FOR IMMEDIATE RELEASE Interos and Aravo Awarded 2025 Excellence Awards by Third Party Risk Association Monday, March 24, 2025 1/1 Interos and Aravo Named Third Party Risk Association's (TPRA) 2025 Excellence Award Winners in the Categories of Risk Rating/Risk Intelligence and TPRM Platform ANKENY, IOWA — MARCH 24, 2025 — Last week, the Third Party Risk Association (TPRA) announced their 2025 winners for the Excellence Awards, a sub-category of their Third Party Risk Management (TPRM) Service Provider Innovator Award. “These organizations are constantly pushing boundaries, developing forward-thinking solutions, and streamlining risk management processes,” said Julie Gaiaschi, CEO and Co-founder of TPRA, during the award announcement speech. “They also empower practitioners to think smarter, react faster, and provide efficiencies in assessing, mitigating, and monitoring third party risk.” To celebrate TPRM service providers’ relentless dedication and industry-transforming contributions, TPRA established the Innovator Award in 2022, creating the new Excellence Award sub-categories in 2025. TPRA had a total of 30 nominations for the award this year in the categories of GRC/TPRM Platform, Risk Ratings/Intelligence Tools, and TPRM Services. Seven organizations were chosen as finalists, with two organizations, Aravo and Interos , named as Excellence Award winners in their respective tool categories. Aravo , the TPRM Platform Excellence Award winner, uses their AI engine to collaborate with multiple risk intelligence partners to enable customers to access authorized information as their primary information and assessment vehicle. This “Intelligence First” approach shifts risk assessments away from questionnaires towards real-time intelligence integrations, focusing on actual evidence and reports obtained and comparing it to control frameworks. The Excellence Award winner for Risk Rating/Intelligence, Interos , is redefining supplier resilience through AI-powered, real-time visibility. Their platform allows you to anticipate disruptions, ensuring programs move from reactive to proactive and predictive. For example, they allow you to see the impact of tariffs on global trade and your supply chain. To learn more about this program and its winners, visit https://www.tprassociation.org/innovator-award . ### The Third Party Risk Association was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. This organization is a 501(c)(6) not-for-profit. MEDIA CONTACT Meghan Schrader Meghan.schrader@tprassociation.org www.tprassociation.org FOR MORE INFORMATION https://www.tprassociation.org/innovator-award Previous Next

Learn about Oksana Zbyranyk, Chief Compliance and Delivery Officer for Truvo Cyber, and TPRA's WNTPRM October 2025 Leader Spotlight. < See All < Previous Next > Oksana Zbyranyk Chief Compliance and Delivery Officer Truvo Cyber Biography Oksana is a highly credentialed cybersecurity professional, specializing in compliance and risk management. Her expertise spans leading frameworks such as NIST, SOC 2, ISO 27001, and other, enabling organizations to meet complex compliance requirements and build trust with prospects and customers. A leader in Vendor Risk Management, Oksana successfully developed and implemented a robust Third-Party Risk Management (TPRM) program for the Bank of Canada, ensuring vendor risks were effectively assessed and mitigated. Her in-depth understanding of vendor security frameworks and contractual safeguards has empowered organizations to secure their vendor ecosystems while maintaining regulatory compliance. With her ability to integrate best practices, streamline compliance processes, and develop actionable strategies, Oksana is a trusted advisor for organizations seeking to enhance their security posture and meet compliance objectives. Leadership Characteristics Execution-Driven Leadership (Strengths: Achiever, Responsibility, Discipline): I am highly reliable, goal-oriented, and committed to delivering results. Relationship & Trust-Building Leadership (Strengths: Relator, Trust, Connectedness): As a trusted advisor, I build strong relationships with clients and stakeholders, ensuring compliance is not just a requirement but a value-driven process that fosters trust. This is key in vendor risk management, where collaboration and clear communication are critical. Problem-Solving & Risk Mitigation Leadership (Strengths: Restorative, Responsibility, Deliberative): My focus on risk assessment and mitigation aligns with leaders who analyze risks thoroughly, make careful decisions, and take ownership of challenges. I thrive in environments where critical thinking and sound judgment are essential. Leadership Challenges Getting business buy-in when a vendor’s security posture is weak is a constant challenge because security is rarely the top priority for stakeholders. The business wants the vendor now, procurement is focused on cost, and executives don’t see an immediate risk—until something goes wrong. The pushback is: “Do we really need to delay this over a security concern?” The key is to shift the conversation from abstract risks to real business impact—breach costs, regulatory fines (GDPR), and lost deals with security-conscious customers. A vendor without basic security controls isn't just a compliance issue; it’s a liability waiting to happen. Instead of a hard “no,” I push for risk-based onboarding—tying security improvements to timelines and contracts. Legal and compliance can help enforce this, and external pressure from clients expecting strong security can be a game-changer. At the end of the day, it’s about making security a business decision, not just a checkbox. Key Take-a-ways If there’s one thing I’d tell others in the industry about Third-Party Risk Management (TPRM), it’s that vendor security isn’t just a compliance exercise—it’s a business enabler. Too often, organizations treat TPRM as a checkbox process, but the reality is that a weak vendor can take down your entire business. The best part of TPRM for me is the "negotiation and influence"—turning security from an afterthought into a non-negotiable business priority. Whether it’s getting executives to see the real risk, pushing vendors to meet higher standards, or leveraging security as a competitive edge, TPRM is where cybersecurity meets strategy. Fun Fact I was born in a place where there was only winter. I studied in a place where there was only summer. And I landed in a place with 4 beautiful seasons. Canada is home.

Being a leader is often about mastering the more subtle aspects of communication and interpersonal relationships. Learn how through a variety of resources. All Categories Previous Category Next Category Soft Skills Filter by Resource Type Blogs & Articles Book Ted Talk Found 6 Book Becoming You: The Proven Method for Crafting Your Authentic Life and Career by Suzy Welch Discover your true self and build a fulfilling career with Suzy Welch, director of NYU Stern;s Initiative on Purpose and Flourishing. Drawing from her popular NYU class, Welch provides a dynamic, step-by-step guide to uncovering your purpose in today's fast paced world. Check It Out Tuesday, May 6, 2025 Ted Talk How vulnerability makes you a better leader As the founder of a startup, Tracy Young often worried that employees and investors valued male CEOs more -- and that being a woman compromised her position as a leader. In this brave, personal talk, she gives an honest look at the constraints women face when trying to adapt to a male-dominated business culture -- and shares how she developed the courage and vulnerability to lead as her complete, raw self. (This talk contains a graphic story. Discretion is advised.) Check It Out Meghan Schrader Tuesday, March 2, 2021 Blogs & Articles 'Sorry' but these are things women should never write in an email "When it comes to emails, it isn't a surprise that men and women communicate differently. But research shows that when certain writing styles are used by women, the message can be received differently." Check It Out Meghan Schrader Monday, August 5, 2019 Blogs & Articles The Language Women Use in the Workplace and What it Means "As a woman, have you ever found yourself using the phrases “I may be wrong, but…”, or “I’m not an expert in this, but…”, or excessively using the word “sorry…”? Research has found that women are much more likely to use self-deprecating or ‘softer’ language in the workplace. Let’s take a closer look at what language women tend to use and why." Check It Out Meghan Schrader Wednesday, May 19, 2021 Ted Talk Crucial Facts You Need To Know About Your Voice In Your Career Why do top all the professionals, executives, organizational leaders and speakers get a voice coach to help them? When you can communicate what is remarkable, and exceptional about you, you then become irreplaceable in the marketplace. Here are a few defining facts. Your voice speaks louder than what you have to say. Your voice makes people believe what you say. Just a small adjustment can make a big difference to your speaking. Think about it….what do you hope to accomplish with your communication skills and is your voice ready? Check It Out Meghan Schrader Tuesday, December 8, 2020 Ted Talk Get Comfortable with Being Uncomfortable Luvvie Ajayi Jones isn't afraid to speak her mind or to be the one dissenting voice in a crowd, and neither should you. "Your silence serves no one," says the writer, activist and self-proclaimed professional troublemaker. In this bright, uplifting talk, Ajayi Jones shares three questions to ask yourself if you're teetering on the edge of speaking up or quieting down -- and encourages all of us to get a little more comfortable with being uncomfortable. Check It Out Meghan Schrader Tuesday, January 2, 2018

Learn about Abigail Pia Magat, TPRM Manager for EY GDS Philippines, and TPRA's WNTPRM July 2024 Leader Spotlight. < See All < Previous Next > Abigail Pia Magat TPRM Manager EY GDS Philippines Biography Abigail is a Third Party Risk Manager at EY GDS Philippines. She has spent the duration of her career in fraud prevention, risk management and regulatory compliance. She is currently focused on third-party risk management and threat risk assessment. She manages end-to-end TPRM Programs that includes Risk Profiling, Third-Party Risk Assessments, Findings management, etc. that is aligned to different information security standards, such as but not limited to, ISO27001, SOC 2 Type 2, HIPAA/HITRUST, PCI-DSS, etc. Abigail played an integral role in the stabilization and growth of TPRM in EY GDS Philippines during the pandemic. She leveraged her experience and leadership skills, to ensure the team continued to perform at a high level and at the same time, capitalize on the growth opportunities presented. Leadership Characteristics Throughout the years, Abigail has shown great commitment to her work and is someone that can be trusted as she always carries herself with integrity. Abigail is also supportive to her direct reports and appreciative in the work they do. Additionally, Abigail is detail oriented and has great communication skills. Leadership Challenges A challenge a leader always faces is balancing the responsibilities of work and family, and taking care of their mental and physical health. As a leader, Abigail understands that her responsibilities increased and expectations are higher. The demand for success in her engagements, coupled with ensuring a high-performing team, meant increased pressure to perform. Abigail realized that the key to becoming effective in her role and maintaining a healthy balance was learning how to delegate and setting boundaries for work and personal life. Key Take-a-ways Cybersecurity Risks is continuously evolving as new threats and vulnerabilities are discovered. With the implementation of different Data Protection Laws and Regulatory, the risk appetite of organizations has shifted, investing time and effort in improving their cybersecurity governance and compliance. Although the use of Third Parties has a lot of benefits to organizations, it also comes with great responsibilities to ensure that the risks associated with third parties are identified, evaluated and addressed in a timely manner. Fun Fact Abigail enjoys collecting and listening vinyl records during her free time. She also loves spending time with her four adorable cats (Molly, Marly, Shadow and Mocha) and one dog (Max).

Learn about Seema Gupta, Business Information Security Officer for HII- Mission Technologies, and TPRA's WNTPRM June 2026 Leader Spotlight. < See All < Previous Next > Seema Gupta Business Information Security Officer HII- Mission Technologies Biography Seema Gupta is a cybersecurity and third-party risk leader with over 20 years of experience helping organizations navigate the intersection of technology, trust, resilience, and governance. Her career spans Aerospace & Defense, financial services, SaaS, and federal environments, where she has led initiatives focused on cybersecurity, supply chain resilience, vendor governance, and regulatory compliance in support of mission-critical operations. Seema has worked across business, technology, procurement, and risk functions to develop governance frameworks, strengthen customer trust, and support secure, scalable operations across complex enterprise environments. Beyond her professional work, Seema serves in nonprofit leadership roles focused on community impact and professional development, including as Vice Chair and Board Member of the Immigrant Giving Circle, where she supports fundraising, governance, and grant initiatives benefiting immigrant-focused organizations across the DMV region. She also contributes to the cybersecurity and project management community through mentorship, scholarship review, and advisory initiatives. Outside of work, Seema is an avid pottery enthusiast and enjoys the creative discipline and balance that comes from working with clay. Leadership Characteristics Deliberative Learner Analytical Context Relator Leadership Challenges 1. Leading Early in Male-Dominated Technical Environments One of the early challenges in my career was leading large enterprise technology implementations in environments where there were very few women in technical leadership roles. I built credibility by focusing on preparation, consistency, and relationship-building, while being transparent about where I needed guidance. Seeking mentorship and staying collaborative helped me successfully lead enterprise-scale programs and develop a leadership style grounded in accountability, adaptability, and continuous learning. 2. Building Technical Depth in Cybersecurity As my career evolved, I wanted to deepen my technical expertise in cybersecurity and risk management beyond program leadership. I addressed this by pursuing a Master’s degree in Secure Information Systems with a cybersecurity focus and later earning my CISSP certification. This combination of education and hands-on experience strengthened my ability to lead strategic conversations around security architecture, compliance, and third-party risk. 3. Overcoming Imposter Syndrome Like many professionals in high-visibility leadership roles, I have worked through moments of imposter syndrome. Over time, I learned that leadership is not about having every answer, but about sound judgment, continuous learning, and bringing the right people together to solve problems. I overcame this by seeking feedback, investing in growth, and focusing on the value I consistently delivered through execution, collaboration, and strategic thinking. Key Take-a-ways Thinking big! Always looking at ways to bridge the gaps between thought and practice. How does Cyber, Privacy, Finance, Operations and Legal have in common? And how do you bring it all together. Fun Fact I am a pottery enthusiast and love making things for family and friends (and giving them whether they want them or not).

Learn more about Safe Security, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Safe Security TPRM Platform Advocate Member CONTACT INFORMATION Nicola Sanna President nicola.s@safe.security SAFE One delivers the industry's only data-driven, unified platform for managing all of your third-party and enterprise cyber risks. SAFE delivers a TPRM solution that runs with minimum human intervention. SAFE’s specialized AI agents autonomously manage the full vendor assessment lifecycle — from outreach and evidence collection to risk analysis, follow-ups, reporting and even treatment recommendations— without needing constant oversight or manual input. TOP PRODUCT FUNCTIONALITY CATEGORIES Autonomous TPRM Experience via Agentic AI Auto-Discovery of Third and Fourth Parties Automated Vendor Tiering AI-based Vendor Interactions Outside-in Assessment Auto-Discovery of Vendor Trust Centers, Security and Privacy Policies Auto Due Diligence Continuous Monitoring Regulatory Compliance Mapping AI-powered analytics, reporting and dashboards RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about TPRA's available Vendor Member plans, the benefits included in each one, and how to join! TPRA Vendor Membership Becoming a TPRA Vendor Member isn't just about gaining leads and promoting your organization, it's about helping to further the industry of Third Party Risk Management (TPRM) by becoming an integral part of a community that establishes TPRM guidance, resources, and tools, and works to promote the value that TPRM professionals add to their organizations. INQUIRE ABOUT MEMBERSHIP This page is specific to Vendor Membership, but TPRA offers three types of membership to TPRM Service Providers depending on their needs, maturity, and/or revenue. A brief overview of each option can be found below, with links to explore further. Vendor Membership For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Learn More Consultant Catalyst For single Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services, typically with limited marketing budgets but high expertise. Learn More Incubator Program For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Learn More Vendor Member Benefits Connect with Targeted Audience Build relationships with third party risk professionals across industries through direct engagement opportunities, collaborative forums, and curated networking channels. Access Member-Only Insights Stay ahead of industry trends and challenges with exclusive access to community-driven insights, resources, and discussions. Highlight Your Solutions Showcase your tools, services, and innovations to the TPRM community through exclusive presentation and visibility opportunities designed to spark meaningful connections. Share Your Expertise Contribute your knowledge and thought leadership to the broader community through educational content and resource-sharing opportunities. Strengthen Your Brand Presence Enhance your brand recognition across TPRA platforms and communication channels through welcome features, spotlight opportunities, and tailored visibility touchpoints. Promote Events & Opportunities Expand your reach by promoting your relevant events, job openings, and initiatives directly to the TPRA practitioner network. Our Members Why Join? As a TPRA Vendor Member, you are recognized as an organization that believes in the mission of furthering the Third Party Risk Management profession through knowledge sharing and networking . Working together with Practitioners, you are an integral part of building a community that establishes TPRM guidance, resources, and tools, and works to promote the value that TPRM professionals add to their organizations. While the Third Party Risk Association is vendor-agnostic, we absolutely recognize the value our Vendor Members create not only in our profession, but also in the organizations our practitioners represent as well. Vendor Members are invited to leverage the Third Party Risk Association as a platform for increased brand recognition within our industry – we’ll support you with priority sponsorship opportunities , expedited customer support , and our partnership in providing you a voice within the larger TPRM community. Our membership and leadership can also serve as a resource offering unique insights into practitioner pain points and domain-specific challenges to inform your product offerings and prioritize your roadmaps. As we continue to grow, adding to our ever-evolving community of verified TPRM practitioners, the Third Party Risk Association will continue consulting our Vendor Membership for guidance on industry trends , emerging risks , and enhanced program automation effort s. The TPRA looks forward to working with you on furthering the profession of Third Party Risk Management together! INQUIRE ABOUT MEMBERSHIP Ready to Join? If you are looking to move forward with Vendor Membership, complete this form to begin the process! Our team will reach out soon with plan and pricing options. Contact Heather directly using the contact info below. Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

TRAINING TPCRA 4-Day November Training & Exam Bundle Monday, November 16, 2026 Date & Time Monday, November 16, 2026 at 4:00:00 PM CST Intended Audience Those interested in advancing their careers by taking TPCRA training Duration 12 hrs CPE Credits 12 Fee Starting at $340 Register Event Description The TPCRA Certification is a specialized qualification that validates expertise in assessing third-party cybersecurity controls, managing cyber risk assessments, and evidencing proficiency in cybersecurity assessment techniques, as well as establishing credibility for third-party risk management professionals. SPEAKER(S) INFORMATION CPE CREDIT Your Instructor Gregory Rasner Gregory is a CEO, author, educator, speaker, and leader in the field of cybersecurity, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has helped numerous clients and organizations improve their security posture and reduce their risk exposure. He is the founder and CEO of Third Party Threat Hunting LLC, a cybersecurity consulting firm that specializes in a wide range of areas, including cybersecurity, cloud computing, network architecture, and more. TPCRA training provides you with 12 hours of in-depth discussion on the examination domains, hands-on experience designing and performing cyber assessments, as well as opportunities to perform mock interviews and run through physical validation scenarios. Training is taught by a knowledgeable subject matter expert who has achieved the TPCRA Certification designation. Earn 12 CPE credits for attending 12 hours of TPCRA Training.

All TPRM professionals are invited to attend our "Open Meetings"! No TPRA membership is required. Meetings Open to All All TPRM professionals are invited to join us for these informative events! You do not need to have a TPRA Membership to attend. Members-Only Events Filter by Event Type Select Event Type CPE ELIGIBLE Panel: Risk Domain Deep Dives Date & Time Thursday, November 12, 2026 10:00 – 11:00 AM CT Intended Audience All TPRM Professionals CPEs Available: 1 Learn More Register Now LIVE WEBINAR Women In TPRM Meeting Date & Time Tuesday, November 17, 2026 1:00 – 2:00 PM CT Intended Audience All TPRM Professionals CPEs Available: 0 Learn More Register Now CPE ELIGIBLE Roundtable: TPRA Year In Review / Look Ahead + FUN! Date & Time Thursday, December 10, 2026 10:00 – 11:00 AM CT Intended Audience All TPRM Professionals CPEs Available: 1 Learn More Register Now TRAINING TPCRA 4-Day November Training Only Date & Time Monday, November 16, 2026 5 PM - 8 PM CT Intended Audience Those interested in advancing their careers by taking TPCRA training CPEs Available: 12 Learn More Register Now TRAINING AI for TPRM Professionals Date & Time Friday, November 20, 2026 12:00 – 4:00 PM CT Intended Audience All TPRM Professionals CPEs Available: 4 Learn More Register Now LIVE WEBINAR Women In TPRM Meeting Date & Time Tuesday, December 15, 2026 1:00 – 2:00 PM CT Intended Audience All TPRM Professionals CPEs Available: 0 Learn More Register Now TRAINING TPCRA 4-Day November Training & Exam Bundle Date & Time Monday, November 16, 2026 5 PM - 8 PM CT Intended Audience Those interested in advancing their careers by taking TPCRA training CPEs Available: 12 Learn More Register Now SEMINAR Soft Skills Summit: How to Handle Emotionally-Charged Situations in the Workplace Date & Time Wednesday, December 9, 2026 9:00 AM - 4:00 PM CT Intended Audience Interested professionals CPEs Available: 6 Learn More Register Now LOAD MORE

Get to know Kelsey Manigly-Haney, TPRA's Marketing & Membership Coordinator! < Back Kelsey Manigly-Haney Marketing & Membership Coordinator STAFF Kelsey graduated Maxima Cum Laude from La Salle University in 2023, with their BA in Digital Art and Multimedia Design. Following graduation, Kelsey worked as a freelance designer and illustrator, gaining industry experience and curating a design portfolio. They joined the TPRA team as a Multimedia Marketing Intern in 2024, aiding in the creation of marketing materials utilizing their background in multimedia design. Kelsey resides in Philadelphia, Pennsylvania with their dog and two cats. They have a passion for gardening, and they are a part of a gardening volunteer group that cleans up local parks. Next >

Learn more about TPRM Consulting Ltd, a TPRA , through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > TPRM Consulting Ltd TPRM Services Consultant Catalyst CONTACT INFORMATION operations@tprmconsulting.co.uk clivebesterwitch@tprmconsulting.co.uk TPRM Consulting Ltd is a specialist Third-Party Risk Management advisory and managed services firm helping regulated and high-risk organisations design, transform and operate resilient, regulator-ready TPRM programmes. We provide end-to-end support across the third-party lifecycle from governance, regulatory gap analysis, risk tiering and due diligence through to remote and onsite inspections, remediation, continuous monitoring, concentration risk and controlled offboarding. We also provide outsourced TPRM services for organisations seeking experienced capacity without building or expanding an in-house team. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES TPRM Programme Design, Transformation & Regulatory Alignment: We design and transform practical, risk-based TPRM operating models aligned with your organisation’s risk appetite, operating environment and regulatory obligations. This includes maturity assessments, regulatory gap analysis, governance, policies, lifecycle design, risk tiering, control frameworks, roles and responsibilities, reporting and implementation roadmaps. Third-Party Due Diligence & Risk Assessments: We deliver risk-based due diligence across multiple control domains, including cybersecurity, privacy, operational resilience, financial crime, financial viability and concentration risk. Our assessments evaluate both control design and operating effectiveness - not simply questionnaire completion or paper compliance. Outsourced TPRM & Managed Services: We provide flexible TPRM-as-a-Service, managed service and specialist augmentation models to help organisations operate or scale their TPRM programme without building additional permanent capacity. Support can cover the entire lifecycle or selected activities, delivered as an embedded extension of your team. DORA Compliance & Register of Information Support: We help US and international organisations with EU operations, entities or ICT dependencies assess and strengthen alignment with DORA’s third-party risk requirements. Services include regulatory gap analysis, ICT third-party governance, criticality assessment, contractual review, Register of Information preparation and remediation planning. Remote & Onsite Third-Party Inspections: We conduct targeted remote and onsite inspections for critical and high-risk third parties, validating whether documented controls operate effectively in practice. Clients receive evidence-based findings, risk-rated reporting and clearly prioritised actions. Issue, Finding & Remediation Management: We help clients convert assessment findings into structured, proportionate and achievable remediation plans. Support includes ownership assignment, action tracking, challenge and validation, risk acceptance governance, closure evidence and escalation of overdue or material issues. Continuous Monitoring & External Risk Intelligence: We help organisations move beyond point-in-time assessments by designing continuous monitoring models that combine internal performance data with relevant external risk intelligence. Monitoring is calibrated to third-party criticality, risk exposure and trigger events to support timely intervention. Fourth-Party, Nth-Party & Concentration Risk Mapping: We identify material subcontractors, shared service dependencies, geographic exposures and concentration points across complex supply chains. This gives clients clearer visibility of systemic vulnerabilities, hidden failure pathways and single points of dependency. Third-Party Screening, KYB, KYC, AML & Sanctions: We support risk-based business verification and screening across ownership, sanctions, politically exposed persons, adverse media, financial crime and jurisdictional exposure. The approach is proportionate to the relationship, service, geography and level of inherent risk. TPRM Technology Selection, Implementation & Optimisation: We are technology-agnostic and help clients define requirements, evaluate platforms, configure workflows, migrate processes and optimise existing TPRM technology. Where a recommendation is required, it is based solely on client requirements, operating-model fit, integration needs and sustainable value, not vendor affiliation. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about DocuBark, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > DocuBark TPRM Platform Incubator Member CONTACT INFORMATION Jonathan Mandell CEO & Founder jonathan@docubark.com DocuBark is a TPRM workflow automation and risk analysis platform built to replace legacy, rigid systems with a faster, more transparent approach. When teams log in, they get a clear view of every vendor assessment - what’s in progress, what’s complete, and what’s holding things up. DocuBark analyzes vendor documents, supports FAIR-based residual risk scoring, and offers features like smart intake forms and dynamic inherent risk scoring to reduce manual effort and improve decision-making across the third-party risk lifecycle. TOP PRODUCT FUNCTIONALITY CATEGORIES Document Intelligence & Parsing: Automatically extract and structure data from vendor documents (e.g., SOC 2, SIG, CAIQ), enabling faster, more accurate due diligence. Control Summarization & Mapping: Generate clear summaries of vendor security controls and map them directly to your questionnaires, frameworks, or scoring rubrics. FAIR-Based Residual Risk Analysis: Quantify residual risk in financial terms using FAIR methodology, factoring in inherent risk, control strength, and business impact. Smart Intake Forms: Guide business requesters through risk-relevant questions during intake, dynamically adjusting based on the vendor’s role, data access, and system integration. Dynamically Built Assessments Based on Vendor Scope: Automatically generate tailored security assessments based on each vendor’s risk profile, services, and technology footprint—reducing noise and focusing on what matters. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next