Elissa Bogardus

Executive summary

Elissa Bogardus is an Advisory Partner with BDO in Sydney. She is an accomplished executive leader with a proven track record in delivering transformation agendas and fostering collaborative relationships with C-Suite stakeholders.

Elissa specialises in obligations and organisational requirements regarding operational risk, operational resilience, and third-party risk and has overseen the design and implementation of supplier and third-party risk management frameworks for financial services organisations across multiple geographies.

She has more than 20 years of experience translating contract, regulatory and legislative provisions into tangible and actionable requirements across multiple industries including financial services, banking and insurance, transportation and government.

Expertise

• Designing and assessing the effectiveness of Third-Party Risk Management Frameworks across all third-party types including suppliers, non-suppliers, and intra-group relationships
• Translation of regulatory obligations into governance controls for third-party arrangements, with specific expertise in APRA CPS 231 Outsourcing (to be replaced by APRA CPS 230)
• Integration of newly designed frameworks into existing business processes and operating models
• Contract management for all IT Contracts, including contract negotiations, drafting and measuring Service Levels, KPIs and fit-for-purpose contract assessments
• Vendor and commercial management, procurement best practices and supplier selection governance (RFP/RFI)
• Providing Technology selection advice for clients to manage supplier third-party risk and cyber third-party risk.
• Specialising in sectors:
  • Financial services, including banking and insurance
  • Transportation 
  • Government

Experience

• Delivered Software Asset Management (SAM) services for federal government, providing licencing advice on methodology to manage entitlements and deployments across the client’s entire IT estate
• Led the implementation of a global TPRM Framework for a global insurance firm, including eight risk domains across four regulated jurisdictions
• Advised the Executive team at a leading Australian bank on required remediation activities prior to APRA tripartite independent cyber security review of CPS 234 third party obligations
• Oversaw and delivered over 300 software licence reviews for a global software vendor, including all aspects of project management such as planning, budgeting, fieldwork, data analysis and presentation of findings to Executive and C- Suite level stakeholders
• Audited cyber-defences at a major Australian airline, including remediation plan and recommendations to optimise software deployment.

Qualifications and affiliations

• Bachelor of Commerce (Business Law)
• Affiliate Member, CA ANZ

Professional engagements and activities

• Boardroom Debate, AICD Directors Briefing, 2025
• “What can STEM learn from Sport?” Science meets business – Thought Leadership Series, 2016