RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. RSM Website Email LinkedIn Video Fact Sheet RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. The clients we serve are the engine of global commerce and economic growth, and we are focused on developing leading professionals and services to meet their evolving needs in today’s ever-changing business environment. RSM US LLP is the U.S. member of RSM International, a global network of independent audit, tax and consulting firms with 48,000 people across 120 countries. For more information, visit rsmus.com , explore our third-party risk management services , like us on Facebook , follow us on Twitter and/or connect with us on LinkedIn . Presenter(s)

Join us for "Demo Days," where leading TPRM Service Providers showcase their solutions through 25-minute product demos tailored for TPRM practitioners. TPRM Tool Demo Days The Third Party Risk Association (TPRA) invites you to attend our quarterly "Demo Days, " an exclusive opportunity for TPRM practitioners to explore innovative solutions from leading TPRM Service Providers. During these interactive sessions, vendors will deliver 25-minute product demos , showcasing their tools, technologies, and services designed to address the complex challenges of third party risk management programs. REGISTER TOOL TYPES RAFFLE PRIZES LOOKBOOKS AGENDA These virtual events allow practitioners to: Gain insights into the latest TPRM innovations. Connect directly with service providers to ask questions. Compare tools and platforms to determine the best fit for their organization. Don't miss this opportunity to stay ahead in the evolving landscape of third party risk management. New service providers demo each quarter, so we encourage you to register for as many Demo Days as you're able! Tool Types Below you can find brief descriptions of the TPRM tools that will be showcased during these events. TPRM Platform A software system designed to manage Third-Party Risk Management (TPRM) programs, which involves identifying, assessing, mitigating, and monitoring risks associated with external companies that an organization works with. Risk Ratings/Intelligence Tool A system or software application used to evaluate and quantify the potential likelihood and severity of risks associated with a particular incident or investment, typically assigning a numerical rating to each risk to facilitate prioritization and decision-making within risk management processes. GRC Platform A software tool that tracks, monitors, and manages governance, risk, and compliance activities at the enterprise level. This tool usually encompasses more than one risk-related department and encourages risk management at the highest level for an organization. TPRM Services An organization that assists with the implementation of TPRM programs and/or the completion of due diligence activities. TPRM Service providers can determine the maturity of your program and enhance operational capabilities. Register for Upcoming Demo Days New service providers demo each quarter, so we encourage you to register for as many Demo Days as you're able! Wednesday, October 21, 2026 at 9:00:00 AM CDT 6 hours Q4 Demo Day Read All NOTE: TPRM Service Providers and their employees, affiliates, parent companies, etc. NOT participating in a demo are not allowed to register based on conflict of interest. Raffle Prizes for this Quarter Opt-in to providing sponsors with your contact information during registration for the chance to win one of these awesome prizes! Raffle Prize Prize Image Organization Value Description Apple AirPods 4 TPRA $150 Drawn at end of event TOPEAST Beach Bag Waterproof Beach Tote Travel TPRA $50 Drawn at end of event Bose SoundLink Flex Waterproof Bluetooth Speaker TPRA $160 Drawn at end of event Oversized Drata Mousepad & a Drata T-Shirt Drata Drawn at end of event Yeti Bottle Safe Security $50 Drawn at end of event $200 Amazon Gift Card for the raffle Shift Security $200 Drawn at end of event $50 Amazon Giftcard ProcessUnity $50 Drawn during ProcessUnity's session. $300 Dinner Date for you and a +1 to any restaurant of your choice including babysitter/wine/car service. Coverbase $300 Drawn during Coverbase's session. $300 Gift Card of your choice – Let the agents work. Treat yourself. Whistic $300 Drawn during Whistics session. Q3 2026 Lookbook Q2 2026 Lookbook Q1 2026 Lookbook Demo Day Agenda Please note that the below may feature presenters for multiple Demo Days. Demo Day times are subject to change depending on the number of demos per day. All scheduled times are in Central Time. Filter by Quarter Select Quarter Filter by Tool Type Select Tool Type Date: Wednesday, October 21, 2026 Time: 9:00 – 9:25 AM CT TPRM Platform Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. Read More Date: Wednesday, October 21, 2026 Time: 9:30 - 9:55 AM CT TPRM Platform Aravo drives operational excellence and measurable business outcomes with centralized third-party risk management. Read More Date: Wednesday, October 21, 2026 Time: 10:00 - 10:25 AM CT Risk Ratings/Intelligence Supply Wisdom provides real-time, continuous risk intelligence across third parties and locations to help enterprises proactively manage operational, compliance, financial, cyber, location, ESG and Nth party risks. Read More Date: Wednesday, October 21, 2026 Time: 10:30 – 10:55 AM CT TPRM Platform Certa’s Third Party OS is the digital backbone for managing your third party relationships across all risk domains and lifecycle stages. Read More Date: Wednesday, October 21, 2026 Time: 11:00 - 11:25 AM CT Risk Ratings/Intelligence With RiskRecon, you can build a scalable, third-party risk management program and realize dramatically better outcomes. Read More Date: Wednesday, October 21, 2026 Time: 11:30 – 11:55 AM CT TPRM Platform ProcessUnity Third-Party Risk Management protects companies and their brands by reducing risk from third parties, vendors and suppliers. Read More Date: Wednesday, October 21, 2026 Time: 12:00 - 12:25 PM CT TPRM Platform SecurityScorecard is a leading cybersecurity ratings platform that provides continuous risk monitoring, intelligence, and third-party risk management solutions to help organizations assess and improve the security posture of their vendors and supply chains. Read More Date: Wednesday, October 21, 2026 Time: 12:00 – 12:55 PM CT Lunch Read More Date: Wednesday, October 21, 2026 Time: 1:00 – 1:25 PM CT TPRM Platform Coverbase automates 90% of third-party risk management using AI. Read More Date: Wednesday, October 21, 2026 Time: 1:30 – 1:55 PM CT TPRM Platform Safe Security has redefined cyber risk measurement and management with its real-time, data-driven approach that empowers enterprise leaders, regulators, and cyber insurance carriers to understand cyber risk in an aggregated yet granular manner. Read More Date: Wednesday, October 21, 2026 Time: 1:00 – 1:25 PM CT GRC Platform Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. Read More Date: Wednesday, October 21, 2026 Time: 2:30 - 2:55 PM CT TPRM Platform OneTrust empowers you to collect, govern, and use data with complete visibility and control. Read More Date: Wednesday, October 21, 2026 Time: 1:30 – 1:55 PM CT TPRM Platform TPRM is Complex. Simplify it with Mitratech. Read More LOAD MORE Interested in presenting a product demo? Please complete our Sponsor Information Form to start the process or contact Heather Kadavy, TPRA's Senior Membership Success Coordinator, at heather.kadavy@tprassociation.org to learn how to get involved!

Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. < Back Bitsight Wednesday, October 21, 2026 9:00 – 9:25 AM CT TPRM Platform Globe Mail Search Search Search Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. It delivers real-time monitoring, risk prioritization, actionable remediation, and workflow automation—helping organizations proactively manage the entire third-party lifecycle in one place with trusted, independently validated security analytics and proven cyber risk intelligence on top of a robust network of vendor engagement. Presenter(s) Evan Tegethoff VP of Solutions Engineering Evan Tegethoff is an information security professional currently serving as the Vice President of Solutions Engineering at BitSight. With over 23 years of experience in the cybersecurity industry, Evan helps organizations holistically consider cybersecurity, data protection, technology, and business risk as a unified concept. Prior to BitSight, Evan developed third-party risk programs for numerous large organizations, through his work with Optiv, Accuvant, and Forsythe Technologies. Additionally, he has led consulting… Show More Previous Next

Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. Vendor Centric Website Email LinkedIn Video Fact Sheet Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. We are senior practitioners who work side by side with your team, bringing practical experience and straightforward guidance. Our approach is modern and AI-ready, but always grounded in what works in the real world, helping you improve performance, reduce risk, and build a third-party management operation that can scale as you grow. Presenter(s) Tom Rogers CEO Tom Rogers is the Founder and CEO of Vendor Centric, a boutique, practitioner-led firm that helps organizations build and maintain effective vendor and third-party management operations. Since 2011, Tom and his team have worked with nearly 100 organizations in mostly regulated industries across banking, insurance, asset management, healthcare, pharma, life sciences, energy and nonprofits. Tom leads strategy and growth at Vendor Centric, and is the architect of the company's Vendor Management Operating Model, a standards-based framework and methodology for enterprise vendor management. He writes a bi-weekly blog on vendor management best practices, and speaks regularly in webinars and industry events.

Certa’s Third Party OS is the digital backbone for managing your third party relationships across all risk domains and lifecycle stages. < Back Certa Wednesday, October 21, 2026 10:30 – 10:55 AM CT TPRM Platform Globe Mail Search Search Search Certa is the leading Third Party Risk Management (TPRM) solution. With our comprehensive Third Party Operating System (Third Party OS), Certa lets you manage risk across all third party types, all risk domains, all in one OS. Certa leverages AI across the third party lifecycle—automating onboarding, risk analysis, compliance, and monitoring. Our no-code workflows, AI-driven decisioning, and real-time data integrations help you adapt to evolving regulations and business needs. With full-spectrum risk coverage, Certa delivers due diligence 80% faster, driving smarter and more efficient third party management for global enterprises. Certa leverages AI across the third party lifecycle—automating onboarding, risk analysis, compliance, and monitoring. With Certa, enterprises can manage risk across all third party types, all risk domains, all in one OS. Presenter(s) Bassam Ghufran Solutions Consultant Bassam Ghufran is a Solutions Consultant at Certa, helping global enterprises transform third-party risk management and compliance through AI-powered workflow automation. With a background in solutions engineering and technical pre-sales, he works with procurement, risk, compliance and technology leaders to translate complex requirements into practical, scalable solutions. Bassam combines technical depth with a consultative, value-focused approach, guiding organizations through discovery, solution design and tailored demonstrations. He is passionate about making… Show More Previous Next

Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. < Back Drata Wednesday, October 21, 2026 1:00 – 1:25 PM CT GRC Platform Globe Mail Search Search Search Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. Our mission is to turn trust into a growth engine by helping organizations prove security and compliance with confidence and speed. As part of our Integrated Risk Management pillar, Drata’s Third-Party Risk Management (TPRM) solution enables organizations to identify, assess, and monitor third-party risk in a structured, scalable way. Presenter(s) Akanksha Nguyen Senior Director, Product Management Akanksha Nguyen is Senior Director of Product Management at Drata, where she leads TPRM product strategy. With more than three years at Drata, she works closely with customers, alongside product and engineering teams, to build scalable solutions that streamline third-party risk management and help modernize trust programs. Previous Next

With RiskRecon, you can build a scalable, third-party risk management program and realize dramatically better outcomes. < Back RiskRecon by Mastercard Wednesday, October 21, 2026 11:00 - 11:25 AM CT Risk Ratings/Intelligence Globe Mail Search Search Search Organizations now largely entrust third parties with their most sensitive data and operational functions. To help safeguard your digital ecosystem from third-party risk, you need simple, real-time visibility of third-party partners’ cyber performance. RiskRecon by Mastercard, is the only continuous vendor monitoring solution delivering risk-prioritized action plans customized to match your risk priorities, providing the easiest path to understanding and acting on third-party cyber risk. RiskRecon effectively assesses cyber risk from third parties, 4th parties and Nth parties, ensuring organizations do not fall victim to cyber-attacks from the risks incurred through their business relationships. Our company, founded in 2015, and acquired by Mastercard in 2019, has been focused on enabling organizations to securely work with vendors and keep their critical information secure within their digital supply chain. Learn more about RiskRecon and request a demo at riskrecon.com . Presenter(s) Previous Next

Page Not Found. Looks like this page has been hidden or no longer exists. Go to Homepage

Explore jobs in third party risk management from organizations hiring TPRM professionals. New listings added regularly. Start your search today. TPRM Job Listings Searching for a TPRM-specific job? Check out the listings below from organizations looking for talented TPRM professionals! Note: TPRA reserves the right to remove any job listing for any reason and without communication to the contact. Post a Job Vanguard Third Party Risk Analyst View Job Malvern, PA Indiana Public Retirement System Director of Vendor Management View Job Indianapolis, IN (onsite) Omnicell AI Vendor Governance Manager View Job Atlanta, GA (Remote) Humana IT Vendor Management Lead (SaaS Platforms) View Job Multiple FL, TN, etc. (Remote) Ally Director - Vendor Management View Job Charlotte, NC (Hybrid) Centene Corporation Director, Vendor Management View Job Missouri (Remote) Airbnb Vendor Manager, Operational Vendor Support (Insurance) View Job Remote Blackbaud IT Vendor Relationship Manager View Job Charleston, SC (Remote) Workday Third Party Security Risk Management Lead View Job Reston, VA (hybrid) Cognitive Research Corporation Project Vendor Manager View Job Remote Crowdstrike TPRM Analyst View Job Remote ClearCaptions LLC IT Vendor Manager View Job (Remote) LOAD MORE

Portend AI is a continuous Third-Party Risk Intelligence platform that replaces static vendor assessments with real-time, independent risk monitoring. < Back Portend AI 3:30 – 3:55 PM CT TPRM Platform Globe Mail Search Search Search Portend AI is a continuous Third-Party Risk Intelligence platform that replaces static vendor assessments with real-time, independent risk monitoring. Built for TPRM, procurement, compliance, and audit teams, Portend AI delivers ongoing visibility into vendor cybersecurity posture, compliance exposure, financial and operational risk, reputational signals, sanctions status, and emerging external threats. By aggregating and scoring intelligence from thousands of public, regulatory, commercial, and proprietary data sources, Portend AI helps organizations detect vendor risk between review cycles, reduce reliance on self-reported questionnaires, and focus resources on the vendors that present the greatest exposure. The result: stronger third-party oversight, earlier risk detection, and materially reduced operational surprises. Presenter(s) Shabd Vaid CEO Shabd Vaid is a technologist, entrepreneur and an angel investor. He is the Founder and CEO of Portend AI, a Business Risk Intelligence startup. Shabd is also the Managing Partner of Crucial VC and invests in early stage startups. Previous Next

The Agentic Risk Operations Platform. Built for the teams making the calls. < Back Whistic 2:00 – 2:25 PM CT TPRM Platform Globe Mail Search Search Search Whistic will demo Automation Orchestrator and Full AutoAssess, a new way to move vendor assessments from manual follow-up to agentic workflow. In a real-world scenario walkthrough, you’ll see how a TPRM team can start an assessment, gather source material, support analysis, and prepare an executive summary with far fewer manual steps. Most vendor assessments still depend on chasing documents, reading evidence, checking responses, and rebuilding the same summaries again and again. This demo shows what changes when that process becomes automated, without removing practitioner review, approval, or final risk judgment. This demo gives TPRM practitioners the opportunity to see: How a manual assessment workflow can move from intake to executive summary with Full AutoAssess. How teams can expand assessment breadth and depth without stretching reviewers thinner. Where Assessment AI reads evidence, cites sources, and supports analysis, while your team owns the final call. See what production-ready AI looks like in third-party risk management. Register today to reserve your spot. Whistic is the Agentic Risk Operations Platform. Built for the teams making the calls, Whistic runs vendor assessments, continuous monitoring, internal control testing, and the four-agent Automation Orchestrator on one agentic foundation. Agents do the work: pulling evidence, running tests, validating breaches, building the audit trail. Security and compliance teams focus on the decisions that need a human. Automate the work. Own the decision. Learn more at whistic.com . Presenter(s) Jay Denison Product & Engineering Manager Jay has spent the bulk of his career on the engineering and organizational side of software and systems -- writing code, managing project work, and leading teams that build. With previous experience in federal programs, on cyber security, at NASA, and now at Whistic since 2020, Jay has been able to build on a diverse set of inputs and methodologies to build products that deliver immediate value for customers. With… Show More Christine Medrano Product Manager With over four years at Whistic, I've built scalable support processes as the former Support leader, produced GTM enablement content for new product launches, and championed AI tooling adoption across the organization. I serve as a connective layer between Support, Product, and Go-to-Market functions — ensuring teams are equipped, customers are successful, and new capabilities land effectively, internally and externally. Previous Next

Save time, reduce risk, and scale to nth parties without overwhelming SMBs with questionnaires. < Back CyberCert 3:00 – 3:25 PM CT TPRM Platform Globe Mail Search Search Search Save time, reduce risk, and scale to nth parties without overwhelming SMBs with questionnaires. With CyberCert, SMBs certify to comply - eliminating subjective, enterprise-level forms and removing the guesswork or IT hand-offs. Enterprises can rely on a single, objective certification for their SMB suppliers. CyberCert certifies SMBs against SMB1001, an international cyber standard purpose-built for small and midsize businesses. It is partner- and ecosystem-enabled by design and recognised by insurers, enterprise supply chains, and professional bodies. Presenter(s) Ryan Ettridge Co-Founder & CEO Helping SMB suppliers across the chain close the gaps to an internationally recognized cyber standard designed for them. Previous Next