Learn about Gokcen Tapkan, Director of Data Research for Black Kite, and TPRA's WNTPRM March 2024 Leader Spotlight. < See All < Previous Next > Gokcen Tapkan Director of Data Research Black Kite Biography Gokcen Tapkan is the Director of Data Research at Black Kite, where she plays a key role in leading cutting-edge AI and ML projects combining her past experience in cybersecurity, compliance and risk. With a background in cryptography, cybersecurity, and compliance, she brings 10+ years of expertise in the government sector, particularly in military-level information security. Since 2012, she has been an Expert Evaluator for European Projects. Holding a master's degree in Computer Engineering from Bosphorus University, Gokcen is not only dedicated to her professional role but also actively engaged in a charitable AI project focused on supporting children on the autism spectrum. Her commitment to leveraging technology for social good is a testament to her passion for making a positive impact Leadership Characteristics Gokcen would describe herself as a pro-active, multi-tasking, human champion person Leadership Challenges About three years ago, we encountered a significant challenge with a Compliance Automation project using an off-the-shelf large language model (LLM) for AI. As we delved into the data daily, it became apparent that something wasn't quite right with the model outcomes, so we decided to develop our own model. Within four months, the notion of developing this in-house model evolved into a full-time research project. Despite the maturity of the idea, resources were not as mature at that time. Fast forward to today, and LLMs, along with various models and services, are experiencing almost exponential growth. During those challenging times, we faced numerous sleepless nights, investing hours in data analysis, outcome evaluation and re-engineering- and I say "we"- because I was doing this with my team. Fortunately, back then, and still today, I have the support of an exceptional team — mostly women. Working in a relatively niche area, extracting meaningful model outcomes from the project posed a formidable challenge that ultimately proved successful. The journey was both painful and empowering. Key Take-a-ways "Stepping out of comfort zones and the endless pursuit of knowledge are pieces of advice generously shared by remarkable women in technology. But here's my take: always find something that genuinely inspires you. It's not about jumping from one thing to another; it's about discovering that sweet spot where passion and purpose align. The spot where you are unique and can fulfill yourself." Fun Fact One of my proudest moments in my career was when the European Commission offered me a contract to be their go-to for evaluating tech projects aiming for funding from the European Union. It was a tough and stressful gig, but I was up for the challenge. And there's a twist. Right in the middle of this whirlwind, I welcomed my first baby into the world. He was a tiny three-month-old when I took on this role that had me volleying between Brussels and working remotely with a brand new baby in my life. But I was determined to be there for him and nurse him until he hit the one-year mark. I did a bit of risk management and weighed my options. Rejecting the job seemed like slamming the door on future opportunities, so I went for it. I wasn't about to compromise on my commitment to nurse my son for at least a year. I made a setup in the Brussels office, complete with a pumping station to keep my nursing goal on track. During meetings, people couldn't help but notice his cute picture on my laptop background. Cue the questions: Who's this adorable baby? Who's looking after him and feeding him? (Cue the laughter upon the response.) Then after welcoming my second child, I needed to figure out how to be a nursing mom on a business trip. I was experienced now, so I used a similar station setup even while traveling.

Learn about Paige Johnson, SVP, Director of Third-Party Risk Management for Stellar Bank, and TPRA's WNTPRM May 2026 Leader Spotlight. < See All < Previous Next > Paige Johnson SVP, Director of Third-Party Risk Management Stellar Bank Biography Paige is an experienced Third‑Party Risk and Compliance leader with more than 20 years supporting organizations in highly regulated global energy and financial services industries. She began her career in finance, audit, and compliance roles within large, complex organizations before advancing into global compliance and ethics leadership at a Fortune 50 energy company, where she led the global third‑party risk strategy, supported a commodity trading floor, and oversaw due diligence and KYC programs across the U.S., London, and Singapore. Throughout her career, Paige has focused on strengthening governance, modernizing corporate compliance and TPRM programs, and implementing scalable, technology‑enabled solutions aligned with evolving regulatory expectations. Paige now serves as SVP and Director of Third‑Party Risk Management at Stellar Bank, where she was recruited to modernize and elevate the enterprise TPRM program during a period of significant organizational transformation, including post‑merger integration and preparation for an upcoming acquisition. She has led TPRM functions through major transitions, bringing stability, clarity, and strategic direction during times of change. She holds the Certified Fraud Examiner (CFE) and Certified Corporate Compliance & Ethics Professional – International (CCEP‑I) credentials and remains committed to advancing the TPRM discipline through continuous learning, mentorship, and community leadership. Leadership Characteristics Paige is known for her approachable leadership style and her ability to create a collaborative, supportive environment where people feel valued and empowered. She leads with clarity, empathy, and integrity, grounding her teams in trust, accountability, and shared purpose. Paige brings structure to complex environments and excels at aligning diverse stakeholders around common goals. She has a talent for translating regulatory expectations into practical, sustainable programs and guiding teams through thoughtful, well‑informed decision‑making. She is especially strong in periods of transformation, where her steady presence, strategic mindset, and genuine investment in developing others help teams navigate uncertainty with confidence. Leadership Challenges Regardless of industry, one consistent challenge is shifting the perception of Third‑Party Risk Management from a check‑the‑box compliance exercise to a truly value‑added discipline. Paige focuses on building trusted, collaborative relationships across functions and then work to reposition TPRM as a strategic partner and business enabler—demonstrating how strong, well‑designed risk practices drive smarter, faster, and more informed decision‑making. Key Take-a-ways Paige’s favorite aspect of Third‑Party Risk Management is its ability to bring together people, processes, and technology to protect an organization while enabling responsible growth. She enjoys the cross‑functional nature of the work, the opportunity to influence enterprise strategy, and the constant evolution of the discipline. For her, TPRM is at its best when it empowers the business—helping teams make informed decisions, strengthening trust with partners, and building a culture of integrity across the value chain. Fun Fact Paige is a longtime volunteer and community leader, serving with organizations such as United Way, Junior Achievement, and National Charity League. Outside of work, she stays busy with her three children and especially loves supporting their competitive swimming journey. She also enjoys creative outlets—whether diving into home design inspiration, traveling, or exploring new local spots around Houston.

Learn more about OneTrust, a TPRA Partner Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > OneTrust TPRM Platform Advocate Member CONTACT INFORMATION sales@onetrust.com Want to learn more? Watch this online demo ! OneTrust empowers you to collect, govern, and use data with complete visibility and control. We help you streamline risk management, enforce compliance, and optimize data strategies for innovation — all while meeting regulatory and customer demands. Learn more at OneTrust.com . TOP PRODUCT FUNCTIONALITY CATEGORIES Consent and Preferences Privacy Automation Third-party Management Tech Risk and Compliance Data Governance AI Governance RESOURCES FROM THIS VENDOR MEMBER Are you ready for DORA compliance? VENDOR MEMBER RESOURCE | March 18, 2025 Understanding and implementing APRA's CPS 230 Standard VENDOR MEMBER RESOURCE | March 18, 2025 Rise above risk: Third-party management in technology VENDOR MEMBER RESOURCE | March 18, 2025 Load More EVENTS FROM THIS VENDOR MEMBER AI for Risk Vs. Risk for AI: Navigating the New Governance Imperative Live Webinar November 12, 2026 NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Lisa-Mae Hill, Director for Venminder, and TPRA's WNTPRM November 2024 Leader Spotlight. < See All < Previous Next > Lisa-Mae Hill Director Venminder Biography Lisa is and dynamic and results-driven Information Security and TPRM Professional with over 15 years of experience, most currently leading a team of 12 in delivering comprehensive risk management, third-party risk management, vendor management, and cybersecurity solutions. Lisa is charged with managing complex projects, mitigating risks for her clients through comprehensive information security and regulation based assessments, and fostering strong relationships to enhance confidence. Lisa is known for her leadership skills and has a laser focus on team development and the growth of her team's professional and personal development. Lisa believes strongly (and has proven in her role) that operational excellence comes from a team that is challenged, rewarded and treated with respect and kindness. She has worked both in the private and public sector as well as across industries and has a love for helping clients feel confident about their Vendor Management program and the direction they take to assess and vet Vendors. She loves to take a complex process like integrating Information Security and technology into TPRM and make it feel attainable and manageable for any level of experience. Her passion is professional education and loves doing webinars, talks and classes for the TPRM and InfoSec community. Leadership Characteristics This was written by an employee (Travis Helton): To Lisa, Lisa, you embody the perfect blend of courage, humility, and care. Your unwavering bravery in the face of challenges inspires us all to push beyond our limits. Despite your remarkable achievements, you remain incredibly humble, always giving credit where it’s due and never seeking the spotlight for yourself. Your thoughtfulness shines through in the small, meaningful gestures that make each team member feel valued and appreciated. Whether it’s a kind word, a thoughtful note, or simply taking the time to listen, your actions consistently show how much you care. You are more than just a leader; you are a friend and mentor who feels like family. Your friendly demeanor creates a welcoming and inclusive atmosphere where everyone feels comfortable and supported. You are always approachable, ready to offer guidance and encouragement, no matter how busy you are. In times of crisis, your calm and composed nature provides a steady hand, guiding us through with confidence and grace. Your genuine kindness and unwavering support make you a pillar of strength, and your dedication to the well-being and growth of your team is truly inspiring. You don’t just lead; you uplift, nurture, and inspire everyone around you, making our workplace feel like a second home. I share this because I am not good at talking about myself and this came unexpectedly today from an employee. Leadership Challenges We have had great change in our company over the last 2 years and I am proud to say that our team worked together through every challenge and came out stronger then ever. I have found the hardest part about leadership is balancing the needs of the business and the people that the business needs. I have always erred on the side of taking care of my team and clients because I firmly believe that the stronger the confidence and loyalty in the team, the better you will always be. Key Take-a-ways TPRM is challenging because you are tasked with accountability and responsibility yet have no control over those that you need information from. It can be frustrating, but the most important thing to remember is a proactive approach with the knowledge of what you want to do and see from your Vendors is key. This helps you stay consistent and gives clear direction to your Vendors! Fun Fact I am a huge dog lover, a mom and a wife. I have a very grumpy old lady Pug, Jazzy Pants as well as an old man black Lab named Cooper. I am also a girl mom with two feral and wild minis that make me laugh everyday as well as double the grey hairs. I love to travel with my husband and I absolutely love to read.

Learn more about Supply Wisdom, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Supply Wisdom Risk Ratings/Intelligence Champion Member CONTACT INFORMATION Dan Boyle Global Head of Sales & Partnerships danielb@supplywisdom.com 🏆 TPRA's 2022 TPRM Service Provider Innovator Award Winner Supply Wisdom delivers real-time, continuous risk intelligence across third parties, Nth parties, and their operating locations. Its AI-driven platform provides verified alerts and predictive insights that help organizations identify emerging risks sooner, reduce exposure, and strengthen operational resilience. Supply Wisdom is the only solution offering true real-time visibility across all major risk domains: Show More TOP PRODUCT FUNCTIONALITY CATEGORIES The Supply Wisdom Difference: Continuous, human-verified intelligence across your vendors, locations, and supply chain. Core capabilities include: Continuous monitoring across 7 critical risk domains Human-verified alerts by subject-matter experts Location tagging and Nth party intelligence Built-in dashboards, APIs, and automated reports RESOURCES FROM THIS VENDOR MEMBER Understanding Digital Operational Resilience Act and Its Impact on TPRM Strategies VENDOR MEMBER RESOURCE | October 3, 2024 Insights from Supply Wisdom's 2024 Survey of Risk Professionals: Risk Management in a Technology-Driven World VENDOR MEMBER RESOURCE | July 22, 2024 Weekly Update: Global Supply Chain Disruptions - The Tigray Conflict: A Humanitarian Crisis in Ethiopia VENDOR MEMBER RESOURCE | October 30, 2023 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Supply Wisdom has once again earned a spot on the Inc. 5000 list of the fastest-growing private companies in America August 12, 2025 Supply Wisdom Announces $14 Million Funding Round and Industry Veteran Jenna Wells’s Appointment as CEO June 18, 2025 Supply Wisdom recognized as an Incredible Workplaces(™) Gold Certified organization in the Mid Sized category. January 28, 2025 ADDITIONAL OPPORTUNITIES Previous Next

CPE ELIGIBLE Panel: Risk Domain Deep Dives Thursday, November 12, 2026 Date & Time Thursday, November 12, 2026 at 10:00:00 AM CST Intended Audience All TPRM Professionals Duration 1 hr CPE Credits 1 Fee Free Register Event Description Join us on November 12, 2026, from 10 to 11 AM CT for a panel offering deep dives into key TPRM risk domains. Experts will examine areas such as cybersecurity, privacy, operational resilience, and ESG and highlight emerging challenges and effective assessment practices. Show More SPEAKER(S) INFORMATION CPE CREDIT About These Meetings Monthly Member Meetings are held every second Thursday of the month. Join us for relevant and informative roundtables, panels, and/or presentations on TPRM topics and pain points our members noted within the 2025 end-of-year survey. Who Should Attend All TPRM professionals are invited to these events, including TPRA Practitioner Members, TPRA Vendor Members, and Non-members. Cancellations In the event that this session would need to be canceled, you will be contacted and invited to register for the rescheduled event. Questions & Concerns For more information regarding administrative policies such as complaints, please contact us at info@tprassociation.org . TPRA Members are eligible to receive 0.5 CPE credits for every 30 minutes of the LIVE meeting that they attend. (Ex. Attend for 30 minutes = 0.5 CPE credits. Attend for 1 hour = 1 CPE credits). CPE Credit will be issued upon completion of the post-event survey. Please allow at least one week following the event to receive your CPE certificate.

Learn more about Third Party Threat Hunting LLC, a TPRA Consultant Catalyst, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Third Party Threat Hunting LLC TPRM Services Consultant Catalyst CONTACT INFORMATION Gregory Rasner 919-592-7757 greg@thirdpartythreathunting.com Third Party Threat Hunting LLC (TPTH) was founded in 2023 by Gregory Rasner, author of four books on third-party and AI risk and co-creator, with TPRA, of the Third Party Cyber Risk Assessor (TPCRA) certification. TPTH helps organizations find the gaps in their third-party and AI risk programs, close them, and leave the program measurably stronger than we found it. Advisory: TPRM program design, AI and vendor risk assessment, regulatory readiness, program remediation, and assessments mapped to TPRA's own TPRM Maturity Model. Managed risk services: fully managed, augmented, or interim and bridge coverage when a program lead departs. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Third-Party Risk Assessment: TPTH conducts comprehensive risk assessments for clients to identify vulnerabilities, compliance issues, and security threats from third-party relationships. These evaluations are customized to meet each client’s specific needs and industry standards, helping organizations make informed choices about vendor selection and continuous oversight management. Artificial Intelligence: TPTH has extensive AI expertise and experience with on-staff personnel who also have relevant AI certifications. This expertise and experience can be brought to bear on any number of fronts: AI risk assessments, AI framework analysis and alignment, and AI agent training. Cybersecurity Risk: TPTH team has its roots in cybersecurity excellence and employs effective strategies to mitigate cybersecurity risks from third-party vendors, assisting organizations in safeguarding sensitive data and ensuring business resilience . TPRM Program Assessment: TPTH will perform an evaluation of your TPRM program and develop a plan to upgrade your program in a risk-based order. Compliance and Audit Alignment: TPTH supports organizations in aligning their TPRM programs with top compliance standards like SOC 2, NIST, ISO, HIPAA, HITRUST, and GDPR. This helps clients prepare for independent audits, retain certifications, and showcase strong information security practices. Training: TPTH is one of the leaders in producing training for clients. Leverage the world-class training and certification Gregory Rasner developed for TPRA with a custom-delivered training to your staff. Learn from the leading experts in the field and ensure your team is ready to face the challenges. RESOURCES FROM THIS VENDOR MEMBER AI and Third-Party Risk: Solutions for Assessing and Managing Your AI Vendors and Systems VENDOR MEMBER RESOURCE | February 9, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Hilary Jewhurst, Head of Third-Party Risk Education & Advocacy for Venminder, and TPRA's WNTPRM November 2024 Leader Spotlight. < See All < Previous Next > Hilary Jewhurst Head of Third-Party Risk Education & Advocacy Venminder Biography Hilary leads the advancement and promotion of third-party risk management best practices and solutions through thought leadership, subject matter expertise, and support for Venminder’s customers, Marketing, Sales, and Third-Party Risk divisions. Hilary has served as a senior leader for over 20 years, working in operations management, and risk management roles, with an emphasis on third-party risk. Hilary successfully built, improved, and managed enterprise-wide third-party risk management frameworks and programs for leading financial services companies. She has designed and developed training materials, reference guides, desk-top procedures, job aids, checklists, and templates for a full spectrum of learning environments and learners as well as personally trained hundreds of third-party risk managers, vendor relationship managers, and vendors. Leadership Characteristics "As a naturally curious individual, I constantly seek to expand my knowledge and learn new things. Sometimes, this means saying, "I don't know, let's find out together." Or recognizing that collaborating with others is critical to finding the best solution. I want to lead by example, and by admitting my own limitations, I can create a safe environment where others feel comfortable embracing a mindset of continuous improvement and growth. I also adhere to the principle that is its unnecessary to cling to a mistake just because it’s yours. If something isn't working, don't waste time agonizing; put your energy into fixing it instead." Leadership Challenges "I am a huge fan of simplicity and practicality, anything that is over engineered or needlessly complex frustrates me. Throughout my career, I have frequently been given instructions to implement processes or initiatives that didn't seem to be thoroughly planned out or well considered beforehand. I haven't always found it easy to navigate these situations but learning which battles to fight can be a game-changer. While some may see pushing back as problematic, I've found that sometimes you must trust your instincts and speak up vs. going along to get along. Honestly, it took a fair amount of time and numerous failed attempts before I was able to correctly identify which battles were worth fighting and how to approach them more constructively. This involved adopting a collaborative mindset, respecting the opinions and views of others, and focusing on achieving the best possible outcome, even if that isn't the outcome I most prefer." Key Take-a-ways "Interestingly, the challenges and demands of TPRM can feel painfully familiar to women who have been subjected to traditional gender roles that frequently demand rampant multitasking, a lot of emotional labor, and constantly attending to the needs of others while attempting to balance life's demands. Non-TPRM professionals often find it challenging to comprehend the intricacy of this practice. TPRM professionals are not only expected to be experts in risk management but also excel in process design, project management, relationship management, analysis, and regulatory compliance. And undertake additional other unofficial responsibilities such as being an auditor, facilitator, teacher, coach, and sometimes even a counselor. And as much as I hate gender stereotypes and do my best to avoid perpetuating them, it is a fact that many women, me included, have encountered significant obstacles in the workplace. These challenges often involve being undervalued, overworked, underrepresented, and lacking access to essential resources to perform their jobs effectively. Although TPRM can be a challenging job, as a woman it presented me with the unexpected and somewhat rare opportunity to work with a broad range of stakeholders and demonstrate my diverse skillset every day. There were always problems to solve, which meant there were plenty of opportunities to succeed. And it’s worth noting that the responsibility and accountability that comes with being a TPRM practitioner increased my visibility, often to key decision makers and senior leadership. Considering how difficult it can be for women to succeed in corporate America, if I had understood just how much TPRM would enhance my personal growth, accelerate my career trajectory, and improve my opportunities, I would have pursued the TPRM path much sooner." Fun Fact "I recently moved to a new city and had been looking for new and interesting ways to become involved in my local community. As a history enthusiast who loves spooky stories, I’m delighted that I have been recruited to research, write, and lead a weekly history and ghost tour to raise funds to preserve the town’s historic cemetery."

Learn more about Locktivity, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Locktivity TPRM Platform Incubator Member CONTACT INFORMATION info@locktivity.com (415) 234-0245 Locktivity isn't just using AI to make things faster, it's changing the way teams work for better outcomes with less effort. Locktivity is a purpose built platform to enable small GRC and security teams to shift third party risk management left. Locktivity combines the power of human expertise, AI insights, and automation to embed your policies into existing workflows. Move from checking compliance boxes, writing reports and chasing information to orchestrating and monitoring with ease. TOP PRODUCT FUNCTIONALITY CATEGORIES Inventory management Impact-driven risk assessments Right-sized due diligence AI-supported vendor assessments Automated audit reports Real-time visibility into your risk footprint OAuth token and integration monitoring Continuous monitoring RESOURCES FROM THIS VENDOR MEMBER Third Party Risk Management Maturity Model VENDOR MEMBER RESOURCE | August 28, 2024 Managing third party AI use and privacy risks VENDOR MEMBER RESOURCE | June 20, 2024 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Cloud Security Alliance (CSA), a TPRA Strategic Partner, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Cloud Security Alliance (CSA) Research & Educational Community Strategic Partner CONTACT INFORMATION support@cloudsecurityalliance.org Cloud Security Alliance (CSA) .pdf Download PDF • 2.89MB The Cloud Security Alliance (CSA) is the world’s leading not-for-profit organization committed to awareness, practical implementation, and credentialing of forward-looking cybersecurity topics, including AI, cloud, and Zero Trust. In an era where digital transformation drives business success, CSA stands as the global authority ensuring organizations can operate securely while harnessing cutting-edge technology. Through volunteer-driven research, globally-accepted standards, and award-winning vendor-neutral education programs that unite technical experts, industry practitioners, and varied associations, governments, chapters, and corporate members, CSA bridges the gap between innovation and pragmatic security execution. Visit CSA’s website to learn more. TOP PRODUCT FUNCTIONALITY CATEGORIES Industry Security Frameworks – Development and maintenance of globally recognized cloud security frameworks (CCM, STAR Program, AICM). Best Practices & Research – Publication of vendor-neutral research, guidance, and best practices on cloud computing, AI security, and emerging technologies. Security Assurance Programs – Programs such as CSA STAR that provide transparency and assurance for cloud service providers through security assessments and certifications. Education & Training – Professional training and certificate programs (CCSK, CCZT and TAISE). Industry Collaboration – Facilitation of collaboration between cloud providers, enterprises, regulators, and security professionals through working groups and initiatives. Risk & Compliance Mapping – Security control mappings between major compliance frameworks (ISO, NIST, SOC 2, etc.) to help organizations align security programs. Cloud Security Guidance – Practical guidance and implementation resources for securing cloud infrastructure, SaaS, and multi-cloud environments. Community-Driven Innovation – Global community of security experts contributing to open security standards and emerging technology security guidance. Security Transparency Tools – Tools and registries that allow organizations to evaluate and compare the security posture of cloud service providers. Events & Knowledge Sharing – Global conferences, summits, and webinars focused on cloud security, AI security, and digital trust. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER AI Security Summit 2026: Zero Trust Virtual Conference November 18, 2026 NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Stacey Booker, Director, Third-Party Risk Management for St. Jude Children's Research Hospital, and TPRA's WNTPRM November 2026 Leader Spotlight. < See All < Previous Next > Stacey Booker Director, Third-Party Risk Management St. Jude Children's Research Hospital Biography Stacey Booker, CPA, CIA, MBA Stacey Booker is the Director of Third-Party Risk Management at St. Jude Children's Research Hospital, where she leads the development and oversight of the organization's third-party risk management program. With more than 10 years of experience in risk management, internal audit, compliance, and accounting, she specializes in helping organizations identify, assess, and manage financial, operational, and third-party risks. Prior to her current role, Stacey held leadership positions within Internal Audit at St. Jude and previously worked in compliance auditing and public accounting. She is a Certified Public Accountant (CPA) and Certified Internal Auditor (CIA) and holds an MBA in Healthcare Management from Colorado Technical University and a BBA in Accounting and International Business from The University of Memphis. Stacey also serves as Treasurer of the Board of Directors for the Memphis Oral School for the Deaf and is active in several professional organizations focused on risk management and internal auditing. She is known for her collaborative leadership style and commitment to strengthening governance and risk management practices. Leadership Characteristics Stacey's leadership style is characterized by strategic thinking, analytical rigor, collaboration, and integrity. She is recognized for her ability to lead through influence, develop practical solutions to complex challenges, and build strong partnerships across the organization. Leadership Challenges Throughout her career, Stacey has persevered through challenges by stepping outside her comfort zone, taking on increasingly complex leadership roles, and leading transformational initiatives across risk management, internal audit, and compliance. She has strengthened her leadership impact by becoming more confident in advocating for her ideas, navigating difficult conversations, and driving change in evolving and often ambiguous environments. Her resilience, willingness to learn, and commitment to continuous growth have enabled her to successfully lead cross-functional teams and build strong partnerships. Key Take-a-ways What I enjoy most about TPRM is the ability to influence positive outcomes without always having direct authority. Success comes from building trust, fostering collaboration, and helping stakeholders navigate risk while still achieving their goals. Fun Fact A fun fact about me is that I unintentionally found my way into TPRM through accounting and internal audit and quickly realized it was the perfect fit. I love that TPRM allows me to combine strategy, problem-solving, relationship building, and risk management while helping the organization achieve its mission. Outside of work, I'm busy keeping up with my two elementary-school-aged children. They get a kick out of the fact that I can recite all 50 states in alphabetical order thanks to a song I learned in fifth grade. It also taught me that if you put something to music, there's a good chance you'll remember it forever, whether you want to or not!

Learn more about Aravo, a TPRA Champion Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Aravo TPRM Platform Champion Member CONTACT INFORMATION Stephen Fahey Chief Sales Officer sales@aravo.com https://aravo.com/ Aravo provides leading third-party risk management solutions powered by intelligent automation software. Designed to meet the needs of third-party risk management teams at Global 2000 enterprises, we help organizations thrive in a global economy with growing security, regulatory, and brand risk. With our innovative Intelligence First™ Platform, purpose-built to manage third-party risk, Aravo uses AI to optimize time-intensive processes, reduce manual work, and drive better business outcomes. Trusted by over 9 million third-party users and 800,000 corporate users in 195+ countries, Aravo empowers global enterprises to mitigate risk, build business resilience, and promote brand integrity across their extended enterprise. TOP PRODUCT FUNCTIONALITY CATEGORIES End-to-end risk management lifecycle with highly visual dashboards and data Automated onboarding, assessments, monitoring, and termination Fully integrated risk intelligence evaluation and scoring Inherent risk, control effectiveness, and residual risk evaluations Cross-category risk scoring, segmentation, classification, and sequestration Enhanced due diligence and continuous monitoring Agentic AI and programmatic intelligence Real-time incident alerts, issue management, and corrective actions Highly accessible and auditable processes and conditional workflows Simple configuration for easy adaptation to regulatory and market reporting requirements RESOURCES FROM THIS VENDOR MEMBER The TPRM Timing Gap: Why Operating Models Must Evolve at the Speed of AI VENDOR MEMBER RESOURCE | October 27, 2026 From Risk Signal to Response: A More Agile Approach to TPRM VENDOR MEMBER RESOURCE | October 27, 2026 In TPRM, Data Governance Matters VENDOR MEMBER RESOURCE | October 1, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Aravo Named Category Leader in Chartis RiskTech Quadrant for Third-Party Risk Management, Six Years Running August 20, 2026 Aravo Named a Leader in the Gartner® Magic Quadrant™ for Third-Party Risk Management Tools for Assurance Leaders April 15, 2026 Aravo Introduces Aravo Advantage to Help Organizations Maximize Value from Third-Party Risk Programs March 10, 2026 Aravo Named Category Leader in Chartis RiskTech Quadrant for Third-Party Risk Management Solutions October 21, 2025 Aravo Innovates Risk Scoring to Provide Greater Visibility and Control with Escalating Third-Party Risk June 17, 2025 ADDITIONAL OPPORTUNITIES Previous Next