Learn about Madiha Fatima, Director, Head of Third Party Risk Management for Angelo Gordon, and TPRA's WNTPRM March 2023 Leader Spotlight. < See All < Previous Next > Madiha Fatima Director, Head of Third Party Risk Management Angelo Gordon Biography Madiha Fatima is a Director and Head of Third Party Risk Management at Angelo Gordon, where she leads the development of Third Party Risk Management framework while enabling businesses to achieve their strategic objectives from utilizing service providers. Angelo Gordon is a leading global investment management firm headquartered in New York. Madiha oversees the firmwide Third Party Risk Management function including vendor cyber, technology, business continuity and data security assessments and governance. Madiha is a very well-known industry expert in risk management. She has been featured as Top 50 Women Leaders of New York as well as in Wall Street Journal and published in various magazines. Prior to joining Angelo Gordon, Madiha Fatima served as Head of Third Party Risk Governance & Oversight at DTCC. Madiha is a Certified Third Party Risk Professional (CTPRP). Madiha earned a Bachelor of Science in Financial and Capital Markets from Rutgers Business School. Leadership Characteristics D&I champion, Madiha launched various programs focused on women advancement in financial industry. She has been recognized and awarded the outstanding leadership award by Financial Industry awards hosted by DTCC and FICC. Leadership Challenges Madiha worked her whole career in a challenging environment showcasing her resilience by her continuous achievements throughout her career. She is one of the Top 20 youngest executives and rising stars of wall street. Key Take-a-ways "TPRM is one function where you have to be an expert in several different areas of risk management, strategy and operations to be successful. TPRM leaders are versatile and can provide effective leadership in many different areas due to their ability of being jack of all trades whether its cyber, regulatory, BCM or info sec, we challenge and do it all." Fun Fact "TPRM is the fun part about me; however, if I have to choose one thing outside my passion for TPRM, it would be cooking. I love cooking and find it very relaxing. I love trying different cuisines and from-scratch recipes."

Learn about Regina Dillon, Senior Manager, Information Security Third Party Risk for CareSource, and TPRA's WNTPRM March 2025 Leader Spotlight. < See All < Previous Next > Regina Dillon Senior Manager, Information Security Third Party Risk CareSource Biography As a seasoned leader in the realm of information security, I bring to the table over two decades of rich experience. Throughout this period, my professional journey has spanned across various sectors. I have gained experience in the legal domain, delved into the realm of hosted managed services, and most recently, ventured into the healthcare payer industry. My focus for the past five years has been on third-party risk management. I am a proud holder of the Certified Information System Security Professional (CISSP) certification, which has been instrumental in enhancing my ability to assess risk effectively. Leadership Characteristics DISC Profiile - SC (Steadiness/Conscientiousness) Myers Briggs - ISTJ Leadership Challenges At its core, leadership is about forging connections. It’s about nurturing relationships with those you guide, your colleagues, and your superiors. One of the most formidable challenges I’ve faced is penetrating the barriers of individuals who are inherently reserved. Engaging with such individuals requires patience and can be disheartening if you let their traits influence your own demeanor. However, I’ve discovered that ultimately, everyone seeks to be acknowledged and comprehended. They crave transparency. While candid feedback may not always be welcomed, when it is given and genuinely taken on board, individuals often realize that my intentions are in their best interest. They understand that they can reciprocate with the same level of honesty. A book that resonated with me and emboldened me to be a forthright leader is ‘Radical Candor’. Key Take-a-ways Third Party Risk Management is not about checking the box that an assessment has been completed. It involves posing pertinent questions and conducting meaningful due diligence that can signal to your company (and the third party) to potential issues that could actually result in a regulatory violation or cyber breach. Fun Fact I love Buc-ee's! It’s an essential pit stop on every road trip. The anticipation is building as a Buc-ee's is being built within about 30 minutes of my home (Springboro, Ohio) in the next couple of years.

Learn more about Portend AI, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Portend AI TPRM Platform Incubator Member CONTACT INFORMATION email: info@portend.ai phone: 1.408.462.1224 Portend AI is a continuous Third-Party Risk Intelligence platform that replaces static vendor assessments with real-time, independent risk monitoring. Built for TPRM, procurement, compliance, and audit teams, Portend AI delivers ongoing visibility into vendor cybersecurity posture, compliance exposure, financial and operational risk, reputational signals, sanctions status, and emerging external threats. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Continuous Vendor Risk Monitoring External Cybersecurity Posture & Attack Surface Assessment Third-Party Compliance & Certification Monitoring (SOC 2, ISO 27001, HIPAA, etc.) Sanctions, Watchlist & Regulatory Screening Vendor Reputation & Adverse Media Monitoring Supply Chain & Fourth-Party Risk Intelligence Policy & Privacy Document Analysis (GDPR, CCPA, TOS) Financial & Corporate Exposure Signals (filings, litigation, leadership changes) Risk Scoring & Prioritization Engine Real-Time Alerts, Dashboards & API Integrations RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Explore the benefits of TPRA Membership. Access resources, training, and a strong TPRM network to grow your skills and advance your risk program. PROFESSIONAL EDUCATION Enhance your TPRM knowledge TPRA Members gain access to expert-led monthly & quarterly meetings on topics they want to hear about, cutting-edge research & industry insights, TPRM-specific conferences, current resources, and more, all designed to enhance your professional knowledge for innovative and successful risk management. TPRA also provides members with Continuing Professional Education (CPE) Credits to ensure you can maintain existing security and risk-related certifications! EXPAND YOUR NETWORK Network with fellow Practitioners As the threat landscape grows in complexity & regulations require organizations to review their third parties with a more focused lens, networking & benchmarking with peers has never been more important. TPRA Membership provides you with a variety of opportunities to network and discuss with TPRM professionals worldwide and across all industries and maturity levels. Through our members-only forum, quarterly online network events, in-person meet-ups, conferences, meetings, and more, you can build valuable relationships with practitioners and service providers to share knowledge and gain advice from those who have been right where you are now. EXPERT INSIGHTS Discover resources on all things TPRM TPRA Members gain access to a large repository of TPRM resources, including templates, white papers, tools, checklists, eBooks, reports, survey results, toolkits, infographics & more! Resources come from a wide range of sources, such as government websites & regulators, TPRM service providers, and others. In addition, TPRA's monthly Third Party Risk Insight Work Group works as a community to create customizable resources for our members to use in their own programs, including templates, questionnaires, & even our TPRM 101 Guidebook ! Join over 2,000 TPRM Professionals! The all-in-one source for Third Party Risk Management (TPRM) tools, templates, training, networking, certifications, and industry best practices. As the only vendor-agnostic, not-for-profit professional association for TPRM Professionals, you will be joining a group of over 2,000 Leaders, to include Fortune 500 companies, that have already said 'YES' to advancing the TPRM industry as a community. So, what are you waiting for? Take the next step in advancing your career and enhancing your TPRM program with TPRA Practitioner Membership! It's FR EE! JOIN NOW View Plans 1/10 WHY JOIN? Our vision is simple, to be the global voice and standard for the third party risk profession! But we cannot do that without our members. We are the only vendor-agnostic, not-for-profit, professional association that exists to further the profession of third party risk through knowledge sharing and networking as a community. Our organizational objectives include, but are not limited to, promoting the value that third party risk professionals and practitioners add to their organizations; educating community members and other relevant audiences on best practices in third party risk; researching and disseminating information on third party risk tools and techniques; and building third party risk guidance as a community. No matter where you are in your TPRM journey... Whether you are a practitioner just developing your third party risk program, or you've established a more mature program, it has never been more important to benchmark off your peers. This professional association is built on and requires the participation of practitioners from programs of all shapes and sizes. Furthering the profession of third party risk through knowledge sharing and networking. In addition to providing you with opportunities to network and interact with fellow practitioners, the TPRA also provides you with Continuing Professional Education (CPE) Credits to ensure you can maintain existing security and risk-related certifications! Attending our monthly meetings and two conferences at a minimum will provide you with 25 CPEs every year! Come join our fast growing community of third party risk leaders! Why Join Practitioner Member Plans For those who identify, assess, monitor, mitigate, manage, etc. risks associated with third parties for their own organization. 1 Standard Practitioner Membership FREE No conditions, no time limit, and no catch. TPRA Standard Practitioner Membership is free for as long as you want it. Cancel anytime. Monthly & Quarterly Meetings on TPRM topics you want to hear about Practitioners-Only Slack Forum to ask questions, share resources, and get to know your peers Access to Resources (templates, whitepapers, questionnaires, & videos) Networking Opportunities , including dedicated virtual events every quarter Virtual & In-Person TPRM-specific Conferences + $200 off your in-person conference ticket Globally Recognized Certifications Mentorship Program Access to Demos, Webinars, & Surveys from leading TPRM service providers Comprehensive Volunteer Program where you can network, build leadership skills, and contribute to the community in actionable ways Advance the Industry through our Insight Work Group & Innovation Request Form Join Now! 2 Premium Practitioner Membership $199/year Premium Membership is $199 for one year and must be manually renewed each year. Members are always welcome to switch to Standard Membership when their Premium Plan expires. All Standard Benefits 50% Off Admissions to In-Person Conference , making it the cheapest way to get tickets across the board! Early Access to Conference Registration & Hotel Room Booking , so you can get the best spot at the best price Priority Access to Select Conference Sessions Priority Access to Event Registration for virtual & in-person conferences Quarterly Network Events where you can win prizes and connect with your peers! 15% Discount on All TPRA Certifications , including exams, trainings, and renewals Monthly Informational Briefings on current and top-of-mind topics Opportunity to Beta-Test New TPRA Programs , including new certifications, trainings, and tools to ensure we're only offering the best to the community! Join now! Plans Are you a TPRM Service Provider who is interested in membership? Email Heather Kadavy at heather.kadavy@tprassociation.org to set up a call to discuss Vendor Membership Plans. ADDITIONAL TPRA PROGRAMS Women In TPRM (WNTPRM) Join our Women In TPRM Program to help uplift women in the industry! Meet monthly to discuss goals & objectives. Access our Resource Sharing Library for a variety of women in business-related materials. Nominate an inspiring woman leader within TPRM to be our next "Women Lead" spotlight. LEARN MORE Information Sharing Site The TPRA is dedicated to advancing the industry of third party risk through knowledge sharing and collaboration. In support of this goal, we provide our members with access to resources such as whitepapers, templates, current reports and blogs, government resources, and more. It is our hope these resources will aid our members in meaningful ways, and provide insight and ease to their third party risk management endeavors. Resources come from a variety of places, with some being community-created in our monthly focus group, provided by TPRM service providers, relevant government sites, among others. TPRA Certification Program Get certified through TPRA to advance your career and validate your expertise! Pursuing a professional certification is an investment in your career and allows you to validate, as well as upscale your professional knowledge, skills, and abilities. Register now for our Third Party Cyber Risk Assessor (TPCRA) Certification! The TPCRA is the standard of achievement for those who assess, monitor, and review third party cyber security and information technology controls, as well as identify and mitigate risk related to said controls. LEARN MORE TPRA Volunteer Program Join one or all of our Volunteer Committees, gain valuable leadership skills, resume-building experiences, and help to fulfill the TPRA's mission of furthering the profession of third party risk management through knowledge sharing and networking! Programs include Conference Planning, Newsletter, Information Sharing, and TPRA Membership Committees. TPRA also has a robust Volunteer Reward and Recognition program that allows you to obtain points for each hour you volunteer! Points can be turned in for rewards! Join as a member to access our Information Sharing Site & Volunteer Program! Still not sure? Register for one of our upcoming Potential Member Meetings to learn all about TPRA Member benefits, programs, & where to get plugged in! REGISTER CEO Interview TPRA WORLDWIDE

Enhance your Third Party Risk Management (TPRM) skills with TPRA’s flexible certificate program. Explore free and paid courses covering AI risk, cloud security, and more. Gain practical knowledge to support your organization. Certificate Program The Third Party Risk Management (TPRM) Certificate Program , offered by TPRA in collaboration with our trusted partners, provides comprehensive training designed to enhance knowledge and expertise in TPRM best practices. This program features a diverse selection of courses covering critical topics in third-party risk, cloud security, AI/LLM security and risk. Participants can choose from both free and paid courses, ranging in duration from one to four hours, allowing for flexible learning tailored to individual needs and schedules. Participants will receive a certificate upon completion of the training course. Please note that this is not a certification program, nor will participants receive any professional credentials. Whether professionals are new to TPRM or looking to deepen their expertise, the program provides valuable insights and practical knowledge to strengthen risk management strategies within their organizations. Available Courses AI/LLM Security & Risk Course for TPRM: Learn the risks that AI in vendors can carry, and how to assess them On-Demand, Self-Paced | 1 hour | $0 | 1 CPE hour The Third Party Risk Association (TPRA) has partnered with PromptArmor to bring you the " AI/LLM Security & Risk Course for TPRM ". This training course includes 12 modules to teach you… Read More Register Securing SaaS Applications: A Comprehensive Approach to Cloud Risk Management Live Virtual Training | 4 hours | $159 | 4 CPE hours As organizations increasingly rely on cloud-based Software-as-a-Service (SaaS) solutions, understanding and mitigating associated risks is critical. This virtual training provides an in-depth exploration of key security considerations when evaluating and… Read More Register

Learn more about Next Peak, a TPRA Consultant Catalyst, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Next Peak TPRM Services Consultant Catalyst CONTACT INFORMATION info@nextpeak.net Next Peak is a premier third-party risk and resilience consultancy that provides deep strategic advisory and operational services. Our approach is grounded in deep business, financial services, and national security experience, with demonstrated leadership and commitment to delivering practical, business driven solutions to meet emerging threats across third-party risks, aligned with leading industry frameworks and best practices. Our propositions are tailored to clients’ company size, industry and ambitions, designed to meet your third-party risk maturity needs and journey. We help organizations design, strengthen, and future-proof their Third-Party Risk Management (TPRM) programs — reducing exposure, increasing resilience, and building regulatory confidence. TOP PRODUCT FUNCTIONALITY CATEGORIES Risk & Maturity Assessments: Gain a clear view of your third-party exposure. We identify and prioritize critical vendors, assess inherent and residual risk, evaluate policies and controls, and benchmark maturity — delivering a focused, actionable roadmap. Program Design & Uplift: Build a scalable, business-aligned TPRM framework. We enhance operating models, embed risk-based tiering, trigger-based reassessments and structured issue management, strengthen governance, and implement meaningful metrics for continuous monitoring and reporting. IP Control Review: Protect your most valuable intellectual property and sensitive information. We assess third-party access, data protection, contractual safeguards, and monitoring controls to reduce the risk of leakage or theft. Contract & SBOM Review: Strengthen contractual and technical protections. We advise on vendor security clauses, audit rights, breach obligations, subcontractor flow-downs, and Software Bill of Materials (SBOM) transparency. Exercising & Testing: Test your ability to respond and validate your resilience through realistic tabletop and technical simulations covering third-party failures, cyber incidents, and supply chain disruption. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Bitsight, a TPRA Champion Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Bitsight Risk Ratings/Intelligence Champion Member CONTACT INFORMATION Michael Hermann Enterprise Sales Director michael.hermann@bitsight.com Bitsight delivers an integrated third-party risk management solution that enables organizations to measure, monitor, and mitigate vendor and supply chain risk using real-time cyber intelligence. Built on one of the world’s largest external cybersecurity datasets and powered by AI, Bitsight TPRM transforms third-party risk programs from manual, point-in-time assessments into continuous, outcomes-driven operations across the vendor lifecycle. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Third Party/Supply Chain Risk Management Cyber Risk Intelligence Continuous Monitoring Vulnerability Detection and Response Fourth Party Risk Management Dark Web Intelligence for Supply Chains Vendor Onboarding & Assessment Vendor Collaboration and Risk Reduction Exposure / Attack Surface Management Professional Services RESOURCES FROM THIS VENDOR MEMBER How Early Signals Surfaced by Dark Web Intelligence Enhance Supply Chain Cyber Resilience VENDOR MEMBER RESOURCE | March 6, 2026 Dark Web Intelligence for Supply Chains: From Reactive TPRM to Threat-Led Defense VENDOR MEMBER RESOURCE | March 6, 2026 A Third-Party Risk Management Framework Template: 10 Critical Elements VENDOR MEMBER RESOURCE | January 9, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Bitsight Launches Industry’s First Dark Web Intelligence for Supply Chains, Empowering Organizations to Predict and Prevent Third-Party Exploits February 10, 2026 ADDITIONAL OPPORTUNITIES Previous Next

The Third Party Risk Association (TPRA) is excited to bring you the first comprehensive, third Party Risk Management (TPRM) program guidebook. This guidebook will walk you through all phases of the TPRM lifecycle, in detail, and provide you with practical tools, tips, and examples for its implementation. It was developed over the course of three years from the input of numerous TPRM Practitioners, subject matter experts, and TPRM Service Provider organizations. Top of Page Third Party Risk Management 10 1 Guidebo ok The Third Party Risk Association (TPRA) is excited to bring you the first comprehensive, Third Party Risk Management (TPRM) program guidebook. This guidebook will walk you through all phases of the TPRM lifecycle, in detail, and provide you with practical tools, tips, and examples for its implementation. It was developed over the course of three years from the input of numerous TPRM Practitioners, subject matter experts, and TPRM Service Provider organizations (i.e., the Third Party Risk Management Community). We hope you find this guidebook to be helpful and easy to understand, providing you with relevant tips and examples to ensure successful implementation and/or enhancement of your current TPRM program. Download Now! Leave a Review download Submit the form below to get your FREE copy of our eBook! First name Last name Title Organization Email Submit Downloaded by over 1,000 TPRM professionals! Reviews Please feel free to write a review below!

FOR IMMEDIATE RELEASE CeFPro and Third Party Risk Association Announce Strategic Partnership to Advance Global Third-Party Risk Management Friday, January 30, 2026 1/1 The Center for Financial Professionals (CeFPro) and Third Party Risk Association (TPRA) have formalized a Strategic Partnership dedicated to advancing the global third-party risk profession ANKENY, IOWA — JANUARY 30, 2026 — The Center for Financial Professionals ( CeFPro) and Third Party Risk Association ( TPRA) have formalized a Strategic Partnership dedicated to advancing the global third-party risk profession. This partnership integrates the strengths and respect of both organizations to provide world-class thought leadership, education, and peer-to-peer engagement for risk professionals worldwide. Through this collaboration, CeFPro and TPRA will jointly deliver a program of international events, collaborative media and thought leadership initiatives, alongside market intelligence reports throughout the year, in addition to each company’s respective, typical offerings. At the heart of the partnership are three pillars: Joint International Events : CeFPro and TPRA will co-host two flagship international conferences in Europe and North America , designed to provide cross-sector perspectives and practical insight into third-party risk management challenges and opportunities. Integrated Media Collaboration: The organizations will co-produce exclusive editorial content, executive interviews, webinars and digital media projects designed to spark ongoing conversation and deliver consistent value to their combined audiences. This joint initiative ensures year-round knowledge sharing and fosters deeper connectivity across the global risk community. Market Intelligence and Research : The partnership will also deliver an Annual International TPRM Market Intelligence Report, benchmarking global third-party risk trends and priorities, supported by a distinguished advisory board of industry professionals. This alliance marks a commitment to commercial integrity and meaningful learning. We are setting a higher standard for professional development, ensuring the global risk community has the transparent, high-quality resources needed to excel in a complex market. Leadership Perspectives Commenting on the partnership, Andreas Simou, CEO at CeFPro, said: “We are delighted to formalize our partnership with TPRA. Both organizations share a deep commitment to advancing the third-party risk profession globally. By partnering, we can deliver greater value to the industry through meaningful events, credible research, and practical insight. Together, we are creating opportunities to bring practitioners together, elevate industry standards, and provide trusted insights that support professionals across sectors and regions.” Julie Gaiaschi, CEO and Co-Founder of TPRA, added: “This partnership reflects a shared commitment to strengthening the third-party risk profession through integrity, collaboration, and practical value. By developing a strategic partnership with CeFPro, we’re expanding access to trusted learning, meaningful connection, and global insight while also supporting practitioners as they navigate an increasingly complex risk environment. We are grateful for our many strategic partnerships, which allow us to reach practitioners in new ways and offer more niche, high-impact resources across the profession. About CeFPro The Center for Financial Professionals (CeFPro) is a leading global events, media, and research organization serving senior professionals across risk, compliance, and financial services. CeFPro connects industry leaders through conferences, publishing, and market intelligence to support professional development and industry advancement. www.cefpro.com About the Third Party Risk Association (TPRA) The Third Party Risk Association (TPRA) is a global professional association dedicated to supporting third-party risk management professionals through education, certification, advocacy, and community engagement. TPRA is the all-in-one source for Third Party Risk Management (TPRM) conferences, tools, templates, training, networking, certifications & industry best practices. https://www.tprassociation.org MEDIA CONTACT Contact details: For Media Enquiries Contact: Marketing at: marketing@cefpro.com Company details: Center for Financial Professionals Tel | UK: +44 (0)307 600 3543 | US: +1 888 677 7007 Email | info@cefpro.com LinkedIn | @center-for-financial-professionals Company details: Third Party Risk Association Email | info@tprassociation.org LinkedIn | @TPRA YouTube | @thirdpartyriskassociation Instagram | @tprassociation FOR MORE INFORMATION https://cefpro.com/ Previous Next

This training course is designed for Third-Party Risk Management teams looking to enhance their understanding of AI security and risk assessment. It consists of two specialized tracks.  AI/LLM Security & Risk Course for TPRM Learn the risks that AI in vendors can carry, and how to assess them Price $0 Duration 1 Hour Type On-Demand Enroll By clicking this button, you will be redirected to our Training & Certification Platform (Inspire360) . Please note that the Inspire360 Training and Certification Platform is separate from the TPRA website. Your TPRA website login credentials will not work on Inspire360, and a separate account is required to register for and access courses. < Back About the Course PromptArmor brings you the " AI/LLM Security & Risk Course for TPRM ". This training course includes 12 modules to teach you the risks that AI in vendors can carry, and how to assess them. This training course is designed for Third-Party Risk Management teams looking to enhance their understanding of AI security and risk assessment. It consists of two specialized tracks. Track 1: AI Security for TPRM Teams focuses on core AI security concepts, including large language model (LLM) behavior, embeddings, vector databases, retrieval-augmented generation (RAG), fine-tuning, and indirect prompt injection—key areas where security risks can emerge in AI-driven systems, and where third party risk professionals should look to mitigate risk. Track 2: Holistically Assessing AI in Third Parties equips TPRM professionals with the skills to evaluate the AI-enabled features that vendors offer. It covers AI application architecture, data usage policies, cybersecurity, data privacy, governance, and model risks, providing a comprehensive framework for assessing AI-related risks in third-parties. Together, these tracks offer a structured approach to understanding and mitigating AI security threats in third parties. If you have any questions, please contact PromptArmor at support@usepromptarmor.com . Your Instructor N/A – On-Demand PromptArmor helps TPRM teams assess and continuously monitor the risks of AI in vendors. We have extensive experience in finding novel threats in AI-enabled applications, and suggesting concrete actionable recommendations to remediate - both with configuration changes and vendor questions. N/A – On-Demand N/A – On-Demand 1/1 Previous Next

Learn more about Certa, a TPRA Principal Partner Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Certa TPRM Platform Principal Member CONTACT INFORMATION Collin Townsend Head of Account Management collin.townsend@getcerta.com Certa is the leading Third Party Risk Management (TPRM) solution. With its comprehensive Third Party Operating System (Third Party OS), Certa lets you manage risk across all third party types, all risk domains, all in one OS. Certa leverages AI across the third party lifecycle—automating onboarding, risk analysis, compliance, and monitoring. Its no-code workflows, AI-driven decisioning, and real-time data integrations help you adapt to evolving regulations and business needs. With full spectrum risk coverage, Certa delivers due diligence 80% faster, driving smarter and more efficient third party management for global enterprises. TOP PRODUCT FUNCTIONALITY CATEGORIES Certa TPRM: Onboarding, Due Diligence, Performance Management, Infosec, Privacy, Fraud, PEPs & Sanctions, Adverse Media, Geopolitical, + more Certa Ethics & Compliance: ABAC, KYC/AML, KYB, Forced Labor, UFLPA, + more Certa ESG: Sustainable supply chain RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Gokcen Tapkan, Director of Data Research for Black Kite, and TPRA's WNTPRM March 2024 Leader Spotlight. < See All < Previous Next > Gokcen Tapkan Director of Data Research Black Kite Biography Gokcen Tapkan is the Director of Data Research at Black Kite, where she plays a key role in leading cutting-edge AI and ML projects combining her past experience in cybersecurity, compliance and risk. With a background in cryptography, cybersecurity, and compliance, she brings 10+ years of expertise in the government sector, particularly in military-level information security. Since 2012, she has been an Expert Evaluator for European Projects. Holding a master's degree in Computer Engineering from Bosphorus University, Gokcen is not only dedicated to her professional role but also actively engaged in a charitable AI project focused on supporting children on the autism spectrum. Her commitment to leveraging technology for social good is a testament to her passion for making a positive impact Leadership Characteristics Gokcen would describe herself as a pro-active, multi-tasking, human champion person Leadership Challenges About three years ago, we encountered a significant challenge with a Compliance Automation project using an off-the-shelf large language model (LLM) for AI. As we delved into the data daily, it became apparent that something wasn't quite right with the model outcomes, so we decided to develop our own model. Within four months, the notion of developing this in-house model evolved into a full-time research project. Despite the maturity of the idea, resources were not as mature at that time. Fast forward to today, and LLMs, along with various models and services, are experiencing almost exponential growth. During those challenging times, we faced numerous sleepless nights, investing hours in data analysis, outcome evaluation and re-engineering- and I say "we"- because I was doing this with my team. Fortunately, back then, and still today, I have the support of an exceptional team — mostly women. Working in a relatively niche area, extracting meaningful model outcomes from the project posed a formidable challenge that ultimately proved successful. The journey was both painful and empowering. Key Take-a-ways "Stepping out of comfort zones and the endless pursuit of knowledge are pieces of advice generously shared by remarkable women in technology. But here's my take: always find something that genuinely inspires you. It's not about jumping from one thing to another; it's about discovering that sweet spot where passion and purpose align. The spot where you are unique and can fulfill yourself." Fun Fact One of my proudest moments in my career was when the European Commission offered me a contract to be their go-to for evaluating tech projects aiming for funding from the European Union. It was a tough and stressful gig, but I was up for the challenge. And there's a twist. Right in the middle of this whirlwind, I welcomed my first baby into the world. He was a tiny three-month-old when I took on this role that had me volleying between Brussels and working remotely with a brand new baby in my life. But I was determined to be there for him and nurse him until he hit the one-year mark. I did a bit of risk management and weighed my options. Rejecting the job seemed like slamming the door on future opportunities, so I went for it. I wasn't about to compromise on my commitment to nurse my son for at least a year. I made a setup in the Brussels office, complete with a pumping station to keep my nursing goal on track. During meetings, people couldn't help but notice his cute picture on my laptop background. Cue the questions: Who's this adorable baby? Who's looking after him and feeding him? (Cue the laughter upon the response.) Then after welcoming my second child, I needed to figure out how to be a nursing mom on a business trip. I was experienced now, so I used a similar station setup even while traveling.