Search Results

Third Party Risk Association Furthering the profession of third party risk through knowledge sharing and networking. Join TPRA View Events Join our mailing list! ​ Submit your email here to receive important communication from us regarding upcoming events, exciting announcements, conference information, and more. Email Subscribe Thanks for subscribing! Winner of TPRA's 2024 TPRM Service Provider Innovator Award! Congratulations to Exiger! Third Party Risk Management 101 Guidebook Free eBook available to all! TPRA Practitioner Slack Forum Join TPRA on our Practitioner Slack Forum Winner of TPRA's 2024 TPRM Service Provider Innovator Award! Congratulations to Exiger! 1/8 ABOUT TPRA The Third Party Risk Association was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. This organization is a 501(c)(6) not-for-profit. ​ Activities in support of this purpose include, but are not limited to: Promoting the value that third party risk professionals and practitioners add to their organizations; Providing comprehensive professional, educational, and development opportunities, as well as standards and other professional practice guidance; Researching, disseminating, and promoting to practitioners and stakeholders knowledge concerning third party risk and its appropriate role in control, risk management, and governance; Educating practitioners and other relevant audiences on best practices in third party risk; and Bringing together third party risk professionals and practitioners from all countries to share information, experiences, tools, and techniques. ​ The organization was formed by Julie Gaiaschi and Jon Ehret on October 22, 2018 and is headquartered in Iowa. ​ Board of Directors Officers About Join Practitioner Plans S tandard: FREE Premium: $199/yr BENEFITS MEMBER MEETINGS: Interactive monthly calls to discuss a variety of third party risk topics decided upon by members. CONFERENCES: In person and virtual conferences dedicated solely to third party risk topics. NETWORKING: Online interaction with your peers through membership forums and document databases. SPECIAL INTEREST CALLS: Quarterly special interest calls based on your industry. DEMOS, SURVEYS, WEBINARS: Access to third party risk management service provider demos, surveys, & webinars. CERTIFICATIONS: TPRM professional certifications that establish credibility and demonstrate your commitment to mastering your skills and knowledge within the industry. JOIN Vendor Member Plans 4 available plans startin g at $8,000/yr BENEFITS QUARTERLY UPDATES: Receive quarterly updates with industry innovators to collaborate on practitioner needs. PRIORITY & DISCOUNT SPONSORSHIP OPPORTUNITIES: Be the first to sponsor conferences and receive discounted member rates, as well as priority positioning. PROMOTIONAL OPPORTUNITIES: Work with the TPRA staff to communicate to Practitioner Members the your organization's webinars, surveys, demos, blog posts, and white papers. PRACTITIONER MEETINGS: Access to attend select practitioner monthly meetings. Note : No Practitioner Member lists will be distributed to vendors unless Practitioners opt-in to providing information to vendors as a result of a TPRA event. JOIN JOIN Please Note: You may experience issues when signing up using Internet Explorer. We recommend using Chrome, Safari or Edge TPRA MEMBER EVENTS View TPRA events that are open to non-members below! Members can via the buttons noted. TPRA Practitioner Members TPRA Vendor Members External Events Events Multiple Dates Women In TPRM Meeting Tue, May 21 Online May 21, 2024, 1:00 PM – 2:00 PM CDT Online May 21, 2024, 1:00 PM – 2:00 PM CDT Online Join us for our monthly Women In TPRM (WNTPRM) meeting to hear from inspiring women about their "Journey to TPRM" as well as exciting program updates! +30 more Register Multiple Dates WNTPRM Educate & Support Work Group Tue, Jun 04 Online Jun 04, 2024, 2:00 PM – 2:30 PM CDT Online Jun 04, 2024, 2:00 PM – 2:30 PM CDT Online Join this work group to help create a platform for Women in TPRM to be recognized, celebrated, & supported! This group is open to ANYONE, regardless of TPRA membership or gender identity. +3 more Register Multiple Dates WNTPRM Lead Work Group Tue, Jun 04 Online Jun 04, 2024, 2:30 PM – 3:00 PM CDT Online Jun 04, 2024, 2:30 PM – 3:00 PM CDT Online Join this work group to cultivate the next generation of Women Leaders! This group is open to ANYONE, regardless of TPRA membership or gender identity. +1 more Register Multiple Dates WNTPRM Mentor Work Group Thu, Jun 06 Online Jun 06, 2024, 2:00 PM – 2:30 PM CDT Online Jun 06, 2024, 2:00 PM – 2:30 PM CDT Online Join this work group to facilitate mentorships for Women in TPRM! This group is open to ANYONE, regardless of TPRA membership or gender identity. Register Multiple Dates WNTPRM Pay Work Group Thu, Jun 06 Online Jun 06, 2024, 2:30 PM – 3:00 PM CDT Online Jun 06, 2024, 2:30 PM – 3:00 PM CDT Online Join this work group to highlight organizations uplifting Women in TPRM! This group is open to ANYONE, regardless of TPRA membership or gender identity. Register Multiple Dates New & Potential Member Call Tue, Jul 09 Online Jul 09, 2024, 10:00 AM – 10:30 AM CDT Online Jul 09, 2024, 10:00 AM – 10:30 AM CDT Online New & potential TPRA Practitioner Members can join these calls to learn more about TPRA benefits, upcoming TPRA events, and where to get plugged in. Register TPRM Tools of the Trade Show: Discover, Discuss, Deploy Wed, Jul 17 Virtual Fair Jul 17, 2024, 9:00 AM – 4:00 PM CDT Virtual Fair Jul 17, 2024, 9:00 AM – 4:00 PM CDT Virtual Fair Join us for our first ever Virtual TPRM Tool Talk Fair, where TPRM Service Providers will share with you their innovative products & services! +8 more Register Beyond Compliance: Cultivating Sustainable Partnerships for Resilient Growth Wed, Sep 18 Virtual Conference Sep 18, 2024, 9:00 AM – 4:00 PM CDT Virtual Conference Sep 18, 2024, 9:00 AM – 4:00 PM CDT Virtual Conference Join us for our 2024 Virtual Conference! Free & open to all! Register CONTACT US OUR INFORMATION Address: P.O. Box 824 Ankeny, Iowa 50021 USA ​ Email: info@tprassociation.org For any general inquiries, please fill in the following contact form: Thanks for reaching out! We'll get back with you as soon as possible! Send contact BACK TO TOP

TPRM Tools At the Third Party Risk Association we know that finding the right vendor for your needs can be a challenge. Often, organizations may not even know the potential vendors in the space. We're aiming to build an exhaustive list of TPRM vendors in various categories to make life a little easier for you. This list of TPRM Vendors is not affiliated with the TPRA, nor does the TPRA receive any monetary gain from listing them below. ​ If you are a TPRM Vendor and would like to be included in the list below, please email Julie Gaiaschi at Julie@tprassociation.org . Filter by Category Select Category Filter by TPRA Membership Select Status Search Clear Filters Number found: 95 Category Name TPRA Member? URL GRC Platform 360Factors Inc No https://www.360factors.com GRC Platform Archer Integrated Risk Management No https://www.archerirm.com/third-party-governance GRC Platform CoreStream No http://corestreamplatform.com GRC Platform DVV Solutions TPRM No https://www.dvvs.co.uk GRC Platform Diligent No https://www.diligent.com/ GRC Platform LogicManager No https://www.logicmanager.com/ GRC Platform MetricStream No https://www.metricstream.com GRC Platform Navex No https://www.navex.com/en-us/products/navex-irm-integrated-risk-management/third-party-risk-management/ GRC Platform Onspring No https://onspring.com/solutions/governance-risk-compliance/third-party-risk-management/ GRC Platform OpenPages GRC by IBM No https://www.ibm.com/products/openpages-with-watson?utm_content=SRCWW&p1=Search&p4=43700070084211913&p5=p&gclid=f61d865decc71a305683e4bf26ab6b2c&gclsrc=3p.ds GRC Platform RiskOptics formerly Reciprocity No https://reciprocity.com/ GRC Platform SAI 360 GRC No https://www.sai360.com/ GRC Platform SAP Risk Management No https://www.sap.com/products/financial-management/risk-management.html GRC Platform ServiceNow GRC No https://www.servicenow.com/products/governance-risk-and-compliance.html GRC Platform Standard Fusion No https://www.standardfusion.com/ GRC Platform TutelaSolutions No https://www.tutela-solutions.com/ Risk Ratings/Intelligence Argos No https://argosrisk.com Risk Ratings/Intelligence BitSight No https://www.bitsight.com Risk Ratings/Intelligence Black Kite Yes https://blackkite.com/ Risk Ratings/Intelligence BreachSiren Yes https://breachsiren.com Risk Ratings/Intelligence Continuity Strength No https://continuitystrength.com/corporate-support Risk Ratings/Intelligence Cyberwrite No https://www.cyberwrite.com/ Risk Ratings/Intelligence Dun & Bradstreet No https://www.dnb.com/solutions/manage-supplier-risk.html Risk Ratings/Intelligence Findings No https://findings.co/ Risk Ratings/Intelligence FortifyData No http://www.fortifydata.com Risk Ratings/Intelligence ISS Corporate Solutions No https://www.isscorporatesolutions.com/solutions/security-suite/ Risk Ratings/Intelligence Interos No https://www.interos.ai/ Risk Ratings/Intelligence Ionix previously Cyberpion No https://www.ionix.io/ Risk Ratings/Intelligence KHARON No https://www.kharon.com/ Risk Ratings/Intelligence Ncontracts Yes https://www.ncontracts.com/ Risk Ratings/Intelligence Orpheus Cyber No https://www.orpheus-cyber.com Risk Ratings/Intelligence Owlin No http://www.owlin.com Risk Ratings/Intelligence Panorays No https://www.panorays.com Risk Ratings/Intelligence RapidRatings Yes https://www.rapidratings.com/ Risk Ratings/Intelligence Recorded Future No https://www.recordedfuture.com Risk Ratings/Intelligence RiskRecon Yes https://www.riskrecon.com Risk Ratings/Intelligence Security Scorecard No https://www.securityscorecard.io Risk Ratings/Intelligence Supply Wisdom Yes https://www.supplywisdom.com/ Risk Ratings/Intelligence The Smart Cube, a WNS company No https://www.thesmartcube.com/solutions/procurement-supply-chain/supplier-risk-intelligence/ Risk Ratings/Intelligence UpGuard No https://www.upguard.com/ Risk Ratings/Intelligence Vendict No https://www.vendict.com/ TPRM Platform Aravo Yes https://www.aravo.com TPRM Platform Censinet No https://www.censinet.com TPRM Platform Clarity360 (Kroll) No https://www.krollclarity.com/ TPRM Platform Coverbase Yes https://coverbase.ai/ TPRM Platform Crossword Cybersecurity No https://www.crosswordcybersecurity.com/ TPRM Platform CyberGRX (now ProcessUnity) No https://www.cybergrx.com TPRM Platform DoubleCheck Software No http://www.doublechecksoftware.com TPRM Platform EthixBase360 (formerly EthixBase) No https://ethixbase360.com/ TPRM Platform Exiger Yes https://www.exiger.com/ TPRM Platform Gatekeeper No https://www.gatekeeperhq.com TPRM Platform GraphiteConnect No https://www.graphiteconnect.com/ TPRM Platform Lema Yes https://www.lema.ai/ TPRM Platform Mirato No https://mirato.com/ TPRM Platform OneTrust Yes https://www.onetrust.com TPRM Platform Prevalent No https://www.prevalent.net TPRM Platform ProcessBolt No https://www.processbolt.com TPRM Platform ProcessUnity Yes https://www.processunity.com TPRM Platform Protecht No https://www.protechtgroup.com/en-us/ TPRM Platform Risk Ledger No https://riskledger.com/ TPRM Platform S&P Global KY3P® No https://www.spglobal.com/marketintelligence/en/mi/products/ky3p.html TPRM Platform Smarsh (formerly Privva) No https://www.smarsh.com/platform/cybersecurity-risk-management/vendor-risk-management TPRM Platform Sphera (formerly RiskMethods) No https://sphera.com/supply-chain-risk-management/ TPRM Platform Start No https://www.startvrm.com/ TPRM Platform TDI Yes https://tdinternational.com/ TPRM Platform ThirdPartyTrust (a Bitsight company) No https://www.thirdpartytrust.com TPRM Platform TrustExchange No https://www.trustexchange.com TPRM Platform VISO TRUST Yes https://www.visotrust.com TPRM Platform Velocity No https://www.velocitysec.com/ TPRM Platform VendorRisk No https://www.vendorrisk.com TPRM Platform Vendorly No https://www.vendorly.com/ TPRM Platform Venminder Yes https://www.venminder.com TPRM Platform Whistic Yes https://www.whistic.com TPRM Platform myCYPR No https://www.mycypr.com/ TPRM Services BDO USA No https://www.bdo.com TPRM Services CORL Technologies No https://www.corltech.com TPRM Services Cadre No https://www.cadre.net TPRM Services CastleHill Risk No https://www.castlehillrisk.com TPRM Services Certificial, Inc. No http://www.certificial.com TPRM Services ComplyScore No https://www.complyscore.com TPRM Services Copeland BUHL No https://www.copelandbuhl.com/ TPRM Services Crowe Yes https://www.crowe.com/services/consulting/third-party-risk-management TPRM Services Defentrix No https://www.defentrix.com/ TPRM Services Dixon Hughes Goodman No https://www.dhg.com/services/advisory TPRM Services Evident ID No https://www.evidentid.com TPRM Services Global Resilience Federation (GRF) Yes https://www.grf.org/ TPRM Services Grant Thorton No https://www.grantthornton.com/services/advisory-services/cybersecurity-and-privacy/third-party-risk TPRM Services HITRUST No https://hitrustalliance.net/ TPRM Services RSM US Yes https://rsmus.com/ TPRM Services Schneider Downs No https://www.schneiderdowns.com/third-party-risk-management TPRM Services SecureCrest No https://www.securecrest.com TPRM Services Source Callé No https://www.sourcecalle.com TPRM Services TUV OpenSky No https://www.tuvopensky.com TPRM Services VIVIDedge No https://www.vivid-edge.com/ TPRM Services Vendor Centric No https://www.vendorcentric.com

Back Third Party Cyber Risk Assessor (TPCRA) Certification Registration TPRA Premium Practitioner Members: Please proceed to our Premium Member Form to take advantage of your exclusive Premium Member discount, available for all TPRA Certification. Choose a TPRA Certification Choose an option I am registering for… Examination - $450 Training - $360 Examination & Training Bundle - $720 Examination Retake - $180 I am a... (Your membership status will be validated by TPRA) Choose an option TPRA Premium Practitioner Members, Please proceed to our Premium Member Form (linked above) to take advantage of your exclusive Premium Member discount, available for all TPRA Certification. First Name Last Name Title Organization Email Code Phone Street Address City Region/State/Province Postal / Zip code Country Do you have at least three years in a full-time risk management/analyst and/or cybersecurity related role? Choose an option If “No”, will you be providing a substitution or deferring achivement? Choose an option Substitutions may be obtained for a maximum of one year. Select your relevant substitution below: Choose an option Additional substitutions for work experience will be taken into consideration during the application process and reviewed/approved by the TPRA. Enter substitution below. On what date will you be eligible to receive your certification designation? What was the date of your last exam? I have downloaded the Work Experience Form. (Please download and complete the "Work Experience Form.” Evidencing your work experience is required and must be completed before your TPCRA certification status can be approved. Evidence of work experience is not required for those participating in the training only and/or not sitting for the exam.) View Work Experience Form I have reviewed the Practitioner Code of Conduct. (If purchasing Examination and/or Training + Examination Bundle, click the file below to view the Code of Practitioner Conduct.) View Code of Practitioner Conduct Please sign and date below indicating that you have read and agree to the Third Party Risk Association (TPRA) Code of Practitioner Conduct. Clear Input today’s date By completing and submitting this application, you attest that your answers are truthful to the extent of your ability and knowledge. Failure to provide accurate information will result in your application being rejected and put your eligibility for future TPRA certifications under consideration by TPRA Staff, Certification Program Personnel, and the TPRA Board of Directors. Go to Checkout You must proceed to the checkout page and complete payment for your certification in order to join the program and receive further communication. Thank you for applying for a TPRA Certification! You will receive next steps via email shortly.

Back Third Party Risk Management Practitioner (TPRMP) Certification Registration TPRA Premium Practitioner Members: Please proceed to our Premium Member Form to take advantage of your exclusive Premium Member discount, available for all TPRA Certification. Choose a TPRA Certification Choose an option I am registering for… Examination - $500 Training - $400 Examination & Training Bundle - $800 Examination Retake - $200 I am a... (Your membership status will be validated by TPRA) Choose an option TPRA Premium Practitioner Members, Please proceed to our Premium Member Form (linked above) to take advantage of your exclusive Premium Member discount, available for all TPRA Certification. First Name Last Name Title Organization Email Code Phone Street Address City Region/State/Province Postal / Zip code Country Do you have at least three years in a full-time risk management/analyst and/or cybersecurity related role? Choose an option If “No”, will you be providing a substitution or deferring achivement? Choose an option Substitutions may be obtained for a maximum of one year. Select your relevant substitution below: Choose an option Additional substitutions for work experience will be taken into consideration during the application process and reviewed/approved by the TPRA. Enter substitution below. On what date will you be eligible to receive your certification designation? What was the date of your last exam? I have downloaded the Work Experience Form. (Please download and complete the "Work Experience Form.” Evidencing your work experience is required and must be completed before your TPCRA certification status can be approved. Evidence of work experience is not required for those participating in the training only and/or not sitting for the exam.) View Work Experience Form I have reviewed the Practitioner Code of Conduct. (If purchasing Examination and/or Training + Examination Bundle, click the file below to view the Code of Practitioner Conduct.) View Code of Practitioner Conduct Please sign and date below indicating that you have read and agree to the Third Party Risk Association (TPRA) Code of Practitioner Conduct. Clear Input today’s date By completing and submitting this application, you attest that your answers are truthful to the extent of your ability and knowledge. Failure to provide accurate information will result in your application being rejected and put your eligibility for future TPRA certifications under consideration by TPRA Staff, Certification Program Personnel, and the TPRA Board of Directors. Go to Checkout You must proceed to the checkout page and complete payment for your certification in order to join the program and receive further communication. Thank you for applying for a TPRA Certification! You will receive next steps via email shortly.

Back Third Party Cyber Risk Assessor (TPCRA) Certification Registration TPRA Premium Practitioner Members: Please proceed to our Premium Member Form to take advantage of your exclusive Premium Member discount, available for all TPRA Certification. Choose a TPRA Certification Choose an option I am registering for… Examination - $500 Training - $400 Examination & Training Bundle - $800 Examination Retake - $200 I am a... (Your membership status will be validated by TPRA) Choose an option TPRA Premium Practitioner Members, Please proceed to our Premium Member Form (linked above) to take advantage of your exclusive Premium Member discount, available for all TPRA Certification. First Name Last Name Title Organization Email Code Phone Street Address City Region/State/Province Postal / Zip code Country Do you have at least three years in a full-time risk management/analyst and/or cybersecurity related role? Choose an option If “No”, will you be providing a substitution or deferring achivement? Choose an option Substitutions may be obtained for a maximum of one year. Select your relevant substitution below: Choose an option Additional substitutions for work experience will be taken into consideration during the application process and reviewed/approved by the TPRA. Enter substitution below. On what date will you be eligible to receive your certification designation? What was the date of your last exam? I have downloaded the Work Experience Form. (Please download and complete the "Work Experience Form.” Evidencing your work experience is required and must be completed before your TPCRA certification status can be approved. Evidence of work experience is not required for those participating in the training only and/or not sitting for the exam.) View Work Experience Form I have reviewed the Practitioner Code of Conduct. (If purchasing Examination and/or Training + Examination Bundle, click the file below to view the Code of Practitioner Conduct.) View Code of Practitioner Conduct Please sign and date below indicating that you have read and agree to the Third Party Risk Association (TPRA) Code of Practitioner Conduct. Clear Input today’s date By completing and submitting this application, you attest that your answers are truthful to the extent of your ability and knowledge. Failure to provide accurate information will result in your application being rejected and put your eligibility for future TPRA certifications under consideration by TPRA Staff, Certification Program Personnel, and the TPRA Board of Directors. Go to Checkout You must proceed to the checkout page and complete payment for your certification in order to join the program and receive further communication. Thank you for applying for a TPRA Certification! You will receive next steps via email shortly.

2024 Trade Show Sponsorship Review the steps below to learn how to apply for and take full advantage of Sponsorship for TPRA's 2024 TPRM Tools of the Trade Show! Get started by reviewing our Sponsorship Brochure ! View Brochure Step 1 Review Sponsorship Brochure Review our Sponsorship Brochure to learn all about our available sponsorship opportunities and what to expect from this event! Read All Step 2 Submit Sponsor Interest Form Submit your Sponsor Interest Form to let our team know you'd like to sponsor this event! We'll reach out shortly with a Sponsor Agreement and next steps. Read All Step 3 Sign & Return Sponsor Agreement Please sign your Sponsor Agreement and return to Heather Kadavy at heather.kadavy@tprassociation.org as soon as possible. Read All Step 4 Complete Payment Complete payment of your sponsorship at your earliest convenience. You can pay via credit card below or request an invoice from Heather . Read All Step 5 Sponsor Information & Virtual Booth Form Submit your Sponsor Information Form as soon as possible so we can get your info on our website agenda! Read All Step 6 Speaker Information & Agreement Form Have your demo presenter submit their Speaker Information & Agreement Form as soon as possible so we can confirm them as a speaker and add their info to the website agenda. Read All Step 7 Presentations Your demo can be a presentation, live demo of your products/services, or a combination of both. If you are putting together a PowerPoint presentation, please submit it via our online form no later than July 10, 2024 . Submitting your slide deck or other relevant materials allows TPRA to assist your presenter, should they experience technical difficulties during their time slot. Presentations will not be stored long-term or shared by TPRA in anyway following the event. Please submit your presentation as soon as possible to ensure TPRA has ample time to prepare and ensure the success of this event. Read All 2024 Trade Show Quick View Non-Member Trade Show Sponsor Price $5,000.00 Excluding Sales Tax Add to Cart Virtual Lobby Booth Area Example Booths

External Events The TPRA promotes the industry of third party risk, which includes events conducted by other third party risk-related groups and organizations. Check back here regularly to see our list of external events. If you would like to promote your next third party risk-specific event, please email info@tprassociation.org . Disclaimer: TPRA does not endorse or sponsor the products/services of one particular organization; however, we do communicate training opportunities for the benefit of the community. OneTrust Embedding trust by design across the AI lifecycle Webinar May 7, 2024 10 AM EDT In this webinar, we’ll look at the AI development lifecycle and key considerations for governing each phase. Register Venminder Vendor Contract Management for Beginners Webinar May 7, 2024 2 PM ET A well-written vendor contract is one of your most valuable tools for managing third-party risks. The contract is essential for protecting your organization and its customers. This webinar will look at the vendor contracting process, walk you through that process, show you some contract examples, discuss how this might apply to your current process, discuss some specific contract considerations, and much more. Familiarizing yourself with these basic concepts will provide you with a newfound confidence in the vendor contract management process. Register now to learn: Vendor contract management basics The process of vendor contract management Service level agreements (SLAs) Ongoing contract management Contract termination Key takeaways Register OneTrust Empowering your cyber defense: Key insights into the latest NIST CSF update with PwC Webinar May 8, 2024 11 AM EDT Join this webinar with OneTrust and PwC and gain insights into the upcoming NIST CSF update and learn how to effectively deploy it across your organization. Register OneTrust Third-Party risk management and due diligence: What's the difference and why does it matter? Webinar May 8, 2024 11 AM EDT In this webinar, we’ll discuss the unique competencies of third-party risk and due diligence programs and examine when and how to align them. Register Global Resilience Federation (GRF) GRF Cross Sector Collaboration Threat Call Webinar May 9, 2024 11 AM ET Second Thursday of each month at 11:00 AM ET Register Venminder Performing a Complete Vendor Contract Review Webinar May 9, 2024 11 AM ET The contract management process isn’t only about negotiating the best financial and legal terms for your organization. It’s also a key component of managing risk and vendor relationships. Comprehensive contract reviews help your organization protect itself and its customers, as well as manage the risk the vendor brings to the relationship. Join this session where presenters will walk step-by-step through how to review a vendor contract. They’ll discuss key contract terms and conditions to include clauses and sample language, and how your organization’s exit strategy fits within vendor contract management. Register now to learn: Key elements of the vendor contract Addressing fourth parties in your contracts Key performance indicators and service level agreements Exit strategies Common contract language and clauses Key takeaways Register RSM Level up and adapt: Evolving your cybersecurity strategy to align with NIST CSF 2.0 Webinar May 14, 2024 2 PM EDT Join our upcoming webcast, "Level up and adapt: Evolving your cybersecurity strategy to align with NIST CSF 2.0," where we will explore the transition from National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 1.1 to the recently released NIST CSF 2.0. It will guide listeners on how to level up their cybersecurity strategies by aligning with the evolving framework and adapting to the new security landscape. Register Venminder Strategies to Mature Your Vendor Risk Management Program Webinar May 21, 2024 11 AM ET You have already established the foundation for your vendor risk management program, but what should be your next steps? How can you attain program maturity? When you need to move beyond the basics, where should you focus your time and effort to enhance and optimize your vendor risk management program? Join this comprehensive webinar to learn more about achieving vendor risk management program maturity, and tools and techniques to get there. Additionally, it’ll cover some helpful tips for overcoming any obstacles that may arise along the way. Register now to learn: The attributes of a mature vendor risk management program Steps and actions to drive program maturity Correctly identifying the right issues for improvement and removing barriers Using a program maturity roadmap Measuring and reporting your success Key takeaways Register Ncontracts Governance: A Blueprint for Financial Institution Leaders Webinar May 21, 2024 1 PM CST What does effective governance look like at a financial institution? How do you create an environment where oversight, accountability, and risk mitigation drive long-term success? Find out as Rafael DeLeon, a bank director and former OCC examiner, takes you on a deep dive into corporate governance – sharing real-world insights, knowledge, and strategies for a robust program. This roadmap will highlight the critical components of corporate governance including: Regulatory expectations Roles & responsibilities Risk mitigation Aligning with strategic goals Cultivating accountability Don’t miss this webinar and the opportunity to learn how ensure your institution has the governance it needs to operate efficiently, responsibly, and sustainably. Register OneTrust Unlocking data as a strategic asset Webinar May 29, 2024 11 AM EST Learn how to enhance your privacy program maturity to deliver strategic business value with first-party data, create dynamic end-user experiences, and more. Register Global Resilience Federation (GRF) 2024 GRF Summit on 3rd Party Risk and Security In-Person Conference November 12, 2024 Lake Buena Vista, Florida Walt Disney Dolphin Hotel Networking and Education on Critical Third-Party and Cybersecurity Issues, for Mutual Resilience The conference features dozens of speakers on third-party risk management, cloud security, emerging cybersecurity threats, and AI/machine learning threat mitigation and management. Attendees will gain an understanding of how some of the largest and most sophisticated organizations in the world are managing risk, and leave the conference better armed to defend their company, regardless of its size or the status of its risk mitigation program. Register

Women Lead Back Welcome to the Women In TPRM (WNTPRM) "Women Lead" Program! ​ This page is dedicated to showcasing inspiring Women Leaders by highlighting their stories. Our goal for this program is to learn from and be inspired by women leaders in the field of Third Party Risk Management (TPRM) throughout various industries. ​ Please see the form at the bottom of the page to nominate (or apply for) our next "Women Lead" spotlight. Ejona Preci Principle Manager - Cybersecurity Risk FREENOW WNTPRM April 2024 Leader Spotlight April 1, 2024 Read More Natasa Simovic Third Party Risk Analyst Telesign Corporation WNTPRM January 2024 Leader Spotlight January 1, 2024 Read More Merav Vered VP GRC & Strategic Intiatives Vendict Ltd. WNTPRM October 2023 Leader Spotlight October 1, 2023 Read More Franchesca Williams SVP, Director of Third Party Risk Management Ameris Bank WNTPRM July 2023 Leader Spotlight July 1, 2023 Read More Chris Phillips VP, Procurement and Vendor Risk Lendmark Financial Services WNTPRM April 2023 Leader Spotlight April 1, 2023 Read More Olga Baldwin VP, Vendor Management Axiom Bank WNTPRM December 2022 Leader Spotlight January 3, 2023 Read More Heather Kadavy, CERP, CBVM, CFSSP AVP Third Party Risk Management & Information Security Officer Union Bank and Trust Company WNTPRM October 2022 Leader Spotlight October 3, 2022 Read More Gokcen Tapkan Director of Data Research Black Kite WNTPRM March 2024 Leader Spotlight March 1, 2024 Read More Raquel Wilson Third Party Risk, Senior Analyst DocuSign WNTPRM December 2023 Leader Spotlight December 1, 2023 Read More Tiffany King Senior Director TD International (TDI) WNTPRM August 2023 Leader Spotlight August 1, 2023 Read More Morgan Binder Third Party Risk Program Manager Stripe WNTPRM June 2023 Leader Spotlight June 1, 2023 Read More Madiha Fatima Director - Head of Third Party Risk Management Angelo Gordon WNTPRM March 2023 Leader Spotlight March 3, 2023 Read More Preeti Temple Executive Director, Third Party Risk USAA WNTPRM December 2022 Leader Spotlight December 1, 2022 Read More Tiffany Bray VP, Third Party Risk Manager Seacoast Bank WNTPRM February 2024 Leader Spotlight February 1, 2024 Read More Glee Coffeen SVP, Head of Policy and Practice Adherence Truist Financial Corp WNTPRM November 2023 Leader Spotlight November 1, 2023 Read More Kim LaBarbiera Director & Counsel of Third-Party Risk American Express WNTPRM September 2023 Leader Spotlight September 1, 2023 Read More Jennifer Jones National Practice Leader/Principal FORVIS WNTPRM May 2023 Leader Spotlight May 1, 2023 Read More Vicki Dean Senior Strategic Sales Director Supply Wisdom WNTPRM February 2023 Leader Spotlight February 3, 2023 Read More Jill Czerwinski Managing Partner - Third Party Risk Services Crowe LLP WNTPRM November 2022 Leader Spotlight November 1, 2022 Read More If you know of an inspiring Leader you think should be featured by WNTPRM, complete the form linked below! Leader Form

TPRA Incubator Program Welcome to the TPRA Incubator Program, created to be a catalyst for transformative innovation in third party risk management (TPRM) Read More Apply About Mission Empower and accelerate the success of innovative third party risk management startups through a comprehensive incubator program. We strive to foster a collaborative ecosystem that provides mentorship, resources, and networking opportunities, enabling startups to navigate challenges, develop cutting-edge solutions, and establish a robust presence in the evolving landscape of risk management. Vision To be a catalyst for transformative innovation in third party risk management, fostering a dynamic ecosystem where startups thrive in pioneering solutions that redefine industry standards. We aspire to build a global community of resilient and adaptive risk management leaders who contribute to a secure and trustworthy business environment. Through our incubator program, we envision a future where emerging startups play a pivotal role in shaping the evolution of risk management practices, driving sustainability, and ensuring resilience in an ever-changing landscape. Transforming the Industry Together Incubator Participants Who Can Participate Innovative Third Party Risk Management Startups Apply Now Only start-up organizations within the Third Party Risk Management space Start-up must be five years old or less and/or within the pre-seed, seed, or early stage (Series A and Series B) Start-ups must not bring in more than $500,000 of revenue annually from product/service offerings Must complete an application and potentially an interview Must provide evidence of the revenue the organization generates from products/services within their last and/or current financial year TPRA retains the right to deny any organization and/or individual entry into the Incubator Program for any reason Goals & Activities The goals and activities of the Incubator Program are to assist with removing roadblocks within the community to allow for better communication, tighten feedback loops to ensure community needs are addressed, and to be a catalyst for innovation within the community. The program will also allow for a common lexicon when speaking about TPRM programs and the value they bring to organizations. Below are the goals and activities related to the TPRA’s Innovator Program: 1 TPRA Vendor Membership Receive “Incubator Status” Vendor Membership based on the Program Tier structure below. Would receive all of the benefits of an “Advocate” Member. Benefits include: Orientation & On-boarding Three website accounts Quarterly updates Invitations to practitioner meetings Website Access Service Provider Profile LinkedIn Welcome Message Share your resources, events, surveys, & job openings with TPRA members Newsletter Spotlight & Links to Blogs Write blogs for TPRA 3 Access to Resources Share TPRA resources, webinars, and training opportunities. TPRA will create a website to share external resources for Incubator Program members only (to include company names and URLs for investment firms, other incubator programs, and other start-up accelerators). 5 Mentorship TPRA will create a network of mentors for the Incubator participants that may include other CEOs and service providers. 7 Brand Awareness TPRA to note the incubator participant’s organization on the TPRA website (within Service Provider Profile), highlight the organization on LinkedIn, and note the organization as a spotlight within one of the TPRA’s quarterly newsletters. 9 Collaboration on Additional Resources In collaboration with TPRA, may participate in educational trainings, research, & content creation (such as blog posts, whitepapers, & videos). 2 Insight Exchange Set up regular 1:1 meetings (most likely quarterly) with select practitioners (based on industry and company size) to provide program participants with feedback on their products/services. This can also assist with the incubator program participant figuring out their product market fit, target market, and product/service pitch. Can also assist with the participant better understanding if they are addressing their market’s TPRM pain points. TPRA to create a site for Practitioners to note TPRM pain points and/or note request for innovation. (Note: Can have the community vote on what they would like to see the most.) Incubator Participants would be able to access this list. 4 Network Opportunities TPRA will create network opportunities to introduce incubator program participants other program participants, practitioners, and other service providers. 6 Training & Skill Development Incubator participants may attend TPRA webinars, events, and activities on the website to enhance TPRM skill development. 8 Lead Generation Opportunities TPRA to provide incubator participants with discounts on conference sponsorships and demo opportunities. Sponsorships come with opt-in lists. TPRA to create a site for Practitioners to submit RFPs for TPRM tools and for incubator participants (as well as TPRA Vendor Members) to respond to them. 10 Feedback & Improvement of Incubator Program From time to time, participants will receive surveys that request feedback on the Incubator Program. Responses will be used to continually enhance the program. Apply Now Have Questions? Let us know! Address P.O. Box 824 Ankeny, Iowa 50021 USA Email info@tprassociation.org Follow

< Main Page Incubator Application Service provider organizations just starting out are invited to apply for our incubator program, provided they fulfill all participant requirements . Apply Now Program Tier Structure Apply Now Interested organizations can participate in the Incubator Program via a tier noted below. The cost of participation is dependent upon the participating organization's current revenue from products/services, and growth. Tier Tier by Revenue & Growth Stage (Receiving revenue from sale of product/services) Dollar Tier Marketing Incubator to Provide to TPRA Tier 1 $0 - $100,000 $250 5 emails on membership, 10 referrals, & two conference promotional emails Tier 2 $100,001 - $200,000 $1,000 4 emails on membership, 8 referrals, & two conference promotional emails Tier 3 $200,001 - $300,000 $2,000 3 emails on membership, 6 referrals, & two conference promotional emails Tier 4 $300,001 - $400,000 $4,000 4 emails on membership, 8 referrals, & two conference promotional emails Tier 5 $400,001 - $500,000 $6,000 2 emails on membership, 4 referrals, & two conference promotional emails Note: If your organization brings in a revenue greater than $500,000 per year, then that organization should apply for our Advocate Vendor Membership plan ($8,000). TPRA retains the right to deny any organization and/or individual entry into the Incubator Program for any reason. Application Organization Information Organization Name Organization Website Organization Email Organization Address Street Address Line 2 City Region/State/Province Postal / Zip code Country Next

< Main Page Previous Lunch 12:00 PM to 12:55 PM Next

< Main Page Previous TPRM Platform 11:00 AM to 11:25 AM Next