Get to know Chris Phillips, Lendmark Financial Services, and a member of TPRA's Board of Directors! < Back Chris Phillips Lendmark Financial Services BOARD OF DIRECTORS Chris Phillips is a seasoned executive with a deep commitment to operational excellence, risk governance, and leadership development. Known for driving innovation in vendor oversight and compliance strategy, Chris brings a collaborative mindset and a passion for empowering teams and organizations to navigate complex regulatory landscapes. Her career reflects a consistent focus on aligning risk management with business growth, and she actively contributes to industry conversations through thought leadership, mentorship, and cross-sector engagement. Next >

LIVE WEBINAR New & Potential Member Call Tuesday, October 20, 2026 Date & Time Tuesday, October 20, 2026 at 10:00:00 AM CDT Intended Audience Those interested in or who have recently joined TPRA as a Practitioner Member Duration 30 min CPE Credits 0 Fee Free Register Event Description New & Potential TPRA Practitioner Members can join these calls to learn more about TPRA benefits, upcoming TPRA events, and where to get plugged in. Share this event with peers who might be interested in joining TPRA! SPEAKER(S) INFORMATION CPE CREDIT FACILITATED BY Julie Gaiaschi CEO & Co-Founder | Third Party Risk Association (TPRA) Julie Gaiaschi, CISA, CISM, is the CEO & Co-Founder of the Third Party Risk Association (TPRA). She has over 15 years of technology and information security risk experience, with the last 10 years specializing in third party risk identification and mitigation techniques. In her role as CEO, she provides strategic direction for the non-profit, whose mission it is to further the third party risk profession through knowledge sharing and networking. She also has a passion for helping others enhance their own third party risk management programs. In 2021, Julie was awarded " CEO of the Year " by Women in Governance, Risk, and Compliance. Prior to co-founding the TPRA, Julie consulted on third party risk for a large bank. She also developed and led a large health payer organization’s Third Party Security program. There, she established and executed the third party risk assessment process, which included integration into the Procurement process. Prior to her role as the leader over Third Party Security, Julie was a Senior IT Auditor. Julie resides in Iowa with her husband and two girls. She enjoys traveling and cooking. Who Should Attend New TPRA Practitioner Members or those who are interested in joining TPRA and would like more information. Cancellations In the event that this session would need to be canceled, you will be contacted and invited to register for the rescheduled event. Questions & Concerns For more information regarding administrative policies such as complaints, please contact us at info@tprassociation.org . No CPE credits are provided for this event type.

This training course is designed for Third-Party Risk Management teams looking to enhance their understanding of AI security and risk assessment. It consists of two specialized tracks.  AI/LLM Security & Risk Course for TPRM Learn the risks that AI in vendors can carry, and how to assess them Price $0 Duration 1 Hour Type On-Demand Enroll By clicking this button, you will be redirected to our Training & Certification Platform (Inspire360) . Please note that the Inspire360 Training and Certification Platform is separate from the TPRA website. Your TPRA website login credentials will not work on Inspire360, and a separate account is required to register for and access courses. < Back About the Course PromptArmor brings you the " AI/LLM Security & Risk Course for TPRM ". This training course includes 12 modules to teach you the risks that AI in vendors can carry, and how to assess them. This training course is designed for Third-Party Risk Management teams looking to enhance their understanding of AI security and risk assessment. It consists of two specialized tracks. Track 1: AI Security for TPRM Teams focuses on core AI security concepts, including large language model (LLM) behavior, embeddings, vector databases, retrieval-augmented generation (RAG), fine-tuning, and indirect prompt injection—key areas where security risks can emerge in AI-driven systems, and where third party risk professionals should look to mitigate risk. Track 2: Holistically Assessing AI in Third Parties equips TPRM professionals with the skills to evaluate the AI-enabled features that vendors offer. It covers AI application architecture, data usage policies, cybersecurity, data privacy, governance, and model risks, providing a comprehensive framework for assessing AI-related risks in third-parties. Together, these tracks offer a structured approach to understanding and mitigating AI security threats in third parties. If you have any questions, please contact PromptArmor at support@usepromptarmor.com . Your Instructor N/A – On-Demand PromptArmor helps TPRM teams assess and continuously monitor the risks of AI in vendors. We have extensive experience in finding novel threats in AI-enabled applications, and suggesting concrete actionable recommendations to remediate - both with configuration changes and vendor questions. N/A – On-Demand N/A – On-Demand 1/1 Previous Next

Get to know Verity Billson, Experian Ltd, and a member of TPRA's Board of Directors! < Back Verity Billson Experian Ltd BOARD OF DIRECTORS Verity Billson is a senior leader in Third Party Risk Management with over 25 years of experience across financial services, retail, and manufacturing. She currently serves as Group Head of Third Party Risk Management at Experian, where she leads global oversight and strategy across UK&I, EMEA, APAC, and Brazil. Verity has a strong track record of building TPRM functions from the ground up, delivering operational resilience, and driving compliance with regulatory standards. Her career includes senior roles at Jaguar Land Rover, Boots, and Capital One, where she led supplier management strategies, contract negotiations, and risk mitigation initiatives. Verity is known for her strategic thinking, stakeholder engagement, and ability to deliver measurable results. She is also an active fundraiser for the British Heart Foundation and a recipient of the National Outsourcing Association’s Academic Achievement Award. Why are you interested in becoming a TPRA board member? I am passionate about advancing the Third Party Risk Management (TPRM) profession and contributing to the development of best practices that drive meaningful change across industries. Over the course of my career, I’ve successfully built and matured TPRM functions in large, complex organisations, often from the ground up. I understand the challenges practitioners face and the value of a strong professional community. Serving on the TPRA board would allow me to give back to the profession, collaborate with other leaders, and help shape the future of TPRM through thought leadership, advocacy, and strategic guidance. As a UK-based practitioner with a strong network across financial services, retail, and manufacturing sectors, I am well placed to support TPRA in driving increased adoption and membership within the UK. I can help raise awareness of TPRA’s value proposition, foster engagement with UK organisations, and promote the association’s resources and events to a wider audience. Next >

Learn about Lisa-Mae Hill, Director for Venminder, and TPRA's WNTPRM November 2024 Leader Spotlight. < See All < Previous Next > Lisa-Mae Hill Director Venminder Biography Lisa is and dynamic and results-driven Information Security and TPRM Professional with over 15 years of experience, most currently leading a team of 12 in delivering comprehensive risk management, third-party risk management, vendor management, and cybersecurity solutions. Lisa is charged with managing complex projects, mitigating risks for her clients through comprehensive information security and regulation based assessments, and fostering strong relationships to enhance confidence. Lisa is known for her leadership skills and has a laser focus on team development and the growth of her team's professional and personal development. Lisa believes strongly (and has proven in her role) that operational excellence comes from a team that is challenged, rewarded and treated with respect and kindness. She has worked both in the private and public sector as well as across industries and has a love for helping clients feel confident about their Vendor Management program and the direction they take to assess and vet Vendors. She loves to take a complex process like integrating Information Security and technology into TPRM and make it feel attainable and manageable for any level of experience. Her passion is professional education and loves doing webinars, talks and classes for the TPRM and InfoSec community. Leadership Characteristics This was written by an employee (Travis Helton): To Lisa, Lisa, you embody the perfect blend of courage, humility, and care. Your unwavering bravery in the face of challenges inspires us all to push beyond our limits. Despite your remarkable achievements, you remain incredibly humble, always giving credit where it’s due and never seeking the spotlight for yourself. Your thoughtfulness shines through in the small, meaningful gestures that make each team member feel valued and appreciated. Whether it’s a kind word, a thoughtful note, or simply taking the time to listen, your actions consistently show how much you care. You are more than just a leader; you are a friend and mentor who feels like family. Your friendly demeanor creates a welcoming and inclusive atmosphere where everyone feels comfortable and supported. You are always approachable, ready to offer guidance and encouragement, no matter how busy you are. In times of crisis, your calm and composed nature provides a steady hand, guiding us through with confidence and grace. Your genuine kindness and unwavering support make you a pillar of strength, and your dedication to the well-being and growth of your team is truly inspiring. You don’t just lead; you uplift, nurture, and inspire everyone around you, making our workplace feel like a second home. I share this because I am not good at talking about myself and this came unexpectedly today from an employee. Leadership Challenges We have had great change in our company over the last 2 years and I am proud to say that our team worked together through every challenge and came out stronger then ever. I have found the hardest part about leadership is balancing the needs of the business and the people that the business needs. I have always erred on the side of taking care of my team and clients because I firmly believe that the stronger the confidence and loyalty in the team, the better you will always be. Key Take-a-ways TPRM is challenging because you are tasked with accountability and responsibility yet have no control over those that you need information from. It can be frustrating, but the most important thing to remember is a proactive approach with the knowledge of what you want to do and see from your Vendors is key. This helps you stay consistent and gives clear direction to your Vendors! Fun Fact I am a huge dog lover, a mom and a wife. I have a very grumpy old lady Pug, Jazzy Pants as well as an old man black Lab named Cooper. I am also a girl mom with two feral and wild minis that make me laugh everyday as well as double the grey hairs. I love to travel with my husband and I absolutely love to read.

Learn about Morgan Binder, Third Party Risk Program Manager for Stripe, and TPRA's WNTPRM June 2023 Leader Spotlight. < See All < Previous Next > Morgan Binder Third Party Risk Program Manager Stripe Biography Morgan is a Third Party Risk Program Manager at Stripe and has spent the duration of her career in the risk and compliance space. Her belief in right-sized foundational governance based on benchmarks and best practices has enabled her to develop nimble risk programs for financial services firms. She seeks to create effective, strategic solutions to solve risk and compliance challenges facing the business and its stakeholders. Focus areas throughout her career have included enterprise, operational, and third party risk, business continuity, fraud prevention, regulatory compliance, and tooling enablement. Morgan has a M.S. of Enterprise Risk from Boston University and a B.S. of Management from Bentley University. She is based in the greater Boston area. Leadership Characteristics Morgan executes through others, partnering to guide them through problem solving steps and delegating solution building to successfully solve the problem. She is a relentless builder and is adept at balancing priorities to achieve strategic goals. Leadership Challenges Throughout her educational and career pursuits, Morgan has repeatedly found herself to be the only woman at the table. She has seen the power in finding sponsors –and being a sponsor—for leaders who need stronger representation at the table. It is incredibly important to her to give future leaders support while providing an opportunity for them to shine and demonstrate their skills in front of decision makers. Key Take-a-ways "Risk management is so often seen as a cost center, rather than a value driver. Find ways to provide opportunity through risk management! Balance should always be found with keeping the business safe and driving the business forward." Fun Fact Morgan enjoys traveling and seeks locations with outstanding scenery, food, and drink.

TRAINING AI for TPRM Professionals Friday, November 20, 2026 Date & Time Friday, November 20, 2026 at 10:00:00 AM CST Intended Audience All TPRM Professionals Duration 4 hrs CPE Credits 4 Fee $159 Register Event Description Course Overview Instructor: Gregory C. Rasner, Third Party Threat Hunting LLC Show More SPEAKER(S) INFORMATION CPE CREDIT Gregory Rasner Gregory is a CEO, author, educator, speaker, and leader in the field of cybersecurity, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has helped numerous clients and organizations improve their security posture and reduce their risk exposure. He is the founder and CEO of Third Party Threat Hunting LLC, a cybersecurity consulting firm that specializes in a wide range of areas, including cybersecurity, cloud computing, network architecture, and more. The Third Party Risk Management (TPRM) Certificate Program , offered by TPRA in collaboration with our trusted partners, provides comprehensive training designed to enhance knowledge and expertise in TPRM best practices. This program features a diverse selection of courses covering critical topics in third party risk, cloud security, AI/LLM security, and more. Earn 4 CPE credits for attending the entirety of this training course.

TRAINING TPCRA 4-Day November Training & Exam Bundle Monday, November 16, 2026 Date & Time Monday, November 16, 2026 at 4:00:00 PM CST Intended Audience Those interested in advancing their careers by taking TPCRA training Duration 12 hrs CPE Credits 12 Fee Starting at $340 Register Event Description The TPCRA Certification is a specialized qualification that validates expertise in assessing third-party cybersecurity controls, managing cyber risk assessments, and evidencing proficiency in cybersecurity assessment techniques, as well as establishing credibility for third-party risk management professionals. SPEAKER(S) INFORMATION CPE CREDIT Your Instructor Gregory Rasner Gregory is a CEO, author, educator, speaker, and leader in the field of cybersecurity, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has helped numerous clients and organizations improve their security posture and reduce their risk exposure. He is the founder and CEO of Third Party Threat Hunting LLC, a cybersecurity consulting firm that specializes in a wide range of areas, including cybersecurity, cloud computing, network architecture, and more. TPCRA training provides you with 12 hours of in-depth discussion on the examination domains, hands-on experience designing and performing cyber assessments, as well as opportunities to perform mock interviews and run through physical validation scenarios. Training is taught by a knowledgeable subject matter expert who has achieved the TPCRA Certification designation. Earn 12 CPE credits for attending 12 hours of TPCRA Training.

FOR IMMEDIATE RELEASE TPRA Announces Winners of 2026 Third Party Risk Management (TPRM) Service Provider Innovator Award Tuesday, April 21, 2026 1/1 Interos Named 2026 TPRM Service Provider Innovator; Aravo, Interos, and HITRUST Earn Excellence Awards Across Key Categories ANKENY, IOWA – 21 APRIL 2026 – The Third Party Risk Association (TPRA) today announced the winners of its 2026 Third Party Risk Management (TPRM) Service Provider Innovator Award and Excellence Awards during its annual in-person conference on April 21, 2026. Established to recognize and promote the critical role service providers play in advancing the TPRM industry, the TPRM Service Provider Innovator Award honors organizations that deliver innovative, efficient, and effective solutions to help practitioners assess, mitigate, and manage third party risk. “TPRM service providers are the backbone of our programs,” said Julie Gaiaschi, CEO of TPRA. “These organizations continue to push the boundaries of innovation while collaborating across the ecosystem to strengthen how risk is understood and managed. We are proud to recognize this year’s winners for their leadership and impact.” 2026 Award Winners TPRM Service Provider Innovator Award Interos was selected as the 2026 overall Innovator Award winner for its transformative approach to third party and supply chain risk management. Through its AI-powered platform, Interos delivers a unified, near real-time view across six critical risk domains, enabling organizations to move beyond fragmented data toward a single, actionable intelligence framework. Its breakthrough solutions— itariffs and itracing —provide predictive insights into tariff exposure, multi-tier supplier dependencies, and product-level disruption impacts, setting a new standard for proactive, intelligence-driven risk management. Excellence Award Winners GRC/TPRM Platform: Aravo Recognized for its innovations leveraging artificial intelligence to enhance multiple uses and views in the third party risk space, Aravo stood out for delivering advanced capabilities that improve visibility, efficiency, and decision-making for practitioners. Image: Dean Alms (right), Chief Product Officer for Aravo, accepts the Excellence Award on the organization's behalf from Julie Gaiaschi, CEO of TPRA, at TPRA's 2026 Conference on April 21, 2026. Risk Rating/Risk Intelligence Tool: Interos In addition to earning the overall Innovator Award, Interos was recognized in this category for its comprehensive risk intelligence capabilities, providing near real-time insights across a broad spectrum of risk domains along with actionable mitigation guidance. Image: Marty Clough (right), VP of Sales for Interos.ai, accepts Excellence Award on behalf of the organization from Julie Gaiaschi (left) during TPRA 2026 Conference on April 21, 2026. TPRM Services: HITRUST HITRUST was recognized for its standardization work that shifts the market from fragmented questionnaires toward a shared, defensible, and standardized assurance model that can be reused across vendor relationships. Image: Ryan Patrick (right), EVP, Customer Solution for HITRUST, accepts the Excellence Award on behalf of the organization from Julie Gaiaschi (left), CEO of TPRA, during the TPRA's 2026 Conference on April 21, 2026. Selection Process Nearly 40 TPRM service providers submitted applications across three categories: GRC/TPRM Platforms, Risk Rating/Risk Intelligence Tools, and TPRM Services. A panel of TPRA Officers, Board Members, and Practitioner Members representing diverse industries evaluated submissions based on innovation, collaboration, social responsibility, and overall impact on advancing the TPRM industry. Finalists underwent a multi-stage review process, including detailed scoring and live interviews, where judges assessed product capabilities, real-world applications, and contributions to the broader risk management community. ### The Third Party Risk Association (TPRA) is dedicated to advancing the practice of third party risk management by fostering collaboration, education, and innovation across the global TPRM community. Through its programs, events, and initiatives, TPRA supports practitioners and service providers in strengthening risk management practices and driving industry progress. MEDIA CONTACT Meghan Schrader Marketing & Communications Manager meghan.schrader@tprassociation.org www.tprassociation.org FOR MORE INFORMATION https://www.tprassociation.org/innovator-award Previous Next

Learn about Franchesca Williams, SVP, Director of Third Party Risk Management for Ameris Bank, and TPRA's WNTPRM July 2023 Leader Spotlight. < See All < Previous Next > Franchesca Williams SVP, Director of Third Party Risk Management Ameris Bank Biography Franchesca Williams is the SVP, Director of Third Party Risk Management at Ameris Bank and has 13+ years in the third party risk management field in financial services. Prior to her role at Ameris, Franchesca served as the Vice President of Third Party Risk Management at VyStar Credit Union in Jacksonville, FL. Franchesca is a detail oriented, analytical, and organized professional with an ability to adapt to change quickly, learn new concepts at a fast pace, and an ability to create solutions and overcome challenges presented. She currently holds the Certified Regulatory Vendor Program Manager IV (CRVPM IV) certification, Certified Third Party Risk Professional (CTPRP) certification, and a CCM Advanced Practitioner (CCMAP) certification. Leadership Characteristics Franchesca is always up for a challenge and completing work with accuracy. She focuses on taking the time to coach and mentor her team and colleagues in risk to help them be successful in managing identified risk within the organization. Leadership Challenges Franchesca has learned to be more flexible in her career as risk is about being in the gray at times and making a judgment call. She was not always flexible on her decisions or path in the past, but was blessed to have some great leaders and mentors that helped her see this as a strength and to open her mind to growing in this area. She has since grown to see the possibilities and paths forward as a result. This has led to her growth as a leader and helped her to succeed to further career growth. Key Take-a-ways Franchesca truly enjoys third party risk management because each day brings a new challenge to find a solution and to help identify ways to reduce or mitigate the risk that has been identified. “If one way does not work, forge forward and be open to creating a new way of doing things to accomplish your goals.” Fun Fact Franchesca enjoys spending time with her husband, 7-year-old son, and two Boston terriers in her free time. Some of her hobbies include crafting, gardening, cooking, and interior decorating/organizing. She is an advocate for Asian communities and culture in Jacksonville, FL where she serves on the Mayor's Asian American Advisory Board.

LIVE WEBINAR Women In TPRM Meeting Tuesday, November 17, 2026 Date & Time Tuesday, November 17, 2026 at 1:00:00 PM CST Intended Audience All TPRM Professionals Duration 1 hr CPE Credits 0 Fee Free Register Event Description Join us for this empowering Women In TPRM (WnTPRM) Meeting . Discover the key to success in third-party risk management and be part of an inspiring virtual gathering. Embrace this opportunity to connect with influential women in the field, share insights, and build lasting connections. Journey to TPRM: TBD Show More SPEAKER(S) INFORMATION CPE CREDIT About These Meetings Join us for our monthly Women In TPRM (WNTPRM) meeting to hear from inspiring women about their "Journey to TPRM" as well as exciting program updates! Who Should Attend All TPRM professionals are invited to these events. This group is open to ANYONE, regardless of gender identity or TPRA membership status. Cancellations In the event that this session would need to be canceled, you will be contacted and invited to register for the rescheduled event. Questions & Concerns For more information regarding administrative policies such as complaints, please contact us at info@tprassociation.org . No CPE credits are provided for this event type.

TRAINING TPRMP August Training & Exam Bundle Monday, August 24, 2026 Date & Time Monday, August 24, 2026 at 1:00:00 PM UTC Intended Audience Those interested in advancing their careers by taking TPRMP training Duration CPE Credits 12 Fee Starting at $340 Register Event Description The TPRMP Certification is a professional credential that validates comprehensive knowledge of third party risk management fundamentals, frameworks, and best practices. It demonstrates a practitioner’s ability to manage the full TPRM lifecycle–from risk identification and assessment to ongoing monitoring–establishing credibility and advancing expertise for those responsible for building and maintaining robust TPRM programs. Learn More SPEAKER(S) INFORMATION CPE CREDIT Training Instructor Julie Gaiaschi CEO & Co-Founder | Third Party Risk Association (TPRA) Julie Gaiaschi, CISA, CISM, is the CEO & Co-Founder of the Third Party Risk Association (TPRA). She has over 15 years of technology and information security risk experience, with the last 10 years specializing in third party risk identification and mitigation techniques. In her role as CEO, she provides strategic direction for the non-profit, whose mission it is to further the third party risk profession through knowledge sharing and networking. She also has a passion for helping others enhance their own third party risk management programs. In 2021, Julie was awarded " CEO of the Year " by Women in Governance, Risk, and Compliance. Prior to co-founding the TPRA, Julie consulted on third party risk for a large bank. She also developed and led a large health payer organization’s Third Party Security program. There, she established and executed the third party risk assessment process, which included integration into the Procurement process. Prior to her role as the leader over Third Party Security, Julie was a Senior IT Auditor. Julie resides in Iowa with her husband and two girls. She enjoys traveling and cooking. Earn 12 CPE credits for attending 12 hours of TPRMP Training.