Learn more about RiskRecon by Mastercard, a TPRA Champion Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > RiskRecon by Mastercard Risk Ratings/Intelligence Champion Member CONTACT INFORMATION Jonathan Ehret VP of Strategy & Risk jonathan.ehret@riskrecon.com www.riskrecon.com Organizations now largely entrust third parties with their most sensitive data and operational functions. To help safeguard your digital ecosystem from third-party risk, you need simple, real-time visibility of third-party partners’ cyber performance. RiskRecon by Mastercard, is the only continuous vendor monitoring solution delivering risk-prioritized action plans customized to match your risk priorities, providing the easiest path to understanding and acting on third-party cyber risk. RiskRecon effectively assesses cyber risk from third parties, 4th parties and Nth parties, ensuring organizations do not fall victim to cyber-attacks from the risks incurred through their business relationships. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Risk assessment Risk Review & Scoring Continuous Monitoring Third-Party Risk Management Supply Chain Risk Management Enterprise Risk Management Unique Custom Risk Prioritization Efficiently Streamlined Risk Management Program Risk Performance Insight Manage Critical Vulnerabilities RESOURCES FROM THIS VENDOR MEMBER 3 Critical Ransomware Lessons for TPRM Professionals VENDOR MEMBER RESOURCE | May 20, 2024 Five Lessons Learned from Over 1000 Ransomware Attacks VENDOR MEMBER RESOURCE | September 11, 2023 Risk Management Insights from 10 Years of Breach Event Monitoring | Whitepaper | RiskRecon VENDOR MEMBER RESOURCE | September 11, 2023 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

SecurityScorecard is a leading cybersecurity ratings platform that provides continuous risk monitoring, intelligence, and third-party risk management solutions to help organizations assess and improve the security posture of their vendors and supply chains. < Back Security Scorecard Wednesday, October 21, 2026 12:00 - 12:25 PM CT TPRM Platform Globe Mail Search Search Search About SecurityScorecard SecurityScorecard is the global leader in cybersecurity ratings and continuous risk monitoring, helping organizations around the world strengthen their security posture and mitigate risk. Our platform provides a comprehensive, real-time view of the cybersecurity health of an organization and its vendors by leveraging 10 key risk factors, including IP reputation, endpoint security, and application security. With over 12 million companies continuously monitored, SecurityScorecard enables organizations to gain critical insights into their attack surface, prioritize vulnerabilities, and take proactive measures to improve their defenses. Tools, Products, and Services Our platform offers a suite of tools and services designed to simplify and enhance cybersecurity management. Security Ratings, our flagship product, delivers actionable intelligence and visibility into third-party ecosystems to reduce the likelihood of breaches and ensure compliance with industry standards. Our Third-Party Risk Management (TPRM) capabilities streamline vendor assessments, reduce questionnaire workloads by 83%, and provide continuous monitoring to mitigate supply chain risks. Additionally, MAX, our managed detection and response (MDR) service, operationalizes supply chain risk management by identifying and remediating vulnerabilities in real-time, while our professional services such as Penetration Testing and Incident Response Tabletop Exercises help validate security measures and prepare for cyber threats. Designed for seamless integration, SecurityScorecard supports over 100 marketplace integrations, enabling businesses to embed our data into existing workflows and compliance tools. Whether for enterprise cyber risk management, regulatory compliance, or board-level reporting, SecurityScorecard empowers organizations to make smarter, data-driven decisions and build a stronger, more resilient cybersecurity strategy. Presenter(s) Previous Next

TPRA will draw names for the opt-in raffle! < Back Closed & Raffle Wednesday, October 21, 2026 3:30 – 3:55 PM CT Globe Mail Search Search Search Presenter(s) Previous Next

CPE ELIGIBLE Roundtable: TPRA Year In Review / Look Ahead + FUN! Thursday, December 10, 2026 Date & Time Thursday, December 10, 2026 at 10:00:00 AM CST Intended Audience All TPRM Professionals Duration 1 hr CPE Credits 1 Fee Free Register Event Description Wrap up the year with us on December 10, 2026, from 10:00 to 11:00 AM CT for a reflective and forward-looking roundtable. This festive session will celebrate the TPRM community’s 2026 milestones, review key lessons learned, and preview upcoming initiatives and trends for 2027. In addition to valuable insights, enjoy interactive discussions, lighthearted activities, and an opportunity to connect with peers as we close out the year on a positive and energized note. Show More SPEAKER(S) INFORMATION CPE CREDIT TPRA Members are eligible to receive 0.5 CPE credits for every 30 minutes of the LIVE meeting that they attend. (Ex. Attend for 30 minutes = 0.5 CPE credits. Attend for 1 hour = 1 CPE credits). CPE Credit will be issued upon completion of the post-event survey. Please allow at least one week following the event to receive your CPE certificate.

Learn more about Sayari, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Sayari TPRM Platform Advocate Member CONTACT INFORMATION info@sayari.com Sayari is the transparency company providing the public and private sectors with immediate visibility into complex commercial relationships. Drawing on a decade of customer-centric innovation and support from industry-leading investors, Sayari has built the largest commercially available collection of trade and public data, transforming it into a dynamic, living model of corporate entities' ownership and trade activity. Sayari's products and platforms harness this model to enable risk resilience, complex investigations, and clear-eyed business decisions. Sayari is headquartered in Washington, D.C., and its solutions are trusted by regulators and regulated organizations in over 35 countries. Sayari Graph: Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Extensive Global Commerce and Trade Data Supply Chain Screening, Mapping, and Risk Intelligence AI-first Third-Party Risk Screening with Questionnaire Automation Network Visualization and Graph Analytics Multi-dimensional Investigative Analysis Data Provenance and Source Documentation Real-Time Monitoring Integrated Watchlists and Sanctions Screening Automated Risk Identification Seamless Data and Systems Integration RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Jill Czerwinski, Managing Partner - Third Party Risk Services for Crowe LLP, and TPRA's WNTPRM November 2022 Leader Spotlight. < See All < Previous Next > Jill Czerwinski Managing Partner - Third Party Risk Services Crowe LLP Biography Jill has been with Crowe for over 20 years, and started the third party risk practice in 2009. She started her career in Cybersecurity, pivoting after seeing clients suffer a breach due to vendors despite strong internal security programs. Leadership Characteristics Jill's Meyers Briggs profile is an ISTJ - meaning she thrives on observing and analyzing facts. She has always been drawn to consulting because of the ability to independently observe many companies and synthesize their strengths and weaknesses. Third party risk plays to her strengths with even more company data points. Leadership Challenges Jill's primary challenge in leadership is slowing down. She sometimes moves too quickly through tasks without taking the opportunity to observe, ask, collaborate, and listen. She often focuses with relentless prioritization, asking what she can stop doing so she can do other things with more focus. Key Take-a-ways Jill enjoys Third Party Risk because of the opportunity to get a bird's-eye-view into a company's extended ecosystem. She notes: "If you think of your job as a questionnaire processor, you miss the opportunity to take a step back and see the strategy in all those tasks." Fun Fact Jill enjoys traveling with her husband and two children. They've been to about a dozen states so far, with a trip out West to the National Parks planned for next year.

Learn about Corina Reymer, AVP, Information Security for The Walt Disney Company / Partners Federal Credit Union, and TPRA's WNTPRM December 2025 Leader Spotlight. < See All < Previous Next > Corina Reymer AVP, Information Security The Walt Disney Company / Partners Federal Credit Union Biography Corina worked passionately for 24 years at Rockwell Automation in enterprise application lifecycle, global process and organizational transformation, IT portfolio management for HR, Finance, and the Office of the General Counsel. She left IT to form the Third Party Risk program in the Office of the CISO. Her second career pivot was into the Legal team as Privacy and Cyber Law Program Manager, where she launched the all-new Office of Privacy and Cybersecurity Counsel (OPCC) with the Chief Privacy Officer. Finally, she accepted her current position as AVP of Information Security at The Walt Disney Company within its federal credit union. Leadership Characteristics I possess an iD style according to the Everything DiSC Management Profile. This style means that I am primarily Influential yet leaning heavily towards Drive. My priorities are listed as Action, Encouragement, and Drive, and I fully agree! However, my personality also stretches into Collaboration and Objectivity which is noted as atypical for my style and I feel necessary for influential positions. Leadership Challenges Career pivots are critical to being a great leader. Being able to understand multiple perspectives strengthens your partnerships and increases your value. RESULTS through RELATIONSHIPS. This includes your internal and third party relationships to build trust, enable efficient processes, and foster effective communication. Key Take-a-ways You learn the most when you are uncomfortable. When you are too comfortable, welcome change to enable further growth. This applies to everything in life, but specific to this conversation, how comfortable you are with the maturity of your programs. Fun Fact I reside in Mequon, Wisconsin, with my husband, two children, and four canines. I am a champion French Bulldog breeder. I love doing taxes. I love change. I love negotiating contracts, building or rebuilding programs, and other impactful and influential efforts.

Learn more about Continuity Strength, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Continuity Strength Risk Ratings/Intelligence Incubator Member CONTACT INFORMATION info@ContinuityStrength.com Continuity Strength helps TPRM practitioners and vendor managers strengthen third-party resilience with greater speed, consistency, and confidence. Built by risk and continuity professionals, the platform brings together critical elements of vendor oversight - assessment, monitoring, and continuity readiness - into one streamlined experience. Rather than adding another layer of process, Continuity Strength enables resource-constrained teams to move beyond compliance checklists toward measurable resilience. Through structured evaluations, actionable insights, and standardized reporting, organizations gain clear visibility across their vendor networks and the assurance that both they and their partners can withstand disruption. TOP PRODUCT FUNCTIONALITY CATEGORIES Third-Party Assessment: Supports structured evaluation of vendor resilience and operational preparedness. Ongoing Oversight: Delivers continuous visibility into evolving third-party risk across portfolios. Continuity Readiness: Helps vendors demonstrate the ability to recover and maintain operations under stress. Cyber Resilience Insight: Offers visibility into external risk indicators to strengthen vendor assurance. Resilience Scoring: Quantifies and compares resilience across vendors and business networks. Portfolio Intelligence: Consolidates vendor data into executive-level and regulatory-ready reporting. Improvement Guidance: Highlights practical steps to address vulnerabilities and strengthen posture. Plan Lifecycle Management: Keeps continuity documentation current and aligned with organizational needs. Practitioner Enablement: Expands the reach and impact of internal or advisory TPRM teams. Compliance Alignment: Provides defensible evidence to support audit, regulatory, and insurance requirements. RESOURCES FROM THIS VENDOR MEMBER Vendor Management Capacity Calculator VENDOR MEMBER RESOURCE | January 21, 2026 Vendor Risk Management Survey Results - 2025 VENDOR MEMBER RESOURCE | January 8, 2026 State of Vendor Risk Management 2025 - Survey Preview VENDOR MEMBER RESOURCE | January 5, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about ProcessUnity, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > ProcessUnity TPRM Platform Champion Member CONTACT INFORMATION Amy Brunelle amy.brunelle@processunity.com www.processunity.com ProcessUnity Third-Party Risk Management protects companies and their brands by reducing risk from third parties, vendors and suppliers. TPRM expands the scope of risk management to encompass any external party that could pose a risk to an organization, including vendors, contractors, partners and suppliers. With a single, configurable platform, ProcessUnity helps organizations manage the increasing complexity of supply chains and third-party relationships with tools to identify and assess the risks associated with each external party, monitor third-party performance and ensure external control effectiveness. Our software platform empowers you to proactively manage third-party risks and protect your organization from potential cyber threats and business disruptions. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Vendor Onboarding Sourcing RFx Inherent Risk Scoring & Vendor Classification Vendor Due Diligence & Ongoing Monitoring Vendor Risk Assessments SLAs & Vendor Performance Management Vendor Contract Management Vendor Issue Management On-Site Vendor Control Assessments Cyber Ratings, Financial Health Scores & ESG Ratings RESOURCES FROM THIS VENDOR MEMBER The Rise of ESG in TPRM | Whitepaper | ProcessUnity VENDOR MEMBER RESOURCE | September 11, 2023 Aligning Internal Cybersecurity Practices with External Third-Party Risk Management | Whitepaper | ProcessUnity VENDOR MEMBER RESOURCE | September 11, 2023 4 Keys to Creating a Vendor Risk Management Program That Works | Whitepaper | ProcessUnity VENDOR MEMBER RESOURCE | September 11, 2023 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Monday, April 26 8:45 AM - 9:45 AM Climbing Mountains of Change: Elevating Your Team’s Resilience Jim Davidson, Resilience Expert & Everest Expedition Climber, Executive Speakers Bureau Keynote Date Time Session Session Type 04/21/2026 8:45 AM - 9:45 AM Climbing Mountains of Change: Elevating Your Team’s Resilience Jim Davidson, Resilience Expert & Everest Expedition Climber, Executive Speakers Bureau Keynote

HITRUST, the leader in cybersecurity assurance used in risk management and compliance, offers certification programs for the application and validation of security, privacy, and AI controls. HITRUST Website Email LinkedIn Video Fact Sheet HITRUST, the leader in cybersecurity assurance used in risk management and compliance, offers certification programs for the application and validation of security, privacy, and AI controls. Informed by over 60 standards and frameworks, the company's threat-adaptive approach delivers the most relevant and reliable solutions, including multiple selectable and traversable assessments and certifications, an ecosystem of over 100 independent assessment firms, centralized quality reviews, reporting and certification, and a powerful SaaS platform enabling its program and process. For over 17 years, HITRUST has led the assurance industry and today is widely recognized as the most trusted solution to establish, maintain, and demonstrate security capabilities for risk management and compliance. Presenter(s) Ryan Patrick EVP, TPRM Customer Solutions Ryan Patrick brings over two decades of leadership in cybersecurity, risk management, and information technology. Currently serving in a senior leadership role at HITRUST, Ryan plays a key role in advancing trusted assurance programs and cybersecurity framework adoption across critical industries. Before joining HITRUST, he was the Senior Vice President of Security at Intraprise Health, and held influential positions at MetLife and Memorial Sloan-Kettering Cancer Center, where he led enterprise risk assessments and compliance initiatives aligned with HIPAA, ISO 27001, NIST 800-53, and PCI-DSS. His work has consistently focused on building scalable, trustworthy security and compliance programs that reduce ris… Show More

Learn more about BraunWeiss Inc., a TPRA Consultant Catalyst, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > BraunWeiss Inc. TPRM Services CONTACT INFORMATION Contact us at compliance@braunweiss.net Phone: 781 489 3743 BraunWeiss is a recognized leader in Third-Party Risk Management (TPRM) services, focused on supporting small and mid-sized organizations in meeting TPRM compliance requirements. As a valued member of Third Party Risk Association (TPRA), BraunWeiss is at the forefront of transforming the outsourced TPRM services landscape while empowering organizations to proactively manage, monitor, and mitigate and fulfill their Vendor and Third-Party Risk Assessments obligations. BraunWeiss delivers comprehensive TPRM services, as “TPRM AS A Service” by leveraging decades of expertise and third-pary risk practioners with industry standard certifications (CTPRP, CTPRA, CISM, CISA, CDPSE, CRISC). By offering the specialized outsourced TPRM services, empowering organizations across diverse industries to confidently navigate the complexities of third-party relationships, safeguard their operations, and achieve regulatory compliance in an increasingly interconnected business environment. TOP PRODUCT FUNCTIONALITY CATEGORIES 1. Third-Party Risk Assessments: (On-site and Remote) BraunWeiss conducts thorough risk assessments on behalf of clients to uncover potential vulnerabilities, compliance gaps, and security risks posed by third-party relationships. These assessments are tailored to the unique requirements of each client and industry, ensuring that organizations can make informed decisions about vendor selection and ongoing management. 2. Vendor Lifecycle Management: BraunWeiss supports clients throughout the entire vendor management lifecycle, from sourcing and onboarding to ongoing monitoring and periodic reviews. This approach ensures that third-party risks are continuously evaluated and managed as business needs and regulatory landscapes evolve. 3. Regulatory Compliance Alignment: BraunWeiss assists organizations in aligning TPRM programs with leading compliance frameworks such as SOC 2, NIST, ISO, HIPAA, HITRUST and GDPR, helping clients prepare for independent audits, maintain certifications, and demonstrate robust information security practices. 4. Cybersecurity Risk Mitigation: As part of TPRM services, BraunWeiss implements effective strategies to reduce cybersecurity threats originating from third-party vendors, helping organizations protect sensitive data and maintain business continuity. RESOURCES FROM THIS VENDOR MEMBER TPRM and Compliance Slick July 2025 VENDOR MEMBER RESOURCE | July 28, 2025 10 Steps for SOC 2 Compliance Readiness VENDOR MEMBER RESOURCE | July 28, 2025 SOC 2 Compliance Readiness Services VENDOR MEMBER RESOURCE | July 28, 2025 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next