Conference On-Demand
Welcome to our on-demand conference presentation library, where you can find PowerPoints and recordings from past TPRA events. To see materials from a specific event, please select the desired event from the menu.
Please note: In-person events do not have session recordings.
2025 In-Person
April 7 – 9, 2025 | Myrtle Beach, SC
Navigating Risky TPRM Waters
2:10 - 3:00 PM
50 minutes
Guiding GenAI Technology Providers Using CSA AI Controls Framework
Troy Leach, Chief Strategy Officer & John Yeoh, CSO, EVP, Cloud Security Alliance (CSA)
Atlantic Ballroom 3
GenAI applications, agents, orchestration tools and LLMs are expected to be used in many facets of an organization going forward. But how do you work with technology providers to create…
3:10 - 4:00 PM
50 minutes
PANEL: Relationship Management & Collaboration
Stacey Custeau, Unum; Elizabeth Blosh-Myers, Threat Bank; Keith Frantz, Prosper Marketplace; Angela Appleby, Plante Moran; Everett Weston, RapidRatings
Tides 1 & 2
TPRM Relationship Management & Collaboration
Sponsored by Rapid Ratings
In an increasingly interconnected and risk-conscious business environment, strong third-party relationships are essential for resilience, compliance, and long-term success. This expert-led…
1:00 - 1:50 PM
50 minutes
Industry Roundtable: Insurance (Life, Health, Auto, etc.)
Facilitated by Christopher Strazishar, Third Party Governance Program Manager at Corebridge Financial & Andy Fiumefreddo, Sr Manager - Third Party Cyber Risk, American Family Insurance
Atlantic Ballroom 3
Guardians of the Treasure Chest: An Insurance Industry Roundtable on TPRM
Avast, protectors of life, health, auto, and all things insured! Set sail with fellow insurance leaders for a roundtable…
1:00 - 1:50 PM
50 minutes
Industry Roundtable: Technology & FinTech
Facilitated by Jonathan Ehret, Vice President, Strategy & Risk, Mastercard
Tides 1 & 2
Navigating Uncharted Waters: A Technology & FinTech Roundtable on TPRM
Ahoy, Technology trailblazers and FinTech adventurers! Join us on the open seas for a roundtable where Technology and FinTech experts…
3:10 - 4:00 PM
50 minutes
Third Party Risk is First Party Risk: From Process to Decisions
Pankaj Goyal, Director of Research & Standards, FAIR Institute
Atlantic Ballroom 3
TPRM has been considered a step child in enterprise risk or compliance programs. It is now time to consider TPRM program as an integral part of your cybersecurity program. To…
11:00 - 11:50 AM
50 minutes
Get Off the Assessment Treadmill. Take a Data-First, Questionnaire-Second Approach to TPRM
Ed Thomas, ProcessUnity
Atlantic Ballroom 3
The work never ends. Every year, we onboard more third parties. And every year, our assessment workload gets worse. More resources to help? Not going to happen. Sound familiar? You’re…
11:00 - 11:50 AM
50 minutes
Collective Resilience: Elevating Third-Party Risk Management
Mark Orsi, CEO & Charlie Tupitza, Director of Community Development, Global Resilience Federation (GRF) | Business Resilience Council (BRC)
Atlantic Ballroom 2
As the threat landscape rapidly evolves, traditional security controls are no longer sufficient to safeguard the complex ecosystems in which we operate. This session explores the shift from focusing solely…
2:10 - 3:00 PM
50 minutes
Third Party Risk By Exception
Brian Shaw, VP of North America, Certa AI
Atlantic Ballroom 3
Managing third-party risk is becoming increasingly complex, requiring organizations to balance speed, accuracy, and compliance while mitigating security threats. The latest industry trends emphasize a proactive, exception-based approach to risk…
2:10 - 3:00 PM
50 minutes
Roundtable: Nth Parties
Eric Rosendaul, Manager, Third Party Risk, VP, Citizens
Atlantic Ballroom 1
The Endless Depths of Nth Parties: A Risky Voyage Beyond the Horizon
Avast, brave souls ready to explore the uncharted depths of Nth-party risk!
In this interactive roundtable, we’ll navigate…
10:00 - 10:50 AM
50 minutes
The Next AI Wave is on its Way: Are You Ready?
Dean Alms & Loren Johnson, Aravo
Atlantic Ballroom 3
AI has ushered in a wave of imagination and innovation in TPRM. Already, it is revolutionizing how risk professionals optimize third-party engagement lifecycles, workflows, evaluations, due diligence, and risk mitigation.…
2:10 - 3:00 PM
50 minutes
The Future of TPRM: Securing the Advantage in an Era of Regulatory Uncertainty
Jared Howe, Senior Solutions Consultant, Mitratech
Atlantic Ballroom 1
Businesses today face the most disruption since the COVID-19 pandemic shut down global supply chains, forcing companies to quickly reassess their vendor relationships. Now, shifts in U.S. government regulatory enforcement…
3:10 - 4:00 PM
50 minutes
How to Assess Your Vendors' SSAE 18 SOC Report for Comprehensive Consistent and Security-Focused Due Diligence
Lisa Mae Hill, Independent Contractor
Atlantic Ballroom 1
A full overview of how to use the SOC audit report for due diligence with a focus on Information System Security and Data Protections. Overview includes how to assess exceptions…
1:00 - 1:50 PM
50 minutes
Roundtable: AI/ML, including Mapping Strategies
Vincent Scales,Lead Director, Third Party Security, CVSHealth & Clarence Chio, CEO & Co-founder, Coverbase
Atlantic Ballroom 3
AI & Machine Learning: Mapping New Waters in TPRM
Sponsored by Coverbase
Set sail into the world of AI and machine learning in third-party risk management! This roundtable invites TPRM…
2:10 - 3:00 PM
50 minutes
Decoding Risk: ERM, IRM, GRC and Everything in Between
Rafael DeLeon, SVP, Industry Engagement & Chinyere Watson, Lead Third Party Risk Expert –Content and Education, Venminder, an Ncontracts Company
Tides 1 & 2
Risk management is packed with acronyms like Enterprise Risk Management (ERM), Integrated Risk Management (IRM), and Governance, Risk and Compliance (GRC). What’s the difference? Does it really matter for your…
3:10 - 4:00 PM
50 minutes
Learning from the Titanic: Dealing with Operational Resilience in TPRM
Vrushali Lakhpati, VP, Head of Global Third Party Due Diligence Program, AmTrust Financial Services
Atlantic Ballroom 2
TPRM professionals and leaders can draw valuable lessons from the tragic sinking of the Titanic that can be applied to enhance operational resilience in TPRM and enhance organization's ability to…
10:00 - 10:50 AM
50 minutes
Navigating the High Seas of Third-Party Risk: A Swashbuckling Approach to TPRM
Jonathan Ehret, Vice President, Strategy & Risk, RiskRecon by Mastercard
Atlantic Ballroom 2
Avast, ye CISOs! The waters of third-party risk management (TPRM) are treacherous, filled with hidden threats and unpredictable storms. Traditional tools like vendor questionnaires are but flimsy rafts in a…
4:10 - 5:00 PM
50 minutes
Navigating the Insurance Waters
Mark Ewert, Director, Vendor Management, Penn National Insurance & Mary Granville, Assistant Vice President – Account Executive, Alliant Insurance Services
Atlantic Ballroom 1
Third party insurance related best practices. The conversation will include a discussion of:
Types of insurance coverages and Minimum Limits
Reviewing a certificate of insurance
AM Best Ratings
Insurance Tracking…
1:00 - 1:50 PM
50 minutes
Risk Assessment Techniques Identifying and Evaluating Third-Party Risks
Rob Sheehan, SCRM/TPRM Project/Program Manager, 10X National Security
Atlantic Ballroom 1
While there's no "one size fits all" approach to a risk assessment, there are fundamental principles to consider that are applicable regardless of your industry.
11:00 - 11:50 AM
50 minutes
Designing a Comprehensive TPRM Framework: Essential Elements for Success
Chris Phillips, VP, Procurement and Vendor Risk, Lendmark Financial Services
Atlantic Ballroom 1
In today's interconnected business environment, managing third-party risks is crucial to ensuring the resilience and integrity of your organization. “Designing a Comprehensive TPRM Framework: Essential Elements for Success” session will…
10:00 - 10:50 AM
50 minutes
Setting Sail with Confidence: Establishing Strong TPRM Foundations for Smooth Sailing
Morgan Binder, Head of Third Party Risk, Jake Mitchell, Program Manager, Third Part Risk, & Brian Howell, Program Manager, Third Party Risk from Stripe
Atlantic Ballroom 1
Join us as we explore the essential foundations of an effective Third-Party Risk Management (TPRM) program. Discover key anchors of third party lifecycle management, while learning best practices to build…
2:10 - 3:00 PM
50 minutes
Roundtable: MIT Research "Securing the Fleet: Collaborative Cybersecurity Strategies for Large Firms and their Small and Medium Suppliers"
Jillian Kwong, Research Scientist, Cybersecurity at MIT Sloan (CAMS)
Tides 1 & 2
Tired of seeing your supply chain vulnerable to cyberattacks? Many large companies expect their small and medium suppliers to fend for themselves against cyber threats. The reality is that increasing security…
2:10 - 3:00 PM
50 minutes
Practical Solutions for Scaling Third Party Risk Management
Courtney Turner, Third Party Risk Manager, Deere & Co
Atlantic Ballroom 2
In today’s complex business landscape, effectively managing third party risk is crucial, especially for large organizations with extensive supplier inventories. John Deere's is over 30,000 within scope. This session would…
4:10 - 5:00 PM
50 minutes
Mastering the Vendor Tango: Navigating Third-Party Risk from Both Sides
Garrett Close, Manager, GRC, Amplitude & Blake Hoge, Third Party Security, AirBNB
Atlantic Ballroom 3
Managing third-party risk is essential for keeping your business secure, but it can feel like walking a tightrope. On one side, you’re busy vetting your vendors, and on the other,…
3:10 - 4:00 PM
50 minutes
Threading the Needle in a Haystack: Using Big Data to Pinpoint Real Risk in Third-Party Management
Luke Nordlie, Global Head of Third Party Risk Solutions, S&P Global
Tides 1 & 2
In a world flooded with third-party data, finding real risk is like threading a needle in a haystack. As a global leader in data and analytics, S&P Global is redefining…
10:00 - 10:50 AM
50 minutes
Steering Through Uncharted Waters: How Agile AI Governance and Ethical Frameworks Can Enhance Third-Party Risk Management (TPRM)
Bob Maley, Chief Security Officer, Black Kite
Atlantic Ballroom 3
In today's interconnected world, third-party risk management (TPRM) must evolve to address the increasing complexities of artificial intelligence (AI) in the supply chain. As AI becomes embedded in third-party services,…
11:00 - 11:50 AM
50 minutes
Operational Resiliency: Best Practices to Enhance Your Program & Ensure Regulatory Compliance
Michael Siegrist, Cloud Manager | Risk Solutions (GRC, IRM, Ethics, Third Party Risk and ESG), OneTrust & Michael Duggan, Managing Partner, CastleHill Managed Risk Solutions LLC
Tides 1 & 2
Amidst growing regulatory pressure, a rapidly evolving threat landscape, and a global uptick in third-party risk and AI governance, resiliency has never been more top of mind for TPRM programs.…
1:00 - 1:50 PM
50 minutes
Key Trends & Insights from Supply Wisdom’s 2nd Annual Risk Management Survey
Aidan Thaggard, Senior Solutions Engineer, Supply Wisdom
Tides 1 & 2
How are companies evolving their risk management strategies in 2025? Join us for an exclusive presentation of the results from Supply Wisdom’s 2nd Annual Risk Management Survey.
We’ll reveal key…
11:00 - 11:50 AM
50 minutes
Securing SaaS Applications: A Comprehensive Approach to Cloud Risk Management
Gregory Rasner, CEO, Third Party Threat Hunting LLC
Atlantic Ballroom 1
Learn how to stop the continual raids by the bad actors (pirates!) and lower your third-party risk by leveraging continuous monitoring effectively. It is not enough to have tools, the…
3:10 - 4:00 PM
50 minutes
Resilience and Upskilling in AI-Infested Waters: You’re Gonna Need a Bigger Boat
Donna Speckhard, Senior Risk Advisor, Fannie Mae & Vernon Williams, Founding Partner, Rational Risk
Atlantic Ballroom 2
In an era where artificial intelligence (AI) is rapidly transforming industries and redefining job roles, the need for resilience and continuous upskilling has never been more crucial. This 60-minute session…
10:00 - 10:50 AM
50 minutes
Essentials for Effective Third-Party Risk Management
Jodi Daniels, CEO & Privacy Consultant, Red Clover Advisors
Tides 1 & 2
In today’s complex regulatory environment, managing third-party risk requires a strong understanding of privacy principles.
This session will cover the core privacy essentials every third-party risk management professional needs to…
4:10 - 5:00 PM
50 minutes
From Silos to Synergy: Partnering with Procurement while Streamlining Risk
Paul Kurtz, Senior Manager, Third Party Risk Management, First Century Bank
Atlantic Ballroom 2
Is there a better way to collaborate with Procurement while simplifying the TPRM process?
If that is a struggle at your organization, join this session to hear a procurement leader’s…
10:00 - 10:50 AM
50 minutes
Supply Chain Resilience: Enhancing Detection and Response Strategies
Steve Cobb, CISO, SecurityScorecard
Atlantic Ballroom 2
Recent supply chain disruptions have highlighted the critical need for effective Supply Chain Detection and Response (SCDR) to achieve deep visibility and proactive risk management. Join SecurityScorecard’s CISO, Steve Cobb,…
1:00 - 1:50 PM
50 minutes
Industry Roundtable: Finance
Facilitated by Paul Kurtz, Senior Manager, Third Party Risk Management at First Century Bank, NA
Atlantic Ballroom 1
Navigating the High Seas of Financial Risk: An Industry Roundtable on TPRM in Finance
Ahoy, Finance mates! Ready to set sail on a lively discussion of TPRM challenges and innovations?…
1:00 - 1:50 PM
50 minutes
Roundtable: Incident Response
Kelly Felder Senior Analyst, Third Party Risk Management Trane Technologies
Atlantic Ballroom 2
Battling the Storm: An Industry Roundtable on Incident Response
Ahoy, defenders of the realm! Join us for a roundtable dedicated to incident response in third-party risk management.
In this session,…
3:10 - 4:00 PM
50 minutes
How to Mature Your TPRM Program
Kaih Taylor, Manager, Third Party Risk Management, AgFirst Farm Credit Bank
Atlantic Ballroom 1
TPRM Maturity is critical to all organizations to stay ahead of the increasingly growing risk we are seeing in the TPRM Industry. This session aims to explore the maturity model,…
1:00 - 1:50 PM
50 minutes
Industry Roundtable: Retail & Manufacturing
Mark Dunaisky, Cybersecurity Program Manager – Third Party Risk Management & Technology Risk Management
Atlantic Ballroom 2
Plundering for Profit: A Retail & Manufacturing Roundtable on TPRM
Ahoy, Retail and Manufacturing captains! Hoist the anchor and join us for a dynamic roundtable where we’ll delve into the…