We help regulated and high risk organizations build practical, resilient and regulator-ready Third-Party Risk Management programmes. TPRM Consulting Ltd. Website Email LinkedIn Video Fact Sheet TPRM Consulting helps regulated and high-risk organisations turn third-party risk from a compliance burden into a strategic advantage. We design and strengthen practical, regulator-ready TPRM operating models across the full supplier lifecycle: inherent-risk tiering, deep dive third party due diligence, continuous monitoring, contract assurance, remediation, reporting and controlled offboarding. Independent and technology-agnostic by design, we improve the processes and tools clients already have rather than pushing a prescribed platform. We combine deep TPRM, operational resilience and supply-chain security expertise with responsibly governed AI and automation to accelerate risk decisions, improve visibility and help leadership teams act on the risks that matter most. Presenter(s)

< Back LUNCH Wednesday, October 21, 2026 12:00 – 12:55 PM CT Lunch Globe Mail Search Search Search Presenter(s) Previous Next

TPRM is Complex. Simplify it with Mitratech. < Back Mitratech Wednesday, October 21, 2026 1:30 – 1:55 PM CT TPRM Platform Globe Mail Search Search Search Third-party risk management (TPRM) is the process of identifying, assessing, and mitigating the risks associated with engaging external third parties such as vendors, suppliers, contractors, and business partners. It involves thorough due diligence to address potential risks that could affect an organization’s operations, financial health, cybersecurity, legal standing, or ability to serve its customers. These risks may encompass cybersecurity incidents, supply chain disruptions, labor shortages, financial instability, political factors, and regional conflicts. It’s a lot to keep track of. That’s why Mitratech TPRM enables organizations to proactively manage risks and plan responses rather than reacting to issues as they arise, ensuring business continuity and protecting key stakeholders. Presenter(s) Previous Next

Join us for opening remarks and pertinent information on the Showcase format. Opening Remarks Website Email LinkedIn Video Fact Sheet The Third Party Risk Association (TPRA) was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. Our founders are practitioners who built their own third party risk programs within their respective organizations and were looking for a vendor-agnostic community that could help them elevate their programs. When they couldn't find one, they created one . What started as a roundtable between colleagues has turned into a community of thousands of practitioners and TPRM service providers worldwide , all working towards the same goal: sharing knowledge and furthering the industry of TPRM. Presenter(s)

Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. < Back Bitsight Wednesday, October 21, 2026 9:00 – 9:25 AM CT TPRM Platform Globe Mail Search Search Search Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. It delivers real-time monitoring, risk prioritization, actionable remediation, and workflow automation—helping organizations proactively manage the entire third-party lifecycle in one place with trusted, independently validated security analytics and proven cyber risk intelligence on top of a robust network of vendor engagement. Presenter(s) Evan Tegethoff VP of Solutions Engineering Evan Tegethoff is an information security professional currently serving as the Vice President of Solutions Engineering at BitSight. With over 23 years of experience in the cybersecurity industry, Evan helps organizations holistically consider cybersecurity, data protection, technology, and business risk as a unified concept. Prior to BitSight, Evan developed third-party risk programs for numerous large organizations, through his work with Optiv, Accuvant, and Forsythe Technologies. Additionally, he has led consulting… Show More Previous Next

Third Party Threat Hunting LLC (TPTH) was founded by Gregory Rasner, the leading author of third-party risk books and one of the leaders in the field of TPRM and cybersecurity. Third Party Threat Hunting Website Email LinkedIn Video Fact Sheet Third Party Threat Hunting LLC (TPTH) was founded by Gregory Rasner, the leading author of third-party risk books and one of the leaders in the field of TPRM and cybersecurity. Founded in 2023, Gregory has assisted dozens of organizations to identify gaps in their TPRM and cyber risk programs and then not only fix them, but improve their overall effectiveness. TPTH can perform third-party risk assessments, perform AI training or risk assessments, evaluate your TPRM program effectiveness, help with compliance and audit alignment, and provide customized training to your team. Presenter(s)

Supply Wisdom provides real-time, continuous risk intelligence across third parties and locations to help enterprises proactively manage operational, compliance, financial, cyber, location, ESG and Nth party risks. < Back Supply Wisdom Wednesday, October 21, 2026 10:00 - 10:25 AM CT Risk Ratings/Intelligence Globe Mail Search Search Search Supply Wisdom offers an AI-enabled risk intelligence platform that delivers continuous, real-time monitoring of third-party and location-based risks across a comprehensive set of risk domains, including financial, operational, ESG, cyber, compliance, location, and Nth party risk. Unlike traditional assessments or point-in-time audits, Supply Wisdom provides real-time alerts and risk insights to empower risk, procurement, and compliance teams with the foresight needed to act before disruptions occur. One of our most critical differentiators is our location risk intelligence capability, which gives organizations early-warning signals and insights into the health, safety, and stability of key business locations, ranging from supplier sites to service delivery hubs. With Supply Wisdom, clients gain 24/7 visibility into everything from regulatory changes and labor unrest to infrastructure issues, climate events, and emerging threats in specific geographies. Our platform seamlessly integrates with existing workflows and risk management tools, offering flexible delivery options such as dashboards, API feeds, and email alerts. By enabling proactive risk mitigation at both the third-party and location level, Supply Wisdom helps enterprises build more resilient supply chains and ensure business continuity at scale. Presenter(s) Aidan Thaggard Senior Solutions Engineer A native of Western Maryland, Aidan Thaggard graduated from Georgetown University with a double major in Marketing and Finance and a minor in English. He began his career in Risk with Fannie Mae’s Risk and Controls department, and from there transitioned to Iron Mountain’s Third-Party Risk Management team as a Risk Analyst. Over two years at Iron Mountain, Aidan facilitated the detailed profiling and assessment of thousands of third parties… Show More Previous Next

Coverbase automates 90% of third-party risk management using AI. < Back Coverbase Wednesday, October 21, 2026 1:00 – 1:25 PM CT TPRM Platform Globe Mail Search Search Search Third-party risk management (TPRM) is often a manual, time-consuming process, where teams spend more time on admin tasks than risk mitigation. Coverbase automates the review of third-party questionnaires, security policies, and legal documents, ensuring seamless alignment with internal requirements. The platform also streamlines vendor communication by automating document requests and issue remediation, freeing teams to focus on what matters most - reducing risk. As one customer shared: “This assessment took me 25 days to review last year. With Coverbase, I finished it in under two days.” This is why the #1 bank, #1 credit union, and #1 insurance provider in the world trust Coverbase to power their third-party risk programs. Presenter(s) Clarence Chio CEO Clarence is the cofounder and CEO at Coverbase, a TPRM copilot that automates 90% of vendor management with AI. Prior to this, he cofounded Unit21, Google-backed company that raised $92m to help top financial institutions combat fraud and money laundering with AI. He has degrees in Computer Science and AI from Stanford, published the book "Machine Learning and Security" with O'Reilly Media, and has been teaching AI and security at… Show More Previous Next

Next Peak is a premier third-party risk and resilience consultancy that provides deep strategic advisory and operational services. Next Peak Website Email LinkedIn Video Fact Sheet Next Peak is a premier third-party risk and resilience consultancy that provides deep strategic advisory and operational services. Our approach is grounded in deep business, financial services, and national security experience, with demonstrated leadership and commitment to delivering practical, business driven solutions to meet emerging threats across third-party risks, aligned with leading industry frameworks and best practices. Our propositions are tailored to clients’ company size, industry and ambitions, designed to meet your third-party risk maturity needs and journey. We help organizations design, strengthen, and future-proof their Third-Party Risk Management (TPRM) programs — reducing exposure, increasing resilience, and building regulatory confidence. Presenter(s) Seungmin (Helen) Lee Director of Intelligent Cyber Research Seungmin (Helen) Lee is the director of Intelligent Cyber Research (ICR) and a senior engagement manager for cyber risk at Next Peak. As the Director of ICR, she leads the company's geopolitical cyber risk offerings and engagements and oversees research on cybersecurity risks, AI, national cyber strategy, and more. As a senior engagement manager, she manages cyber risk consulting engagements from proposals to stakeholder management to deliverables. Previously, Helen was a 2025 #ShareTheMicInCyber Fellow with New America, researching cyber secure AI data centers. She has published pieces with Aspen Digital, CSO Online, Columbia University, The Diplomat, Stimson 38 North, Tech… Show More Stephen Bartolini Partner Stephen is a seasoned technology and cybersecurity risk management leader with over 25 years of experience in financial services, technology, and telecommunications. He previously served as Executive Director and Head of Cybersecurity & Technology Risk Identification & Quantification at JPMorgan Chase, where he led key initiatives to enhance cybersecurity strategy, governance, and execution. Throughout his career, he has advised executive leadership on managing cybersecurity risks, optimizing organizational resilience, and aligning global risk frameworks with evolving regulatory and industry standards. His expertise spans risk quantification methodologies, regulatory compliance, and strategic cybersecurity investments. Stephen holds a Bachelor of Science degree in Chemical… Show More

RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. RSM Website Email LinkedIn Video Fact Sheet RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. The clients we serve are the engine of global commerce and economic growth, and we are focused on developing leading professionals and services to meet their evolving needs in today’s ever-changing business environment. RSM US LLP is the U.S. member of RSM International, a global network of independent audit, tax and consulting firms with 48,000 people across 120 countries. For more information, visit rsmus.com , explore our third-party risk management services , like us on Facebook , follow us on Twitter and/or connect with us on LinkedIn . Presenter(s)

Join us for "Demo Days," where leading TPRM Service Providers showcase their solutions through 25-minute product demos tailored for TPRM practitioners. TPRM Tool Demo Days The Third Party Risk Association (TPRA) invites you to attend our quarterly "Demo Days, " an exclusive opportunity for TPRM practitioners to explore innovative solutions from leading TPRM Service Providers. During these interactive sessions, vendors will deliver 25-minute product demos , showcasing their tools, technologies, and services designed to address the complex challenges of third party risk management programs. REGISTER TOOL TYPES RAFFLE PRIZES LOOKBOOKS AGENDA These virtual events allow practitioners to: Gain insights into the latest TPRM innovations. Connect directly with service providers to ask questions. Compare tools and platforms to determine the best fit for their organization. Don't miss this opportunity to stay ahead in the evolving landscape of third party risk management. New service providers demo each quarter, so we encourage you to register for as many Demo Days as you're able! Tool Types Below you can find brief descriptions of the TPRM tools that will be showcased during these events. TPRM Platform A software system designed to manage Third-Party Risk Management (TPRM) programs, which involves identifying, assessing, mitigating, and monitoring risks associated with external companies that an organization works with. Risk Ratings/Intelligence Tool A system or software application used to evaluate and quantify the potential likelihood and severity of risks associated with a particular incident or investment, typically assigning a numerical rating to each risk to facilitate prioritization and decision-making within risk management processes. GRC Platform A software tool that tracks, monitors, and manages governance, risk, and compliance activities at the enterprise level. This tool usually encompasses more than one risk-related department and encourages risk management at the highest level for an organization. TPRM Services An organization that assists with the implementation of TPRM programs and/or the completion of due diligence activities. TPRM Service providers can determine the maturity of your program and enhance operational capabilities. Register for Upcoming Demo Days New service providers demo each quarter, so we encourage you to register for as many Demo Days as you're able! Wednesday, October 21, 2026 at 9:00:00 AM CDT 6 hours Q4 Demo Day Read All NOTE: TPRM Service Providers and their employees, affiliates, parent companies, etc. NOT participating in a demo are not allowed to register based on conflict of interest. Raffle Prizes for this Quarter Opt-in to providing sponsors with your contact information during registration for the chance to win one of these awesome prizes! Raffle Prize Prize Image Organization Value Description Apple AirPods 4 TPRA $150 Drawn at end of event TOPEAST Beach Bag Waterproof Beach Tote Travel TPRA $50 Drawn at end of event Bose SoundLink Flex Waterproof Bluetooth Speaker TPRA $160 Drawn at end of event Oversized Drata Mousepad & a Drata T-Shirt Drata Drawn at end of event Yeti Bottle Safe Security $50 Drawn at end of event $200 Amazon Gift Card for the raffle Shift Security $200 Drawn at end of event $50 Amazon Giftcard ProcessUnity $50 Drawn during ProcessUnity's session. $300 Dinner Date for you and a +1 to any restaurant of your choice including babysitter/wine/car service. Coverbase $300 Drawn during Coverbase's session. $300 Gift Card of your choice – Let the agents work. Treat yourself. Whistic $300 Drawn during Whistics session. Q3 2026 Lookbook Q2 2026 Lookbook Q1 2026 Lookbook Demo Day Agenda Please note that the below may feature presenters for multiple Demo Days. Demo Day times are subject to change depending on the number of demos per day. All scheduled times are in Central Time. Filter by Quarter Select Quarter Filter by Tool Type Select Tool Type Date: Wednesday, October 21, 2026 Time: 9:00 – 9:25 AM CT TPRM Platform Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. Read More Date: Wednesday, October 21, 2026 Time: 9:30 - 9:55 AM CT TPRM Platform Aravo drives operational excellence and measurable business outcomes with centralized third-party risk management. Read More Date: Wednesday, October 21, 2026 Time: 10:00 - 10:25 AM CT Risk Ratings/Intelligence Supply Wisdom provides real-time, continuous risk intelligence across third parties and locations to help enterprises proactively manage operational, compliance, financial, cyber, location, ESG and Nth party risks. Read More Date: Wednesday, October 21, 2026 Time: 10:30 – 10:55 AM CT TPRM Platform Certa’s Third Party OS is the digital backbone for managing your third party relationships across all risk domains and lifecycle stages. Read More Date: Wednesday, October 21, 2026 Time: 11:00 - 11:25 AM CT Risk Ratings/Intelligence With RiskRecon, you can build a scalable, third-party risk management program and realize dramatically better outcomes. Read More Date: Wednesday, October 21, 2026 Time: 11:30 – 11:55 AM CT TPRM Platform ProcessUnity Third-Party Risk Management protects companies and their brands by reducing risk from third parties, vendors and suppliers. Read More Date: Wednesday, October 21, 2026 Time: 12:00 - 12:25 PM CT TPRM Platform SecurityScorecard is a leading cybersecurity ratings platform that provides continuous risk monitoring, intelligence, and third-party risk management solutions to help organizations assess and improve the security posture of their vendors and supply chains. Read More Date: Wednesday, October 21, 2026 Time: 12:00 – 12:55 PM CT Lunch Read More Date: Wednesday, October 21, 2026 Time: 1:00 – 1:25 PM CT TPRM Platform Coverbase automates 90% of third-party risk management using AI. Read More Date: Wednesday, October 21, 2026 Time: 1:30 – 1:55 PM CT TPRM Platform Safe Security has redefined cyber risk measurement and management with its real-time, data-driven approach that empowers enterprise leaders, regulators, and cyber insurance carriers to understand cyber risk in an aggregated yet granular manner. Read More Date: Wednesday, October 21, 2026 Time: 1:00 – 1:25 PM CT GRC Platform Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. Read More Date: Wednesday, October 21, 2026 Time: 2:30 - 2:55 PM CT TPRM Platform OneTrust empowers you to collect, govern, and use data with complete visibility and control. Read More Date: Wednesday, October 21, 2026 Time: 1:30 – 1:55 PM CT TPRM Platform TPRM is Complex. Simplify it with Mitratech. Read More LOAD MORE Interested in presenting a product demo? Please complete our Sponsor Information Form to start the process or contact Heather Kadavy, TPRA's Senior Membership Success Coordinator, at heather.kadavy@tprassociation.org to learn how to get involved!

Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. < Back Drata Wednesday, October 21, 2026 1:00 – 1:25 PM CT GRC Platform Globe Mail Search Search Search Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. Our mission is to turn trust into a growth engine by helping organizations prove security and compliance with confidence and speed. As part of our Integrated Risk Management pillar, Drata’s Third-Party Risk Management (TPRM) solution enables organizations to identify, assess, and monitor third-party risk in a structured, scalable way. Presenter(s) Akanksha Nguyen Senior Director, Product Management Akanksha Nguyen is Senior Director of Product Management at Drata, where she leads TPRM product strategy. With more than three years at Drata, she works closely with customers, alongside product and engineering teams, to build scalable solutions that streamline third-party risk management and help modernize trust programs. Previous Next