TRAINING SaaS Certificate Training Friday, September 18, 2026 Date & Time Friday, September 18, 2026 at 1:00:00 PM CDT Intended Audience Duration 4 hrs CPE Credits 4 Fee $159 Register Event Description As organizations increasingly rely on cloud-based Software-as-a-Service (SaaS) solutions, understanding and mitigating associated risks is critical. This virtual training provides an in-depth exploration of key security considerations when evaluating and managing SaaS applications. The course begins with an overview of cloud and SaaS risks, highlighting the unique challenges posed by cloud-based environments. Participants will gain insights into the Shared Responsibility Model , clarifying the division of security responsibilities between cloud providers and customers. The session then delves into security frameworks for major cloud platforms, including Amazon Web Services (AWS) Trust Advisor Reports (TAR), Google Cloud Security, and Microsoft Azure Cloud Security , helping learners assess provider-specific security features. Show More SPEAKER(S) INFORMATION CPE CREDIT COURSE INSTRUCTOR Gregory Rasner Chief Executive Officer Third Party Threat Hunting Gregory is a CEO, author, educator, speaker, and leader in cybersecurity, AI, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has assisted numerous clients and organizations in improving their security posture and reducing risk exposure. Currently, he is engaged with some clients, training their AI Agents to process and analyze data as a human risk professional would do, and ensure intended outcomes with AI implementations. Gregory is also the author of four books published: His latest book, "AI & Third-Party Risk: Stragegies for Success with your AI-enabled Vendors and Partners" is due out in Jan 2026. “Cybersecurity & Third-Party Risk: Third-Party Threat Hunting” (2021) and “Zero Trust and Third-Party Risk: Reduce the Blast Radius” (2023). He has a third book out, co-authored with his wife, Maria Rasner, titled “Privileged Access Management: A Guide to Zero Trust in the Enterprise.” He is the content creator of the training and certification program “Third-Party Cyber Risk Assessor” with the Third Party Risk Association (TPRA). Recently, he launched a 4-hour certificate course with TPRA called “Securing SaaS Applications.” He has won several awards and honors for his innovation and leadership, such as the CSO40 Award and the Security Professional of the Year finalist. He is a frequent keynote speaker, panelist, blogger, podcaster, and online article writer on cybersecurity and risk management topics. He was the SVP and leader for cyber third-party risk at Truist Financial Corp, where he led a team of 20+ cyber professionals and managed the enterprise risk posed by vendors. He holds a BA from Claremont McKenna College, a master's certificate in project management from Villanova University, and multiple certifications in IT, cybersecurity, and project management. He is passionate about cybersecurity and enjoys traveling internationally with his family. Gregory's certifications: CISSP, CCNA, CIPM, ITIL The Third Party Risk Management (TPRM) Certificate Program , offered by TPRA in collaboration with our trusted partners, provides comprehensive training designed to enhance knowledge and expertise in TPRM best practices. This program features a diverse selection of courses covering critical topics in third-party risk, cloud security, AI/LLM security and risk. Participants can choose from both free and paid courses, ranging in duration from one to four hours, allowing for flexible learning tailored to individual needs and schedules. Participants will receive a certificate upon completion of the training course. Please note that this is not a certification program, nor will participants receive any professional credentials. Whether professionals are new to TPRM or looking to deepen their expertise, the program provides valuable insights and practical knowledge to strengthen risk management strategies within their organizations. Attendees will earn four (4) CPE credits upon completion of this course.

This page is dedicated to showcasing the inspiring Women Leaders and their stories. Our goal for this program is to highlight and learn from women leaders in the field of Third Party Risk Management (TPRM) throughout various industries. Back Women Lead Program Welcome to the Women In TPRM (WNTPRM) "Women Lead" Program! This page is dedicated to showcasing inspiring Women Leaders by highlighting their stories. Our goal for this program is to learn from and be inspired by women leaders in the field of Third Party Risk Management (TPRM) throughout various industries. If you know of an inspiring Leader you think should be featured by WNTPRM, complete the form linked below! Apply Now Leader Spotlights Silpa Muni Deputy Manager Biocon WNTPRM September 2026 Leader Spotlight September 1, 2026 Read More Ritu Jethani Director, TPRM & ERM KPMG WNTPRM July 2026 Leader Spotlight July 1, 2026 Read More Sophia Corsetti Senior Product Marketing Manager ProcessUnity WNTPRM May 2026 Leader Spotlight May 1, 2026 Read More Tracey Forney Sr Compliance Program Mr Aerstone WNTPRM August 2026 Leader Spotlight August 20, 2026 Read More Seema Gupta Business Information Security Officer HII- Mission Technologies WNTPRM June 2026 Leader Spotlight June 1, 2026 Read More Dr Angela Dogan Associate Director, Cybersecurity Assurance Kyndryl WNTPRM April 2026 Leader Spotlight April 1, 2026 Read More Angie Roworth SVP - Director, Sourcing Operations & Governance Fulton Bank WNTPRM August 2026 Leader Spotlight August 1, 2026 Read More Paige Johnson SVP, Director of Third-Party Risk Management Stellar Bank WNTPRM May 2026 Leader Spotlight May 13, 2026 Read More Verity Billson Group Head of Third Party Risk Management Experian WNTPRM March 2026 Leader Spotlight March 1, 2026 Read More LOAD MORE

Explore TPRA’s TPRM Consultant Membership plans designed for independent consultants and boutique firms offering third party risk advisory services. Consultant Catalyst Plans Target Audience: Single, Independent Consultants or Boutique Advisory Firms specializing in third party risk management services, including but not limited to TPRM program implementation, tool implementation, and/or staff augmentation. INQUIRE ABOUT MEMBERSHIP About This Membership Plan The Consultant Catalyst Plan is a tailored membership option designed specifically for independent consultants and boutique advisory firms that specialize in third party risk management. Recognizing that these high-expertise professionals often operate with limited marketing resources, TPRA has created an accessible, affordable pathway into its practitioner-driven ecosystem. Through this membership, consultants gain the opportunity to build visibility, credibility, and relevance in a highly targeted community of TPRM professionals. This plan provides structured, ethical exposure to the TPRA network, including guidance on lead generation strategies that respect practitioner boundaries while helping consultants showcase their expertise. Members are encouraged to engage directly in community discussions, contribute thought leadership, and demonstrate their unique value through active participation. While TPRA does not guarantee leads, the Consultant Catalyst Plan creates the foundation for long-term relationship-building, increased brand recognition, and a stronger position in the TPRM space. Key Objectives 1 Provide affordable entry to the TPRA ecosystem. 2 Offer guided lead generation strategies (without violating practitioner privacy). 3 Enable visibility and credibility for consultants. 4 Encourage active participation to demonstrate value. INQUIRE ABOUT MEMBERSHIP Key Benefits Explore a brief overview of the benefits included in our Consultant Catalyst Plan. Exclusive Access to Practitioner-Focused Events Gain invitations to all TPRA Practitioner meetings, including Industry Roundtables and Insight Work Groups. Participate as a panelist or presenter once a year and engage in collaborative development of TPRA tools and guidance—all in a no-solicitation environment that fosters trust and expertise. Lead Generation & Networking Tools Participate in bi-annual Consultant Connector Events with interested practitioners. Plus, use the TPRA's “Lead Generation Blueprint” Toolkit to guide compliant, value-driven outreach based on best practices. Strategic Visibility & Promotion Opportunities Showcase your expertise through a curated TPRA Consultant Directory Profile, a LinkedIn spotlight post, Consultant Corner blogs, and the opportunity to be featured in TPRA’s quarterly newsletter. Position your firm as a recognized thought leader within the third party risk community. Business Growth & Peer Exchange Forums Join quarterly Consultant Roundtables—exclusive, TPRA-moderated sessions where you’ll share challenges, trends, and business growth strategies with fellow consulting peers in a supportive and strategic environment. Co-Hosted Event Collaboration TPRA will partner with your organization to co-host webinars, LinkedIn Live sessions, and/or podcasts. Leverage TPRA’s promotion while leading discussions that highlight your niche knowledge and solutions in front of a relevant and engaged audience. Recognition, Resources & Professional Development Apply for the TPRM Innovator Award, access discounts on certifications for consultant teams, and post jobs on TPRA’s career board. Contribute educational content, share surveys, and participate in our Women in TPRM Program. Consultant Catalyst Members Inquire About Membership Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Follow on LinkedIn > Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

Learn more about Locktivity, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Locktivity TPRM Platform Incubator Member CONTACT INFORMATION info@locktivity.com (415) 234-0245 Locktivity isn't just using AI to make things faster, it's changing the way teams work for better outcomes with less effort. Locktivity is a purpose built platform to enable small GRC and security teams to shift third party risk management left. Locktivity combines the power of human expertise, AI insights, and automation to embed your policies into existing workflows. Move from checking compliance boxes, writing reports and chasing information to orchestrating and monitoring with ease. TOP PRODUCT FUNCTIONALITY CATEGORIES Inventory management Impact-driven risk assessments Right-sized due diligence AI-supported vendor assessments Automated audit reports Real-time visibility into your risk footprint OAuth token and integration monitoring Continuous monitoring RESOURCES FROM THIS VENDOR MEMBER Third Party Risk Management Maturity Model VENDOR MEMBER RESOURCE | August 28, 2024 Managing third party AI use and privacy risks VENDOR MEMBER RESOURCE | June 20, 2024 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

FOR IMMEDIATE RELEASE Exiger Named 2024 Innovator Award Winner Thursday, April 11, 2024 Robert Huff (left), Senior Vice President, Third-Party & Supply Chain Risk Management Solutions for Exiger, accepts the 2024 Innovator Award from Julie Gaiaschi (right), CEO & Co-founder of the Third Party Risk Association (TPRA) at TPRA's 2024 In-Person Conference in Phoenix, AZ. Robert Huff (left), Senior Vice President, Third-Party & Supply Chain Risk Management Solutions for Exiger, accepts the 2024 Innovator Award from Julie Gaiaschi (right), CEO & Co-founder of the Third Party Risk Association (TPRA) at TPRA's 2024 In-Person Conference in Phoenix, AZ. 1/1 Robert Huff (left), Senior Vice President, Third-Party & Supply Chain Risk Management Solutions for Exiger, accepts the 2024 Innovator Award from Julie Gaiaschi (right), CEO & Co-founder of the Third Party Risk Association (TPRA) at TPRA's 2024 In-Person Conference in Phoenix, AZ. Exiger Named Third Party Risk Association's (TPRA) 2024 Third Party Risk Management (TPRM) Service Provider Innovator Award Winner PHOENIX, ARIZONA — APRIL 11, 2024 — At the Third Party Risk Association’s (TPRA) 2024 TPRM Conference, “Third Party Risk Madness” in Phoenix, Arizona, TPRA announced Exiger as the 2024 winner for their TPRM Service Provider Innovator Award. “We couldn’t be more excited! Thank you to all of the judges, all of the TPRA leadership, and the TPRM community,” said Brandon Daniels, Chief Executive Officer at Exiger. “Let’s make the world a safer and more transparent place for our customers to succeed!” TPRA had 24 total Service Provider nominations for this award, with 6 organizations chosen to be finalists in the award process. Despite the difficult selection process given the many outstanding service providers, the TPRA Board of Directors and select Practitioners chose Exiger as the overall winner. “What intrigued us the most about this organization is, not only do they obtain large amounts of data and correlate that data against a set of controls and regulations to determine current risks, but the correlation of that information via AI allows them to also provide you with leading risk indicators,” Julie Gaiaschi, CEO & Co-founder of the Third Party Risk Association, noted during her announcement speech. One example of this is that Exiger can provide customers with specific risks as they relate to a piece of software via CVE and the software assessment itself, but also provide leading risk indictors of how the software was developed. Not only does Exiger look at cyber risk, but also financial health, operational, regulatory, reputational, and criminal risk (which includes export controls). Because of their connection to the government, they map regulations to controls and artifacts, as well to determine regulatory compliance, via artificial intelligence (AI). When asked how they maintain the regulatory compliance side with so many new and changing regulations, Exiger stated they are, “...looking at each rule via AI and assessing changes and updates to the policy, rulemaking, or legislation on a regular basis.” In addition, they meet with regulators to help define legislation to ensure they can validate specific controls. The last piece that intrigued TPRA judges was their ability to perform root cause analysis of findings. Their AI model can articulate why risks exist through natural language prompts and provide the evidence it found to support the finding. For all these reasons and more, TPRA selected Exiger as their 2024 TPRM Service Provider Innovator Award winner. About Exiger Exiger got their start in terms of large scale TPRM in this sector with the Defense Counter Intelligence Agency and within the last few years have now branched out into the commercial space (which now makes up the majority of their business). Within the commercial sector, the majority of their clients are in healthcare, Information Communication Technology, and Advanced Manufacturing (or critical infrastructure). They are now seeing an increase in retail as well, post-COVID. Exiger is actively working to simplify the user experience by identifying risk no matter what domain it is in via not only open and privately procured sources, but also by correlating information obtained and within regulations via AI. Their mission is to provide a safer and more transparent space for customers to succeed. For more information about Exiger and their innovative approaches to identifying and mitigating third party risk, visit www.exiger.com . About the Award One of the objectives of the Third Party Risk Association (TPRA) is to promote the value that Third Party Risk Management (TPRM) Service Providers add with regards to advancing the TPRM industry as a whole. In support of this objective, the TPRA created the TPRM Service Provider Innovator Award to recognize all the work TPRM Service Providers put into delivering innovative, efficient, and effective tools and techniques for Practitioners to leverage to assess, mitigate, and manage the risk of third parties. After reviewing the initial applications, TPRA’s seven judges chose six organizations as finalists in the award process. The team of judges then met with these organizations individually to further discuss their application, where they see their organizations headed within the next five years, what they would change about the TPRM industry, and why social responsibility is important to them. “These organizations are all innovative in their own right,” TPRA noted in their initial announcement. “While this award is simply a visible recognition for one, all of these organizations are doing so many innovative and important things to better mitigate risk, improve processing times, reduce resource workload, and provide more meaningful risk identification and mitigation techniques.” This award recognizes a TPRM Service Provider organization that: offers a product and/or service to the TPRM Practitioner community at large to assist with identifying, assessing, monitoring, and/or mitigating third party risk, actively advances the industry through pioneering and/or innovating TPRM solutions/services, regularly collaborates with Practitioners, Regulators, and/or other Service Providers in the creation, implementation, and/or delivery of their innovative products/services, and advocates for and exemplifies social responsibility and philanthropy. Any TPRM Service Provider organization may apply for this award, regardless of membership with the TPRA. “We are extremely grateful to every one of the 24 innovative service provider organizations that applied this year. We look forward to getting to know even more awesome organizations in the coming years and giving them their due recognition through our Innovator Award Program,” Gaiaschi said in closing. ### The Third Party Risk Association was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. This organization is a 501(c)(6) not- for-profit. MEDIA CONTACT Meghan Schrader Meghan.schrader@tprassociation.org www.tprassociation.org FOR MORE INFORMATION https://www.tprassociation.org/innovator-award Previous Next

Learn more about RSM US, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > RSM US TPRM Services Consultant Catalyst CONTACT INFORMATION Amy Feldman Amy.Feldman@rsmus.com RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. The clients we serve are the engine of global commerce and economic growth, and we are focused on developing leading professionals and services to meet their evolving needs in today’s ever-changing business environment. RSM US LLP is the U.S. member of RSM International, a global network of independent audit, tax and consulting firms with 48,000 people across 120 countries. For more information, visit rsmus.com , explore our third-party risk management services , like us on Facebook , follow us on Twitter and/or connect with us on LinkedIn . TOP PRODUCT FUNCTIONALITY CATEGORIES Managed services for due diligence Vendor risk assessments (onsite or remote) Third-party risk management program audit/assessment Third-party risk management program building Dashboarding and analytics Cyber resiliency Advisory services Regulatory guidance related to third-party relationships Access to subject matter resources across risk topics Specialized vendor audits RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

FOR IMMEDIATE RELEASE Interos and Aravo Awarded 2025 Excellence Awards by Third Party Risk Association Monday, March 24, 2025 1/1 Interos and Aravo Named Third Party Risk Association's (TPRA) 2025 Excellence Award Winners in the Categories of Risk Rating/Risk Intelligence and TPRM Platform ANKENY, IOWA — MARCH 24, 2025 — Last week, the Third Party Risk Association (TPRA) announced their 2025 winners for the Excellence Awards, a sub-category of their Third Party Risk Management (TPRM) Service Provider Innovator Award. “These organizations are constantly pushing boundaries, developing forward-thinking solutions, and streamlining risk management processes,” said Julie Gaiaschi, CEO and Co-founder of TPRA, during the award announcement speech. “They also empower practitioners to think smarter, react faster, and provide efficiencies in assessing, mitigating, and monitoring third party risk.” To celebrate TPRM service providers’ relentless dedication and industry-transforming contributions, TPRA established the Innovator Award in 2022, creating the new Excellence Award sub-categories in 2025. TPRA had a total of 30 nominations for the award this year in the categories of GRC/TPRM Platform, Risk Ratings/Intelligence Tools, and TPRM Services. Seven organizations were chosen as finalists, with two organizations, Aravo and Interos , named as Excellence Award winners in their respective tool categories. Aravo , the TPRM Platform Excellence Award winner, uses their AI engine to collaborate with multiple risk intelligence partners to enable customers to access authorized information as their primary information and assessment vehicle. This “Intelligence First” approach shifts risk assessments away from questionnaires towards real-time intelligence integrations, focusing on actual evidence and reports obtained and comparing it to control frameworks. The Excellence Award winner for Risk Rating/Intelligence, Interos , is redefining supplier resilience through AI-powered, real-time visibility. Their platform allows you to anticipate disruptions, ensuring programs move from reactive to proactive and predictive. For example, they allow you to see the impact of tariffs on global trade and your supply chain. To learn more about this program and its winners, visit https://www.tprassociation.org/innovator-award . ### The Third Party Risk Association was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. This organization is a 501(c)(6) not-for-profit. MEDIA CONTACT Meghan Schrader Meghan.schrader@tprassociation.org www.tprassociation.org FOR MORE INFORMATION https://www.tprassociation.org/innovator-award Previous Next

Learn more about Center for Financial Professionals (CeFPro), a TPRA Strategic Partner, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Center for Financial Professionals (CeFPro) TPRM Services Strategic Partner CONTACT INFORMATION Main Office: info@cefpro.com Business Development: sales@cefpro.com Marketing: marketing@cefpro.com The Center for Financial Professionals (CeFPro) is a global authority for financial and risk professionals, convening senior decision-makers through international conferences, research-driven insight, and expert-led discussion across Europe and North America. CeFPro delivers high-impact conferences, webinars, interviews, and thought leadership focused on the most critical challenges shaping financial services today and spanning a broad range of disciplines across financial services, including third-party risk management, vendor and supplier risk, operational resilience, non-financial risk, ESG, and fintech. Its work is grounded in rigorous primary research and shaped through close collaboration with leading practitioners from across the global financial services industry. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Research-driven conferences addressing timely priority risk and finance themes, with dedicated networking opportunities and curated roundtables for peer-level engagement. Senior expert and practitioner-led sessions, interactive panels, and discussions at live events. CeFPro & TPRA Vendor & Third Party Risk: The Cross Industry Conference, October 14-15, Fort Worth. CeFPro & TPRA Vendor & Third Party Risk: The Cross Industry Conference, November 10-11, London. Knowledge Hub CeFPro Connect, providing access to timely insights and news articles Connect Plus premium membership , offering full access to magazines, research reports, post-event websites, articles, interviews, news, insights, and event ticket perks Primary research and market intelligence, including TPRM reports such as Supplier Stability in Operational Resilience and Bridging the Productivity Gap in Third-Party Risk Management with AI. Monthly magazine featuring in-depth analysis, expert commentary, and related industry coverage. Expert-led webinars and virtual briefings on emerging risks and regulatory developments RESOURCES FROM THIS VENDOR MEMBER From Evidence to Action: How Leading Teams Modernize Third-Party Risk Management VENDOR MEMBER RESOURCE | July 17, 2026 Connect Magazine - March Edition 2026 (March 25, 2026) VENDOR MEMBER RESOURCE | July 17, 2026 Connect Magazine - July Edition 2026 (July 24, 2026) VENDOR MEMBER RESOURCE | July 17, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

This course is essential for TPRM professionals, cybersecurity analysts, and vendor risk managers who have a foundational understanding of risk management and are ready to tackle the unique challenges posed by third-party AI deployments. AI for TPRM Professionals Price $159 Duration 4 Hours Type Live Training Session Enroll By clicking this button, you will be redirected to our Training & Certification Platform (Inspire360) . Please note that the Inspire360 Training and Certification Platform is separate from the TPRA website. Your TPRA website login credentials will not work on Inspire360, and a separate account is required to register for and access courses. < Back About the Course Course Overview Instructor: Gregory C. Rasner, Third Party Threat Hunting LLC Objective: To bridge the gap between emerging AI technologies and established third-party risk methodologies, preparing professionals to assess, monitor, and govern AI systems within the supply chain. Duration: 4 hours CPE Credits: 4 (1 CPE for every 50 minutes of instructional time completed) Minimum Attendance Time to Earn: 200 minutes Online Content Required to Complete the Course: Course Instructions Waiver Course Evaluation (Knowledge Check) Post-Training Survey Training Attendance (completed by staff) Why This Course? This training bridges the divide between cutting-edge AI capability and established risk methodologies. You will learn to move beyond basic security checklists and master the nuances of AI lifecycles, adversarial vulnerabilities, and global regulatory compliance. What You Will Master AI Fundamentals for Risk Pros: Demystify the pillars of AI—Data, Hardware, and Algorithms—to effectively interrogate your vendors. Navigating the "Black Box": Gain the expertise to identify and mitigate critical threats, including hallucinations, shadow AI, data poisoning, and bias. Frameworks in Action: Learn how to apply the NIST AI Risk Management Framework (RMF) to your vendor portfolio, ensuring compliance with evolving international rules, including the EU AI Act. Governance Across the Lifecycle: Master structured due diligence—from the initial pre-contract intake to secure, data-wiping disengagement. Hands-On Workshop: Dive into a real-world case study, OpusNox , where you will execute risk intake, design protective contractual clauses, and build secure offboarding playbooks. Who Should Attend? This course is essential for TPRM professionals, cybersecurity analysts, and vendor risk managers who have a foundational understanding of risk management and are ready to tackle the unique challenges posed by third-party AI deployments. Are you ready to lead your organization’s AI transformation? Join us for the next session and turn AI risk into a manageable business asset. Your Instructor Gregory Rasner Gregory is a CEO, author, educator, speaker, and leader in the field of cybersecurity, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has helped numerous clients and organizations improve their security posture and reduce their risk exposure. He is the founder and CEO of Third Party Threat Hunting LLC, a cybersecurity consulting firm that specializes in a wide range of areas, including cybersecurity, cloud computing, network architecture, and more. Gregory Rasner Gregory Rasner 1/1 Previous Next

Learn more about DRI International, a TPRA Strategic Partner, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > DRI International TPRM Services Strategic Partner CONTACT INFORMATION Email: driinfo@drii.org Tel: 866-542-3744 Disaster Recovery Institute International (DRI) is the oldest and largest nonprofit that helps organizations around the world prepare for and recover from disasters by providing education, accreditation, and thought leadership in business continuity, disaster recovery, cyber resilience and related fields. Founded in 1988, DRI has certified 20,000+ resilience professionals in 110+ countries and at 95 percent of Fortune 100 companies. DRI offers 15 individual certifications, including the globally-recognized CBCP certification, and certifies organizations as resilient enterprises. DRI offers training programs ranging from introductory to masters level across a variety of specialties in multiple languages; online and in-person continuing education opportunities; and an annual conference dedicated to the resilience profession. DRI supports charitable activities through the DRI Foundation. TOP PRODUCT FUNCTIONALITY CATEGORIES Professional business continuity, cyber resilience, risk management training and certification Organizational resilience assessment and certification Tabletop training exercises RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Leverage this list of third party risk management service providers in various categories to find the right vendor for your needs. TPRM Tools At the Third Party Risk Association, we know that finding the right vendor for your needs can be a challenge. Often, organizations may not even be aware of the potential vendors in the space. We're aiming to compile an exhaustive list of TPRM vendors across various categories to make your life a little easier. This list of TPRM Vendors is not affiliated with the TPRA, and the TPRA does not receive any monetary gain from listing them below. If you are a TPRM Vendor and would like to be included in the list below, please email Heather Kadavy at heather.kadavy@tprassociation.org . Filter by Tool Category Filter by TPRA Membership Status Filter by Organization Name Number found: 168 Search Clear Filters CATEGORY ORGANIZATION TPRA MEMBER URL TPRM Platform Aravo Yes https://www.aravo.com Risk Ratings/Intelligence Bitsight Yes https://www.bitsight.com GRC Platform Mitratech Prevalent Yes https://mitratech.com/ TPRM Platform ProcessUnity Yes https://www.processunity.com Risk Ratings/Intelligence RiskRecon by Mastercard Yes https://www.riskrecon.com Risk Ratings/Intelligence Supply Wisdom Yes https://www.supplywisdom.com/ Risk Ratings/Intelligence Black Kite Yes https://blackkite.com/ TPRM Platform Certa Yes https://certa.ai TPRM Platform SecurityScorecard Yes https://www.securityscorecard.io TPRM Services S&P Global Market Intelligence Yes https://www.spglobal.com/marketintelligence/en/mi/products/ky3p.html TPRM Platform Aprovall Yes https://www.aprovall.com/en/ TPRM Platform BlueVoyant Yes https://www.bluevoyant.com/ GRC Platform Drata Yes https://drata.com/ TPRM Services HITRUST Yes https://hitrustalliance.net/ Risk Ratings/Intelligence Interos Yes https://www.interos.ai/ TPRM Platform Lema Yes https://www.lema.ai/ Risk Ratings/Intelligence NetRise, Inc. Yes https://www.netrise.io/ TPRM Platform OneTrust Yes https://www.onetrust.com Risk Ratings/Intelligence PromptArmor Yes https://www.promptarmor.com TPRM Platform Safe Security Yes https://safe.security/ TPRM Platform Sayari Yes https://sayari.com/ GRC Platform Tandem Yes https://tandem.app/ TPRM Platform Tenchi Security Yes https://www.tenchisecurity.com/en TPRM Platform Vanta Yes https://vanta.com Risk Ratings/Intelligence Veridion Yes https://veridion.com/ TPRM Services Next Peak Yes https://nextpeak.net/ TPRM Services RSM US Yes https://rsmus.com/ TPRM Services Risk Tide Solutions Yes https://www.risktide.com/ TPRM Services Third Party Threat Hunting LLC Yes https://thirdpartythreathunting.com/ TPRM Services Vendor Centric Yes https://www.vendorcentric.com TPRM Services Ventara Risk Solutions Yes https://www.ventararisksolutions.com/ TPRM Platform Anqa Yes https://www.anqa.ai/ TPRM Services CRFQ Yes https://www.crfqnow.com/ Risk Ratings/Intelligence Continuity Strength Yes https://continuitystrength.com/corporate-support TPRM Platform Coverbase Yes https://coverbase.ai/ Risk Ratings/Intelligence CyberCert Yes https://cybercert.ai TPRM Platform DocuBark Yes https://docubark.com/ TPRM Platform Fabrik Yes https://www.thetrustfabrik.com/ Third Party Assurance FusionAIrre Yes https://www.fusionairre.ai/ TPRM Platform HERO Yes https://herosecurity.ai TPRM Platform Locktivity Yes https://www.locktivity.com/ TPRM Platform Portend AI Yes https://portend.ai/ TPRM Integration Tool PsyberCog Labs Yes https://www.psybercog.com TPRM Platform SecureOS Yes https://www.secureos.co/ TPRM Services Securis360 Inc. Yes https://securis360.com TPRM Platform Shift Security Yes https://www.shift.security/ TPRM Platform Tekrisq Yes https://tekrisq.com/home TPRM Platform ThirdOrbit Yes https://thirdorbit.io TPRM Services Center for Financial Professionals (CeFPro) Yes https://cefpro.com/ Research & Educational Community Cloud Security Alliance (CSA) Yes https://cloudsecurityalliance.org/ TPRM Services Cyber Future Foundation Yes https://cyberfuturefoundation.org/ TPRM Services DRI International Yes https://www.tprassociation.org/vendor-profiles/dri-international Research & Educational Community FAIR Institute Yes https://www.fairinstitute.org Research & Educational Community Fintech Training Center Yes https://fintechtrainingcenter.com/ Research & Educational Community Global Resilience Federation (GRF) Yes https://www.grf.org/ TPRM Services Secure Controls Framework (SCF) Yes https://securecontrolsframework.com/ GRC Platform 360Factors Inc No https://www.360factors.com TPRM Services AML RightSource No http://www.amlrightsource.com GRC Platform Acuity Risk Management No http://acuityrm.com GRC Platform Archer Integrated Risk Management No https://www.archerirm.com/third-party-governance Risk Ratings/Intelligence Argos Risk No https://argosrisk.com TPRM Platform Atlas Systems No https://www.atlassystems.com/solutions/third-party-risk-management TPRM Services BDO USA No https://www.bdo.com Risk Ratings/Intelligence Blackwired Pte Ltd No https://www.blackwired.com TPRM Platform Blue Umbrella No http://www.blueumbrella.com TPRM Services BraunWeiss Inc. No https://www.braunweiss.net/ Risk Ratings/Intelligence BreachSiren No https://breachsiren.com TPRM Services Cadre No https://www.cadre.net TPRM Services CastleHill Risk No https://www.castlehillrisk.com TPRM Platform Censinet No https://www.censinet.com TPRM Services Certificial, Inc. No http://www.certificial.com TPRM Platform Clarity360 (Kroll) No https://www.krollclarity.com/ TPRM Services ComplyScore No https://www.complyscore.com TPRM Services Continuity Solutions No https://www.continuitysolutions.org/ TPRM Services Copeland BUHL No https://www.copelandbuhl.com/ GRC Platform CoreStream No http://corestreamplatform.com TPRM Platform Crossword Cybersecurity No https://www.crosswordcybersecurity.com/ TPRM Services Crowe No https://www.crowe.com/services/consulting/third-party-risk-management TPRM Platform CyberGRX (now ProcessUnity) No https://www.cybergrx.com Risk Ratings/Intelligence Cyberwrite No https://www.cyberwrite.com/ TPRM Platform DSALTA No https://www.dsalta.com/ GRC Platform DVV Solutions TPRM No https://www.dvvs.co.uk Risk Ratings/Intelligence Dark Sky Technology, Inc. No http://www.darkskytechnology.com TPRM Services Defentrix No https://www.defentrix.com/ GRC Platform Diligent No https://www.diligent.com/ TPRM Services Dixon Hughes Goodman No https://www.dhg.com/services/advisory TPRM Platform DoubleCheck Software No http://www.doublechecksoftware.com Risk Ratings/Intelligence Dun & Bradstreet No https://www.dnb.com/solutions/manage-supplier-risk.html Research & Educational Community Dynamic Standards International (DSI) No https://dsi.org/about GRC Platform Ethico No http://www.ethico.com TPRM Platform EthixBase360 (formerly EthixBase) No https://ethixbase360.com/ TPRM Services Evident ID No https://www.evidentid.com TPRM Platform Exiger No https://www.exiger.com/ TPRM Platform Findings No https://findings.co/ TPRM Platform FlowForma No http://www.flowforma.com/flowassure Risk Ratings/Intelligence FortifyData No http://www.fortifydata.com TPRM Platform Fortress No https://fortress.ai/ Risk Ratings/Intelligence GRMS | Global Risk Management Solutions No http://www.GlobalRMS.com/Difference TPRM Platform Gatekeeper No https://www.gatekeeperhq.com TPRM Services Grant Thorton No https://www.grantthornton.com/services/advisory-services/cybersecurity-and-privacy/third-party-risk TPRM Platform GraphiteConnect No https://www.graphiteconnect.com/ TPRM Services GuidePoint Security No http://www.guidepointsecurity.com TPRM Platform Halo Ai No https://gohalo.ai/ TPRM Platform Hellios Information No https://hellios.com/ TPRM Platform Hyperproof No https://hyperproof.io/product/third-party-risk-management/ Risk Ratings/Intelligence ISS Corporate Solutions No https://www.isscorporatesolutions.com/solutions/security-suite/ TPRM Services ITPN No http://www.ITPeopleNetwork.com Risk Ratings/Intelligence Ionix previously Cyberpion No https://www.ionix.io/ Risk Ratings/Intelligence KHARON No https://www.kharon.com/ TPRM Platform Kobalt Labs No https://www.kobaltlabs.com/ GRC Platform LogicGate No https://www.logicgate.com/solutions/third-party-risk-management/ TPRM Platform LogicManager No https://www.logicmanager.com/ TPRM Platform Magnitude No https://magnitude.ai/ GRC Platform MetricStream No https://www.metricstream.com TPRM Platform MyRiskShield No https://www.myriskshield.com/ GRC Platform Navex No https://www.navex.com/en-us/products/navex-irm-integrated-risk-management/third-party-risk-management/ TPRM Platform Ncontracts No https://www.ncontracts.com/ Risk Ratings/Intelligence Nova Technology Limited No https://nova-doc.com/ GRC Platform Onspring No https://onspring.com/solutions/governance-risk-compliance/third-party-risk-management/ GRC Platform OpenPages GRC by IBM No https://www.ibm.com/products/openpages-with-watson?utm_content=SRCWW&p1=Search&p4=43700070084211913&p5=p&gclid=f61d865decc71a305683e4bf26ab6b2c&gclsrc=3p.ds GRC Platform Optro (pka Auditboard) No https://optro.ai/ Risk Ratings/Intelligence Orpheus Cyber No https://www.orpheus-cyber.com Risk Ratings/Intelligence Owlin No http://www.owlin.com TPRM Services PRAXIS Technology Escrow, LLC No https://praxisescrow.com GRC Platform PROXORA No https://www.proxora.com/en/ Risk Ratings/Intelligence Panorays No https://www.panorays.com TPRM Platform Perimeter (formally ProcessBolt) No https://perimeter.net/ TPRM Platform Protecht No https://www.protechtgroup.com/en-us/ Risk Ratings/Intelligence RapidRatings No https://www.rapidratings.com/ GRC Platform Reasonable Risk No https://www.reasonablerisk.com/ Risk Ratings/Intelligence Recorded Future No https://www.recordedfuture.com TPRM Platform Resilinc No http://www.resilinc.ai TPRM Platform Risk Ledger No https://riskledger.com/ TPRM Platform Risk Ledger No https://riskledger.com/ GRC Platform RiskOptics formerly Reciprocity No https://reciprocity.com/ GRC Platform SAI 360 GRC No https://www.sai360.com/ GRC Platform SAP Risk Management No https://www.sap.com/products/financial-management/risk-management.html TPRM Services Schneider Downs No https://www.schneiderdowns.com/third-party-risk-management TPRM Services SecureCrest No https://www.securecrest.com Risk Ratings/Intelligence Semantic Visions No https://www.semantic-visions.com/ Risk Ratings/Intelligence Sentrisk No https://www.marshmclennan.com/sentrisk.html GRC Platform ServiceNow GRC No https://www.servicenow.com/products/governance-risk-and-compliance.html TPRM Services Sidekick Security No https://sidekicksecurity.io/third-party-risk-management/ TPRM Platform Smarsh (formerly Privva) No https://www.smarsh.com/platform/cybersecurity-risk-management/vendor-risk-management TPRM Services Source Callé No https://www.sourcecalle.com TPRM Platform Sphera (formerly RiskMethods) No https://sphera.com/supply-chain-risk-management/ GRC Platform Standard Fusion No https://www.standardfusion.com/ TPRM Platform Start No https://www.startvrm.com/ TPRM Platform TDI No https://tdinternational.com/ Risk Ratings/Intelligence TRaiCE No https://www.traice.io TPRM Services TUV OpenSky No https://www.tuvopensky.com Risk Ratings/Intelligence The Smart Cube, a WNS company No https://www.thesmartcube.com/solutions/procurement-supply-chain/supplier-risk-intelligence/ TPRM Platform ThirdPartyTrust (a Bitsight company) No https://www.thirdpartytrust.com TPRM Platform Trust Your Supplier No https://trustyoursupplier.com/ TPRM Platform TrustExchange No https://www.trustexchange.com TPRM Services Truvo Cyber No http://truvocyber.com GRC Platform TutelaSolutions No https://www.tutela-solutions.com/ Risk Ratings/Intelligence UpGuard No https://www.upguard.com/ TPRM Platform VISO TRUST No https://www.visotrust.com TPRM Services VIVIDedge No https://www.vivid-edge.com/ TPRM Platform Velocity (Stern Security) No https://www.velocitysec.com/ Risk Ratings/Intelligence Vendict No https://www.vendict.com/ TPRM Platform Vendict No https://vendict.com/ TPRM Platform VendorRisk No https://www.vendorrisk.com TPRM Platform Vendorly No https://www.vendorly.com/ TPRM Platform Whistic No https://www.whistic.com TPRM Platform myCYPR No https://www.mycypr.com/ TPRM Services Continuiti Solutions No https://continuitisolutions.com/

Learn more about Supply Wisdom, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Supply Wisdom Risk Ratings/Intelligence Champion Member CONTACT INFORMATION Dan Boyle Global Head of Sales & Partnerships danielb@supplywisdom.com 🏆 TPRA's 2022 TPRM Service Provider Innovator Award Winner Supply Wisdom delivers real-time, continuous risk intelligence across third parties, Nth parties, and their operating locations. Its AI-driven platform provides verified alerts and predictive insights that help organizations identify emerging risks sooner, reduce exposure, and strengthen operational resilience. Supply Wisdom is the only solution offering true real-time visibility across all major risk domains: Show More TOP PRODUCT FUNCTIONALITY CATEGORIES The Supply Wisdom Difference: Continuous, human-verified intelligence across your vendors, locations, and supply chain. Core capabilities include: Continuous monitoring across 7 critical risk domains Human-verified alerts by subject-matter experts Location tagging and Nth party intelligence Built-in dashboards, APIs, and automated reports RESOURCES FROM THIS VENDOR MEMBER Understanding Digital Operational Resilience Act and Its Impact on TPRM Strategies VENDOR MEMBER RESOURCE | October 3, 2024 Insights from Supply Wisdom's 2024 Survey of Risk Professionals: Risk Management in a Technology-Driven World VENDOR MEMBER RESOURCE | July 22, 2024 Weekly Update: Global Supply Chain Disruptions - The Tigray Conflict: A Humanitarian Crisis in Ethiopia VENDOR MEMBER RESOURCE | October 30, 2023 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Supply Wisdom has once again earned a spot on the Inc. 5000 list of the fastest-growing private companies in America August 12, 2025 Supply Wisdom Announces $14 Million Funding Round and Industry Veteran Jenna Wells’s Appointment as CEO June 18, 2025 Supply Wisdom recognized as an Incredible Workplaces(™) Gold Certified organization in the Mid Sized category. January 28, 2025 ADDITIONAL OPPORTUNITIES Previous Next