts of communication, psychology, and influence Evy Poumpouras teaches audiences top-tier skills for enhancing their ability to impact relationships, promote connection, and minimize conflict. The strategies Poumpouras shares reveal how subtle shifts in delivery, presence, and perception can change the game for anyone to influence any situation and achieve the desired outcome.

Evy Poumpouras is a former Secret Service special agent with over 12 years of experience protecting the world’s most high-profile figures, including Presidents Obama, Bush, Clinton, and Bush Sr. Today, she is a respected multimedia journalist, host, and producer known for her insightful interviews and investigative prowess. Regularly featured on "TODAY," MSNBC, and "Good Morning America," Poumpouras shares her expertise on national security and law enforcement as NBC’s Law Enforcement Contributor.

Beyond her media career, Poumpouras is an adjunct professor at The City University of New York, teaching criminal justice and criminology. Her TEDx talk, "Words: Your Most Powerful Weapon," and bestselling book, "Becoming Bulletproof," further demonstrate her commitment to empowering others with actionable strategies for success.

11:00 am - Warner Bros Discovery - A Traveler’s Guide to Onspring: From Acquisition to Spin-Off

Leslie McGuirk, VP of Financial Compliance at Warner Bros. Discovery, is an avid traveler who has visited over 20 countries across five continents. And her journey in compliance has been equally interesting. A few years ago, Leslie and her team extended Onspring to bring together differing risk management and compliance processes as the result of an acquisition. Today, she’s taking a journey to split up the same companies that once needed to merge together.

Join Leslie and learn how you can ready your organization for any kind of change - from acquisitions to spin-offs, and build processes that will serve your company - no matter where the path may lead.

Presenter:
Leslie McGuirk - Warner Bros Discovery

11:30 am - 12:30 pm - Innovation Showcase

Explore the showcase for round-robin style presentations by Onspring clients showing off their custom-built use cases.

Presentations include:

Evolving the Third-Party Portal Experience by Charlie Evans, InfoTech Risk and InfoSec Manager at American Express Global Business Travel
FedEx's Onspring Innovation: Fleet Management & Self-Monitoring by Jonathan Biskner, Sr Advisor International Regulatory & Compliance at FedEx
Blueprint for Better Compliance by Mitchell Sabez, Administrative Specialist, Office of Compliance at University of Wisconsin
From Draft to Done: How UW-Madison Manages University Policies with Onspringby Jim Thompson, Sr Internal Consultant at University of Wisconsin
How to Leverage Onspring to Overcome Language Barriers for Global Third-Party Management by Amanda Brown, Sr Manager Ethics & Compliance at Fruit of the Loom
Streamlining Legal Entity Management for National Companies by Jennifer Neville, VP and Assistant General Counsel at Sevita

1:30 pm - AWS - Balancing Innovation and Governance in AI-Driven Business Transformation

AI's unprecedented adoption creates both strategic opportunities and governance challenges for organizations. This session with Tara Jones, Principal Advisor, AI & Modern Data Strategy, at AWS, provides a practical framework for understanding emerging AI risks and implementing appropriate oversight mechanisms - without impeding innovation.

Presented by:
Tara Jones - AWS

2:00 pm - Tenex AI - GRC in the AI Era: Balancing Innovation, Risks, and Compliance

This session demystifies AI for GRC professionals, exploring the latest trends in how teams are (and aren't) integrating it into workflows, while celebrating its potential to drive smarter decision-making and process innovation.

Join Eric Foster, CEO and Founder of Tenex.AI as he examines key risks, including "shadow AI"—the unsanctioned use of tools that can lead to risk exposure or compliance drift. You’ll hear from real-world experiences of organizations that build resilient AI strategies. Eric will also share how forward-thinking teams have aligned AI with GRC frameworks to accelerate growth without compromising security. Attendees will gain actionable steps tailored to GRC realities.

Presented by:
Eric Foster - Tenex AI

3:00 pm - Wellpath - If you can build it, should you? Designing with Intentionality

What if you had to comply with a myriad of regulations from local, state, & federal requirements as well as accrediting bodies? And, what if your business wasn’t like any other?

Wellpath fits that bill working in an industry that is often forgotten or unknown - Correctional Healthcare. Wellpath strives to deliver hope and healing and promote health equity to a vulnerable population of patients. They do this by employing more than 15,000 professionals in 37 states across America, and care for almost 300,000 patients each day. The challenges of manual processes faced by Courtney Bennett (Sr. Compliance Manager) and Olivia Wynthein (Compliance Specialist) seemed overwhelming prior to Onspring. How do they automate a wide range of processes and workflows, while also selling the business on leveraging Onspring for their work?

While Wellpath’s initial use of Onspring was a success, they also found they needed to take a step back as they had wildly over-engineered the platform for their daily use. They then spent time tearing things apart and rebuilding - with a focus on absolute simplicity. Courtney and Olivia will demo some of their Onspring creations and discuss the lessons they learned when doing so. If you have a unique challenge to solve, this session is for you!

Presenters:
Olivia Wynthein - Wellpath
Courtney Bennett - Wellpath

3:30 pm - Veritiv - SIEM Survival Guide: Cut Costs and Thwart Threats in the Next 90 Days

Anyone who has been involved in security operations knows that many systems we leverage to understand threats are expensive to deploy and difficult to manage. You spend a ton of time putting logic into the system, and it quickly becomes hard to manage.

What if you had a different way to maintain an inventory of what was set up in your SIEM?
What if you could also relate that back to controls and risk?

Brad Gorka has served as a CISO and held security leadership roles for the past decade. He knows better than anyone that the typical SIEM solution can be a challenge to manage well. That’s why he recommends a different approach.

Join this session for practical ideas that you can put into action immediately to improve your security operations stance.

Presented by:
Brad Gorka - Veritiv

3:00 pm - Learning Breakout: Level 2 Certification Prep

Calling all Level 1 Certified Admins! If you’re considering Level 2 Certification, don’t miss this breakout session. We’ll review key concepts and implementation strategies for Workflow, Surveys, and Access, focusing on skills relevant for the Level 2 exam. We’ll also dive into exam parameters and expectations, ensuring you understand what's required for success. You’ll walk away with testing best practices to help you approach the exam with confidence and strategic thinking.

Presented by:
Kelly Walden - Onspring
Kati Littleton - Onspring

4:00 pm - TransUnion - Building for Compliance: Managing OFAC Sanctions’ Blocked Property Reporting in Onspring

When a sanctions match is identified, the regulatory response must be precise, timely, and well documented. This session explores how the Onspring platform can be leveraged to build a robust, audit ready process for managing Office of Foreign Assets Control (OFAC) sanction compliance, specifically the creation, submission, and long-term retention of blocked property reports.

We'll walk through how to design this solution within Onspring to capture critical data following a sanctions match, trigger an OFAC ready report submission, and establish a centralized repository for storing submitted reports. Attendees will learn how to link records to status driven retention logic ensuring compliance with a 10-year record keeping requirement post unblocking.

Presented by:
Jenn Plowman - TransUnion

4:00 pm - Onspring - Content Design Tools & Tricks

When users know where to go and what to do, their satisfaction and productivity accelerate. As an Onspring admin, you probably invest significant time in dashboard and report design, but what about individual records? They’re just as important!

Join this breakout session to learn how to make your record layouts more intuitive and action-oriented with instructional text blocks, attention-grabbing visuals, and more. Bonus: You’ll explore a new Layout Object Builder app that can be added to your instance to support your design process.

Presented by:
Hannah Cave - Onspring
Sarah Nord - Onspring

4:30 pm - From Buzzword to Boardroom: How GRC is Managing the AI Transformation

Risk, Compliance, InfoSec, and Audit functions are in place to support a balanced approach to risk management and growth. In the past 18 months, AI has moved from being a buzzword to actively reshaping how businesses connect with customers and get work done. In response, GRC functions have had to rapidly create policies and governance councils.

During this session, panelists from healthcare, multi-media, retail and financial services organizations will showcase how AI technologies are changing how work is done at their companies, how they go to market, and how they serve their clients. They will also discuss how their function within the organization has been challenged to adjust risk tolerances and mitigating controls to support adoption of AI and avoid being left behind.

Panelists:
James Baird - GoTo Foods
Russ Charlton - Advance
Katelyn Knezic - Warner Bros Discovery

Moderator:
Beth Strobel - Onspring

6:00 pm - Rooftop Nash Bash

The Pool Club is calling your name. Come to the top floor of the Virgin Hotel Nashville for a party you won't want to miss.

7:00 am - Morning Activity

Join us for a stroll down Music Row.

7:30 am - 5:30 pm - Registration Open

Look for registration in the 2nd floor foyer.

7:30 - 9:00 am - Breakfast

Join us on the patio for breakfast.

8:00 - 9:00 am - 1-on-1 Labs

Sign-up in advance for a 1-on-1 lab with an Onspring expert. Sign-ups will open in September.

9:00 am - Dolby - Beyond the Breach: Addressing the Root Cause of Cybersecurity Risks

What if your biggest cybersecurity threat isn't a hacker from across the globe, but the operational chaos within your own walls?

Organizations spend fortunes building defenses against sophisticated external attacks, yet many security programs feel like a losing battle. This session argues that we're fighting the wrong battle. The "cybersecurity problem" isn't the enemy at the gate; it's a symptom of a deeper issue: a fundamental lack of internal discipline.

This operational friction is what traps even the most vigilant CISOs in a cycle of firefighting, frustration and burnout.

Join Yaron Levi, CISO of Dolby, to discover a new path forward. Learn how to transform security from the organization's "moral compass" into a strategic partner that drives pragmatic, effective security—one that enables the business instead of restricting it.

Presenter:
Yaron Levi - Dolby

9:30 am - Cboe - Empowering Admins: Unlocking Organizational Value with GRC Platforms

Many organizations struggle to fully leverage their GRC platforms due to a lack of understanding of how to effectively integrate a platform across departments. This presentation aims to demystify the process of expanding GRC platform adoption by focusing on the crucial role of system administrators as orchestrators and educators. Scott Samyn, Sr. Risk Engineer at Cboe, will share his decade-long experience and teach you how to rapidly roll out a GRC platform across our organization, demonstrating how to identify applicable use cases, showcase clear value, and foster collaboration, ultimately transforming a powerful tool into a company-wide asset.

Presenter:
Scott Samyn - Cboe

10:00 am - Costco - Building a Sustainable GRC Program: From Idea to Roadmap and Beyond (A Fireside Chat)

Implementing a Governance, Risk, and Compliance (GRC) program that delivers tangible value requires more than just good intentions; it demands strategic planning, consistent execution, and strong executive support. Join Katie Hairston, GRC Solutions Senior Project Manager, as she shares a practical roadmap for formalizing GRC initiatives, moving them from conceptual phases into impactful, automated solutions. In this fireside chat, hosted by Lateef Johnson of Onspring, we’ll explore how to effectively demonstrate return on investment year-over-year, securing continuous funding and fostering a culture of sustained growth within your organization's GRC capabilities.

Presenters:
Katie Hairston - Costco
Lateef Johnson - Onspring

10:30 am - Break

Grab a snack and stop by the Onspring Hub.

11:00 am - 90 Seconds to Midnight: A Model for Impactful Risk Communication

"90 Seconds to Midnight" uses the Doomsday Clock as a model for impactful risk communication, illustrating how complex risk data can be made accessible and actionable for stakeholders. This presentation covers methods to distill complex risk information into clear, engaging visuals and stories that highlight urgency and support proactive decision-making. Learn techniques for developing risk reports that resonate, leveraging simplicity to enhance stakeholder understanding and drive timely actions on critical issues.

Presenters:
Andrew Gunter - Cential
Nicole Hepburn - Cential

11:30 am - 12:30 pm - Innovation Showcase

Explore the showcase for round-robin style presentations by Onspring clients showing off their custom-built use cases.

Presentations include:

Evolving the Third-Party Portal Experience by Charlie Evans, InfoTech Risk and InfoSec Manager at American Express Global Business Travel
FedEx's Onspring Innovation: Fleet Management & Self-Monitoring by Jonathan Biskner, Sr Advisor International Regulatory & Compliance at FedEx
Blueprint for Better Compliance by Mitchell Sabez, Administrative Specialist, Office of Compliance at University of Wisconsin
From Draft to Done: How UW-Madison Manages University Policies with Onspringby Jim Thompson, Sr Internal Consultant at University of Wisconsin
How to Leverage Onspring to Overcome Language Barriers for Global Third-Party Management by Amanda Brown, Sr Manager Ethics & Compliance at Fruit of the Loom
Streamlining Legal Entity Management for National Companies by Jennifer Neville, VP and Assistant General Counsel at Sevita

1:30 pm - When AI Becomes the Enemy: Why Fully Automated Risk Programs Collapse

We’ve been sold the promise that artificial intelligence can run our Third-Party Risk Management programs better, faster, and cheaper. But here’s the catch: the moment we hand over the wheel, we create a closed system that stops engaging with reality. Drawing on John Boyd’s OODA loop and his warnings about closed systems, this keynote exposes why AI cannot perform the most critical step—Orientation—the human process of judgment, culture, and intuition that makes sense of a chaotic world. I’ll show how automation without orientation leads to dangerous feedback loops, how adversaries can exploit rule-based predictability, and why AI must be a force multiplier—not the pilot.

2:00 pm - Travelport - How to Bring Joy to GRC

You don’t often hear the word “joy” in GRC, but that’s exactly what you’ll hear about in this session. Drawing on nearly two decades of experience in the GRC space, Liam Doyle, Principal Architect for Cyber Security & Risk at Travelport will highlight practical strategies and technological enablers that inject "joy" into the daily administration and leadership of GRC programs.

By focusing on real-world challenges and their practical, platform-enhanced solutions, this session aims to inspire GRC professionals to discover renewed enthusiasm for their work, demonstrating that GRC can indeed be a delightful and rewarding endeavor.

Presenters:
Liam Doyle - Travelport

1:30 pm - Learning Breakout: Level 2 Certification Prep

Presented by:
Kelly Walden - Onspring
Kati Littleton - Onspring

3:00 pm - Toyota Material Handling - Winning Hearts and Minds: Strategies for Security Program Success

Presenter:
Travis Cornett - Toyota Material Handline

3:30 pm - Strategic GRC: Moving Beyond Check-the-Box Compliance - A Fireside Chat with First National Bank of America

Join this Fireside Chat with Bradley Morey, First National Bank of America (FNBA), and Michelle Randall, CMO at Onspring, as they dive into the organization's critical transition from an unmanageable system for governance, risk, and compliance (GRC) to a dedicated GRC platform. During this conversation, Brad and Michelle will discuss how the increasing burden of regulatory compliance necessitated tracking over 130 controls and extensive issue remediation efforts.

Michelle and Brad will also discuss and compare long-term benefits vs. immediate time savings, particularly in audit management. And, they will explore how much automation is “enough” and how to thoughtfully configure dashboards and email notifications.

Presenters:
Bradley Morey - First National Bank of America
Michelle Randall - Onspring

MONDAY, OCTOBER 13

TUESDAY, OCTOBER 14 - DAY 1

WEDNESDAY, OCTOBER 15 - DAY 2