Learn about Seema Gupta, Business Information Security Officer for HII- Mission Technologies, and TPRA's WNTPRM June 2026 Leader Spotlight. < See All < Previous Next > Seema Gupta Business Information Security Officer HII- Mission Technologies Biography Seema Gupta is a cybersecurity and third-party risk leader with over 20 years of experience helping organizations navigate the intersection of technology, trust, resilience, and governance. Her career spans Aerospace & Defense, financial services, SaaS, and federal environments, where she has led initiatives focused on cybersecurity, supply chain resilience, vendor governance, and regulatory compliance in support of mission-critical operations. Seema has worked across business, technology, procurement, and risk functions to develop governance frameworks, strengthen customer trust, and support secure, scalable operations across complex enterprise environments. Beyond her professional work, Seema serves in nonprofit leadership roles focused on community impact and professional development, including as Vice Chair and Board Member of the Immigrant Giving Circle, where she supports fundraising, governance, and grant initiatives benefiting immigrant-focused organizations across the DMV region. She also contributes to the cybersecurity and project management community through mentorship, scholarship review, and advisory initiatives. Outside of work, Seema is an avid pottery enthusiast and enjoys the creative discipline and balance that comes from working with clay. Leadership Characteristics Deliberative Learner Analytical Context Relator Leadership Challenges 1. Leading Early in Male-Dominated Technical Environments One of the early challenges in my career was leading large enterprise technology implementations in environments where there were very few women in technical leadership roles. I built credibility by focusing on preparation, consistency, and relationship-building, while being transparent about where I needed guidance. Seeking mentorship and staying collaborative helped me successfully lead enterprise-scale programs and develop a leadership style grounded in accountability, adaptability, and continuous learning. 2. Building Technical Depth in Cybersecurity As my career evolved, I wanted to deepen my technical expertise in cybersecurity and risk management beyond program leadership. I addressed this by pursuing a Master’s degree in Secure Information Systems with a cybersecurity focus and later earning my CISSP certification. This combination of education and hands-on experience strengthened my ability to lead strategic conversations around security architecture, compliance, and third-party risk. 3. Overcoming Imposter Syndrome Like many professionals in high-visibility leadership roles, I have worked through moments of imposter syndrome. Over time, I learned that leadership is not about having every answer, but about sound judgment, continuous learning, and bringing the right people together to solve problems. I overcame this by seeking feedback, investing in growth, and focusing on the value I consistently delivered through execution, collaboration, and strategic thinking. Key Take-a-ways Thinking big! Always looking at ways to bridge the gaps between thought and practice. How does Cyber, Privacy, Finance, Operations and Legal have in common? And how do you bring it all together. Fun Fact I am a pottery enthusiast and love making things for family and friends (and giving them whether they want them or not).

Learn more about Safe Security, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Safe Security TPRM Platform Advocate Member CONTACT INFORMATION Nicola Sanna President nicola.s@safe.security SAFE One delivers the industry's only data-driven, unified platform for managing all of your third-party and enterprise cyber risks. SAFE delivers a TPRM solution that runs with minimum human intervention. SAFE’s specialized AI agents autonomously manage the full vendor assessment lifecycle — from outreach and evidence collection to risk analysis, follow-ups, reporting and even treatment recommendations— without needing constant oversight or manual input. TOP PRODUCT FUNCTIONALITY CATEGORIES Autonomous TPRM Experience via Agentic AI Auto-Discovery of Third and Fourth Parties Automated Vendor Tiering AI-based Vendor Interactions Outside-in Assessment Auto-Discovery of Vendor Trust Centers, Security and Privacy Policies Auto Due Diligence Continuous Monitoring Regulatory Compliance Mapping AI-powered analytics, reporting and dashboards RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about TPRA's available Vendor Member plans, the benefits included in each one, and how to join! TPRA Vendor Membership Becoming a TPRA Vendor Member isn't just about gaining leads and promoting your organization, it's about helping to further the industry of Third Party Risk Management (TPRM) by becoming an integral part of a community that establishes TPRM guidance, resources, and tools, and works to promote the value that TPRM professionals add to their organizations. INQUIRE ABOUT MEMBERSHIP This page is specific to Vendor Membership, but TPRA offers three types of membership to TPRM Service Providers depending on their needs, maturity, and/or revenue. A brief overview of each option can be found below, with links to explore further. Vendor Membership For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Learn More Consultant Catalyst For single Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services, typically with limited marketing budgets but high expertise. Learn More Incubator Program For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Learn More Vendor Member Benefits Connect with Targeted Audience Build relationships with third party risk professionals across industries through direct engagement opportunities, collaborative forums, and curated networking channels. Access Member-Only Insights Stay ahead of industry trends and challenges with exclusive access to community-driven insights, resources, and discussions. Highlight Your Solutions Showcase your tools, services, and innovations to the TPRM community through exclusive presentation and visibility opportunities designed to spark meaningful connections. Share Your Expertise Contribute your knowledge and thought leadership to the broader community through educational content and resource-sharing opportunities. Strengthen Your Brand Presence Enhance your brand recognition across TPRA platforms and communication channels through welcome features, spotlight opportunities, and tailored visibility touchpoints. Promote Events & Opportunities Expand your reach by promoting your relevant events, job openings, and initiatives directly to the TPRA practitioner network. Our Members Why Join? As a TPRA Vendor Member, you are recognized as an organization that believes in the mission of furthering the Third Party Risk Management profession through knowledge sharing and networking . Working together with Practitioners, you are an integral part of building a community that establishes TPRM guidance, resources, and tools, and works to promote the value that TPRM professionals add to their organizations. While the Third Party Risk Association is vendor-agnostic, we absolutely recognize the value our Vendor Members create not only in our profession, but also in the organizations our practitioners represent as well. Vendor Members are invited to leverage the Third Party Risk Association as a platform for increased brand recognition within our industry – we’ll support you with priority sponsorship opportunities , expedited customer support , and our partnership in providing you a voice within the larger TPRM community. Our membership and leadership can also serve as a resource offering unique insights into practitioner pain points and domain-specific challenges to inform your product offerings and prioritize your roadmaps. As we continue to grow, adding to our ever-evolving community of verified TPRM practitioners, the Third Party Risk Association will continue consulting our Vendor Membership for guidance on industry trends , emerging risks , and enhanced program automation effort s. The TPRA looks forward to working with you on furthering the profession of Third Party Risk Management together! INQUIRE ABOUT MEMBERSHIP Ready to Join? If you are looking to move forward with Vendor Membership, complete this form to begin the process! Our team will reach out soon with plan and pricing options. Contact Heather directly using the contact info below. Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

TRAINING TPCRA 4-Day November Training & Exam Bundle Monday, November 16, 2026 Date & Time Monday, November 16, 2026 at 4:00:00 PM CST Intended Audience Those interested in advancing their careers by taking TPCRA training Duration 12 hrs CPE Credits 12 Fee Starting at $340 Register Event Description The TPCRA Certification is a specialized qualification that validates expertise in assessing third-party cybersecurity controls, managing cyber risk assessments, and evidencing proficiency in cybersecurity assessment techniques, as well as establishing credibility for third-party risk management professionals. SPEAKER(S) INFORMATION CPE CREDIT Your Instructor Gregory Rasner Gregory is a CEO, author, educator, speaker, and leader in the field of cybersecurity, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has helped numerous clients and organizations improve their security posture and reduce their risk exposure. He is the founder and CEO of Third Party Threat Hunting LLC, a cybersecurity consulting firm that specializes in a wide range of areas, including cybersecurity, cloud computing, network architecture, and more. TPCRA training provides you with 12 hours of in-depth discussion on the examination domains, hands-on experience designing and performing cyber assessments, as well as opportunities to perform mock interviews and run through physical validation scenarios. Training is taught by a knowledgeable subject matter expert who has achieved the TPCRA Certification designation. Earn 12 CPE credits for attending 12 hours of TPCRA Training.

All TPRM professionals are invited to attend our "Open Meetings"! No TPRA membership is required. Meetings Open to All All TPRM professionals are invited to join us for these informative events! You do not need to have a TPRA Membership to attend. Members-Only Events Filter by Event Type Select Event Type CPE ELIGIBLE Panel: Risk Domain Deep Dives Date & Time Thursday, November 12, 2026 10:00 – 11:00 AM CT Intended Audience All TPRM Professionals CPEs Available: 1 Learn More Register Now LIVE WEBINAR Women In TPRM Meeting Date & Time Tuesday, November 17, 2026 1:00 – 2:00 PM CT Intended Audience All TPRM Professionals CPEs Available: 0 Learn More Register Now CPE ELIGIBLE Roundtable: TPRA Year In Review / Look Ahead + FUN! Date & Time Thursday, December 10, 2026 10:00 – 11:00 AM CT Intended Audience All TPRM Professionals CPEs Available: 1 Learn More Register Now TRAINING TPCRA 4-Day November Training Only Date & Time Monday, November 16, 2026 5 PM - 8 PM CT Intended Audience Those interested in advancing their careers by taking TPCRA training CPEs Available: 12 Learn More Register Now TRAINING AI for TPRM Professionals Date & Time Friday, November 20, 2026 12:00 – 4:00 PM CT Intended Audience All TPRM Professionals CPEs Available: 4 Learn More Register Now LIVE WEBINAR Women In TPRM Meeting Date & Time Tuesday, December 15, 2026 1:00 – 2:00 PM CT Intended Audience All TPRM Professionals CPEs Available: 0 Learn More Register Now TRAINING TPCRA 4-Day November Training & Exam Bundle Date & Time Monday, November 16, 2026 5 PM - 8 PM CT Intended Audience Those interested in advancing their careers by taking TPCRA training CPEs Available: 12 Learn More Register Now SEMINAR Soft Skills Summit: How to Handle Emotionally-Charged Situations in the Workplace Date & Time Wednesday, December 9, 2026 9:00 AM - 4:00 PM CT Intended Audience Interested professionals CPEs Available: 6 Learn More Register Now LOAD MORE

Get to know Kelsey Manigly-Haney, TPRA's Marketing & Membership Coordinator! < Back Kelsey Manigly-Haney Marketing & Membership Coordinator STAFF Kelsey graduated Maxima Cum Laude from La Salle University in 2023, with their BA in Digital Art and Multimedia Design. Following graduation, Kelsey worked as a freelance designer and illustrator, gaining industry experience and curating a design portfolio. They joined the TPRA team as a Multimedia Marketing Intern in 2024, aiding in the creation of marketing materials utilizing their background in multimedia design. Kelsey resides in Philadelphia, Pennsylvania with their dog and two cats. They have a passion for gardening, and they are a part of a gardening volunteer group that cleans up local parks. Next >

Learn more about TPRM Consulting Ltd, a TPRA , through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > TPRM Consulting Ltd TPRM Services Consultant Catalyst CONTACT INFORMATION operations@tprmconsulting.co.uk clivebesterwitch@tprmconsulting.co.uk TPRM Consulting Ltd is a specialist Third-Party Risk Management advisory and managed services firm helping regulated and high-risk organisations design, transform and operate resilient, regulator-ready TPRM programmes. We provide end-to-end support across the third-party lifecycle from governance, regulatory gap analysis, risk tiering and due diligence through to remote and onsite inspections, remediation, continuous monitoring, concentration risk and controlled offboarding. We also provide outsourced TPRM services for organisations seeking experienced capacity without building or expanding an in-house team. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES TPRM Programme Design, Transformation & Regulatory Alignment: We design and transform practical, risk-based TPRM operating models aligned with your organisation’s risk appetite, operating environment and regulatory obligations. This includes maturity assessments, regulatory gap analysis, governance, policies, lifecycle design, risk tiering, control frameworks, roles and responsibilities, reporting and implementation roadmaps. Third-Party Due Diligence & Risk Assessments: We deliver risk-based due diligence across multiple control domains, including cybersecurity, privacy, operational resilience, financial crime, financial viability and concentration risk. Our assessments evaluate both control design and operating effectiveness - not simply questionnaire completion or paper compliance. Outsourced TPRM & Managed Services: We provide flexible TPRM-as-a-Service, managed service and specialist augmentation models to help organisations operate or scale their TPRM programme without building additional permanent capacity. Support can cover the entire lifecycle or selected activities, delivered as an embedded extension of your team. DORA Compliance & Register of Information Support: We help US and international organisations with EU operations, entities or ICT dependencies assess and strengthen alignment with DORA’s third-party risk requirements. Services include regulatory gap analysis, ICT third-party governance, criticality assessment, contractual review, Register of Information preparation and remediation planning. Remote & Onsite Third-Party Inspections: We conduct targeted remote and onsite inspections for critical and high-risk third parties, validating whether documented controls operate effectively in practice. Clients receive evidence-based findings, risk-rated reporting and clearly prioritised actions. Issue, Finding & Remediation Management: We help clients convert assessment findings into structured, proportionate and achievable remediation plans. Support includes ownership assignment, action tracking, challenge and validation, risk acceptance governance, closure evidence and escalation of overdue or material issues. Continuous Monitoring & External Risk Intelligence: We help organisations move beyond point-in-time assessments by designing continuous monitoring models that combine internal performance data with relevant external risk intelligence. Monitoring is calibrated to third-party criticality, risk exposure and trigger events to support timely intervention. Fourth-Party, Nth-Party & Concentration Risk Mapping: We identify material subcontractors, shared service dependencies, geographic exposures and concentration points across complex supply chains. This gives clients clearer visibility of systemic vulnerabilities, hidden failure pathways and single points of dependency. Third-Party Screening, KYB, KYC, AML & Sanctions: We support risk-based business verification and screening across ownership, sanctions, politically exposed persons, adverse media, financial crime and jurisdictional exposure. The approach is proportionate to the relationship, service, geography and level of inherent risk. TPRM Technology Selection, Implementation & Optimisation: We are technology-agnostic and help clients define requirements, evaluate platforms, configure workflows, migrate processes and optimise existing TPRM technology. Where a recommendation is required, it is based solely on client requirements, operating-model fit, integration needs and sustainable value, not vendor affiliation. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about DocuBark, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > DocuBark TPRM Platform Incubator Member CONTACT INFORMATION Jonathan Mandell CEO & Founder jonathan@docubark.com DocuBark is a TPRM workflow automation and risk analysis platform built to replace legacy, rigid systems with a faster, more transparent approach. When teams log in, they get a clear view of every vendor assessment - what’s in progress, what’s complete, and what’s holding things up. DocuBark analyzes vendor documents, supports FAIR-based residual risk scoring, and offers features like smart intake forms and dynamic inherent risk scoring to reduce manual effort and improve decision-making across the third-party risk lifecycle. TOP PRODUCT FUNCTIONALITY CATEGORIES Document Intelligence & Parsing: Automatically extract and structure data from vendor documents (e.g., SOC 2, SIG, CAIQ), enabling faster, more accurate due diligence. Control Summarization & Mapping: Generate clear summaries of vendor security controls and map them directly to your questionnaires, frameworks, or scoring rubrics. FAIR-Based Residual Risk Analysis: Quantify residual risk in financial terms using FAIR methodology, factoring in inherent risk, control strength, and business impact. Smart Intake Forms: Guide business requesters through risk-relevant questions during intake, dynamically adjusting based on the vendor’s role, data access, and system integration. Dynamically Built Assessments Based on Vendor Scope: Automatically generate tailored security assessments based on each vendor’s risk profile, services, and technology footprint—reducing noise and focusing on what matters. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Gokcen Tapkan, Director of Data Research for Black Kite, and TPRA's WNTPRM March 2024 Leader Spotlight. < See All < Previous Next > Gokcen Tapkan Director of Data Research Black Kite Biography Gokcen Tapkan is the Director of Data Research at Black Kite, where she plays a key role in leading cutting-edge AI and ML projects combining her past experience in cybersecurity, compliance and risk. With a background in cryptography, cybersecurity, and compliance, she brings 10+ years of expertise in the government sector, particularly in military-level information security. Since 2012, she has been an Expert Evaluator for European Projects. Holding a master's degree in Computer Engineering from Bosphorus University, Gokcen is not only dedicated to her professional role but also actively engaged in a charitable AI project focused on supporting children on the autism spectrum. Her commitment to leveraging technology for social good is a testament to her passion for making a positive impact Leadership Characteristics Gokcen would describe herself as a pro-active, multi-tasking, human champion person Leadership Challenges About three years ago, we encountered a significant challenge with a Compliance Automation project using an off-the-shelf large language model (LLM) for AI. As we delved into the data daily, it became apparent that something wasn't quite right with the model outcomes, so we decided to develop our own model. Within four months, the notion of developing this in-house model evolved into a full-time research project. Despite the maturity of the idea, resources were not as mature at that time. Fast forward to today, and LLMs, along with various models and services, are experiencing almost exponential growth. During those challenging times, we faced numerous sleepless nights, investing hours in data analysis, outcome evaluation and re-engineering- and I say "we"- because I was doing this with my team. Fortunately, back then, and still today, I have the support of an exceptional team — mostly women. Working in a relatively niche area, extracting meaningful model outcomes from the project posed a formidable challenge that ultimately proved successful. The journey was both painful and empowering. Key Take-a-ways "Stepping out of comfort zones and the endless pursuit of knowledge are pieces of advice generously shared by remarkable women in technology. But here's my take: always find something that genuinely inspires you. It's not about jumping from one thing to another; it's about discovering that sweet spot where passion and purpose align. The spot where you are unique and can fulfill yourself." Fun Fact One of my proudest moments in my career was when the European Commission offered me a contract to be their go-to for evaluating tech projects aiming for funding from the European Union. It was a tough and stressful gig, but I was up for the challenge. And there's a twist. Right in the middle of this whirlwind, I welcomed my first baby into the world. He was a tiny three-month-old when I took on this role that had me volleying between Brussels and working remotely with a brand new baby in my life. But I was determined to be there for him and nurse him until he hit the one-year mark. I did a bit of risk management and weighed my options. Rejecting the job seemed like slamming the door on future opportunities, so I went for it. I wasn't about to compromise on my commitment to nurse my son for at least a year. I made a setup in the Brussels office, complete with a pumping station to keep my nursing goal on track. During meetings, people couldn't help but notice his cute picture on my laptop background. Cue the questions: Who's this adorable baby? Who's looking after him and feeding him? (Cue the laughter upon the response.) Then after welcoming my second child, I needed to figure out how to be a nursing mom on a business trip. I was experienced now, so I used a similar station setup even while traveling.

Learn about Paige Johnson, SVP, Director of Third-Party Risk Management for Stellar Bank, and TPRA's WNTPRM May 2026 Leader Spotlight. < See All < Previous Next > Paige Johnson SVP, Director of Third-Party Risk Management Stellar Bank Biography Paige is an experienced Third‑Party Risk and Compliance leader with more than 20 years supporting organizations in highly regulated global energy and financial services industries. She began her career in finance, audit, and compliance roles within large, complex organizations before advancing into global compliance and ethics leadership at a Fortune 50 energy company, where she led the global third‑party risk strategy, supported a commodity trading floor, and oversaw due diligence and KYC programs across the U.S., London, and Singapore. Throughout her career, Paige has focused on strengthening governance, modernizing corporate compliance and TPRM programs, and implementing scalable, technology‑enabled solutions aligned with evolving regulatory expectations. Paige now serves as SVP and Director of Third‑Party Risk Management at Stellar Bank, where she was recruited to modernize and elevate the enterprise TPRM program during a period of significant organizational transformation, including post‑merger integration and preparation for an upcoming acquisition. She has led TPRM functions through major transitions, bringing stability, clarity, and strategic direction during times of change. She holds the Certified Fraud Examiner (CFE) and Certified Corporate Compliance & Ethics Professional – International (CCEP‑I) credentials and remains committed to advancing the TPRM discipline through continuous learning, mentorship, and community leadership. Leadership Characteristics Paige is known for her approachable leadership style and her ability to create a collaborative, supportive environment where people feel valued and empowered. She leads with clarity, empathy, and integrity, grounding her teams in trust, accountability, and shared purpose. Paige brings structure to complex environments and excels at aligning diverse stakeholders around common goals. She has a talent for translating regulatory expectations into practical, sustainable programs and guiding teams through thoughtful, well‑informed decision‑making. She is especially strong in periods of transformation, where her steady presence, strategic mindset, and genuine investment in developing others help teams navigate uncertainty with confidence. Leadership Challenges Regardless of industry, one consistent challenge is shifting the perception of Third‑Party Risk Management from a check‑the‑box compliance exercise to a truly value‑added discipline. Paige focuses on building trusted, collaborative relationships across functions and then work to reposition TPRM as a strategic partner and business enabler—demonstrating how strong, well‑designed risk practices drive smarter, faster, and more informed decision‑making. Key Take-a-ways Paige’s favorite aspect of Third‑Party Risk Management is its ability to bring together people, processes, and technology to protect an organization while enabling responsible growth. She enjoys the cross‑functional nature of the work, the opportunity to influence enterprise strategy, and the constant evolution of the discipline. For her, TPRM is at its best when it empowers the business—helping teams make informed decisions, strengthening trust with partners, and building a culture of integrity across the value chain. Fun Fact Paige is a longtime volunteer and community leader, serving with organizations such as United Way, Junior Achievement, and National Charity League. Outside of work, she stays busy with her three children and especially loves supporting their competitive swimming journey. She also enjoys creative outlets—whether diving into home design inspiration, traveling, or exploring new local spots around Houston.

Learn more about OneTrust, a TPRA Partner Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > OneTrust TPRM Platform Advocate Member CONTACT INFORMATION sales@onetrust.com Want to learn more? Watch this online demo ! OneTrust empowers you to collect, govern, and use data with complete visibility and control. We help you streamline risk management, enforce compliance, and optimize data strategies for innovation — all while meeting regulatory and customer demands. Learn more at OneTrust.com . TOP PRODUCT FUNCTIONALITY CATEGORIES Consent and Preferences Privacy Automation Third-party Management Tech Risk and Compliance Data Governance AI Governance RESOURCES FROM THIS VENDOR MEMBER Are you ready for DORA compliance? VENDOR MEMBER RESOURCE | March 18, 2025 Understanding and implementing APRA's CPS 230 Standard VENDOR MEMBER RESOURCE | March 18, 2025 Rise above risk: Third-party management in technology VENDOR MEMBER RESOURCE | March 18, 2025 Load More EVENTS FROM THIS VENDOR MEMBER AI for Risk Vs. Risk for AI: Navigating the New Governance Imperative Live Webinar November 12, 2026 NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Lisa-Mae Hill, Director for Venminder, and TPRA's WNTPRM November 2024 Leader Spotlight. < See All < Previous Next > Lisa-Mae Hill Director Venminder Biography Lisa is and dynamic and results-driven Information Security and TPRM Professional with over 15 years of experience, most currently leading a team of 12 in delivering comprehensive risk management, third-party risk management, vendor management, and cybersecurity solutions. Lisa is charged with managing complex projects, mitigating risks for her clients through comprehensive information security and regulation based assessments, and fostering strong relationships to enhance confidence. Lisa is known for her leadership skills and has a laser focus on team development and the growth of her team's professional and personal development. Lisa believes strongly (and has proven in her role) that operational excellence comes from a team that is challenged, rewarded and treated with respect and kindness. She has worked both in the private and public sector as well as across industries and has a love for helping clients feel confident about their Vendor Management program and the direction they take to assess and vet Vendors. She loves to take a complex process like integrating Information Security and technology into TPRM and make it feel attainable and manageable for any level of experience. Her passion is professional education and loves doing webinars, talks and classes for the TPRM and InfoSec community. Leadership Characteristics This was written by an employee (Travis Helton): To Lisa, Lisa, you embody the perfect blend of courage, humility, and care. Your unwavering bravery in the face of challenges inspires us all to push beyond our limits. Despite your remarkable achievements, you remain incredibly humble, always giving credit where it’s due and never seeking the spotlight for yourself. Your thoughtfulness shines through in the small, meaningful gestures that make each team member feel valued and appreciated. Whether it’s a kind word, a thoughtful note, or simply taking the time to listen, your actions consistently show how much you care. You are more than just a leader; you are a friend and mentor who feels like family. Your friendly demeanor creates a welcoming and inclusive atmosphere where everyone feels comfortable and supported. You are always approachable, ready to offer guidance and encouragement, no matter how busy you are. In times of crisis, your calm and composed nature provides a steady hand, guiding us through with confidence and grace. Your genuine kindness and unwavering support make you a pillar of strength, and your dedication to the well-being and growth of your team is truly inspiring. You don’t just lead; you uplift, nurture, and inspire everyone around you, making our workplace feel like a second home. I share this because I am not good at talking about myself and this came unexpectedly today from an employee. Leadership Challenges We have had great change in our company over the last 2 years and I am proud to say that our team worked together through every challenge and came out stronger then ever. I have found the hardest part about leadership is balancing the needs of the business and the people that the business needs. I have always erred on the side of taking care of my team and clients because I firmly believe that the stronger the confidence and loyalty in the team, the better you will always be. Key Take-a-ways TPRM is challenging because you are tasked with accountability and responsibility yet have no control over those that you need information from. It can be frustrating, but the most important thing to remember is a proactive approach with the knowledge of what you want to do and see from your Vendors is key. This helps you stay consistent and gives clear direction to your Vendors! Fun Fact I am a huge dog lover, a mom and a wife. I have a very grumpy old lady Pug, Jazzy Pants as well as an old man black Lab named Cooper. I am also a girl mom with two feral and wild minis that make me laugh everyday as well as double the grey hairs. I love to travel with my husband and I absolutely love to read.