Join us for opening remarks and pertinent information on the Showcase format. Opening Remarks Website Email LinkedIn Video Fact Sheet The Third Party Risk Association (TPRA) was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. Our founders are practitioners who built their own third party risk programs within their respective organizations and were looking for a vendor-agnostic community that could help them elevate their programs. When they couldn't find one, they created one . What started as a roundtable between colleagues has turned into a community of thousands of practitioners and TPRM service providers worldwide , all working towards the same goal: sharing knowledge and furthering the industry of TPRM. Presenter(s)

Learn more about ThirdOrbit, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > ThirdOrbit TPRM Platform Incubator Member CONTACT INFORMATION Tunde Ogunkoya, Founder Email: tunde@thirdorbit.io LinkedIn: linkedin.com/in/tundeogunkoya ThirdOrbit is an actuarial-grade Third-Party Risk Management (TPRM) platform purpose-built for regulated industries, particularly African Enterprises. Founded in South Africa, ThirdOrbit applies Bühlmann credibility theory, an established actuarial methodology to vendor risk scoring, producing mathematically defensible 0–999 risk scores with complete audit trails. The platform's FORCES methodology (Financial, Operational, Regulatory, Concentration, External, Security) provides six-dimension risk decomposition with AI-powered evidence verification, resolving the cold-start problem that plagues traditional TPRM tools. ThirdŌrbit natively supports POPIA, NDPA, SARB directives, and CBN frameworks, NOGICD Act 2010 (as amended by PIA), MPRDA 2002, serving regulated enterprises across banking, insurance, telecommunications, Oil& Gas and energy sectors in South Africa, Nigeria, and Kenya. TOP PRODUCT FUNCTIONALITY CATEGORIES Vendor Risk Scoring (Actuarial-Grade, Bühlmann Credibility) Third-Party Risk Assessment & Questionnaire Management AI-Powered Evidence Verification & Inconsistency Detection Regulatory Compliance Assessment (POPIA, NDPA, SARB, CBN) Continuous Security Monitoring (External Integration) Knowledge Base Auto-Fill with Three-Tier Answer Orchestration Model Governance & Parameter Sensitivity Analysis Contract Risk Management & SLA Monitoring Vendor Ecosystem Mapping (Orbit Map Visualization) TPRM-as-a-Service (Managed Assessments for ALL Enterprises) RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Join us for "Demo Days," where leading TPRM Service Providers showcase their solutions through 25-minute product demos tailored for TPRM practitioners. TPRM Tool Demo Days The Third Party Risk Association (TPRA) invites you to attend our quarterly "Demo Days, " an exclusive opportunity for TPRM practitioners to explore innovative solutions from leading TPRM Service Providers. During these interactive sessions, vendors will deliver 25-minute product demos , showcasing their tools, technologies, and services designed to address the complex challenges of third party risk management programs. REGISTER TOOL TYPES RAFFLE PRIZES LOOKBOOKS AGENDA These virtual events allow practitioners to: Gain insights into the latest TPRM innovations. Connect directly with service providers to ask questions. Compare tools and platforms to determine the best fit for their organization. Don't miss this opportunity to stay ahead in the evolving landscape of third party risk management. New service providers demo each quarter, so we encourage you to register for as many Demo Days as you're able! Tool Types Below you can find brief descriptions of the TPRM tools that will be showcased during these events. TPRM Platform A software system designed to manage Third-Party Risk Management (TPRM) programs, which involves identifying, assessing, mitigating, and monitoring risks associated with external companies that an organization works with. Risk Ratings/Intelligence Tool A system or software application used to evaluate and quantify the potential likelihood and severity of risks associated with a particular incident or investment, typically assigning a numerical rating to each risk to facilitate prioritization and decision-making within risk management processes. GRC Platform A software tool that tracks, monitors, and manages governance, risk, and compliance activities at the enterprise level. This tool usually encompasses more than one risk-related department and encourages risk management at the highest level for an organization. TPRM Services An organization that assists with the implementation of TPRM programs and/or the completion of due diligence activities. TPRM Service providers can determine the maturity of your program and enhance operational capabilities. Register for Upcoming Demo Days New service providers demo each quarter, so we encourage you to register for as many Demo Days as you're able! NOTE: TPRM Service Providers and their employees, affiliates, parent companies, etc. NOT participating in a demo are not allowed to register based on conflict of interest. Raffle Prizes for this Quarter Opt-in to providing sponsors with your contact information during registration for the chance to win one of these awesome prizes! Raffle Prize Prize Image Organization Value Description Yeti Bottle Safe Security $50 Drawn at end of event Travelpro Maxlite Softside Carry On 21” TPRA $160 Drawn at end of event 3-in-1 charging station for Apple devices + Anker Portable Charger Power Bank + Anker Nano Travel Adapter TPRA $105 Drawn at end of event $100 TPRA Gift Card TPRA $100 Drawn at end of event $300 dinner date for you and a +1 to any restaurant of your choice including babysitter / wine / car service. Coverbase $300 Drawn during Coverbase's session. Q4 2026 Lookbook Q3 2026 Lookbook Q2 2026 Lookbook Q1 2026 Lookbook Demo Day Agenda Please note that the below may feature presenters for multiple Demo Days. Demo Day times are subject to change depending on the number of demos per day. All scheduled times are in Central Time. Filter by Quarter Select Quarter Filter by Tool Type Select Tool Type Date: Wednesday, October 21, 2026 Time: 9:00 – 9:25 AM CT TPRM Platform Bitsight Third Party Risk Management is an end-to-end solution that includes continuous, data-driven, validated cyber risk insights and automated vendor assessment capabilities. Read More Date: Wednesday, October 21, 2026 Time: 9:30 - 9:55 AM CT TPRM Platform Aravo drives operational excellence and measurable business outcomes with centralized third-party risk management. Read More Date: Wednesday, October 21, 2026 Time: 10:00 - 10:25 AM CT Risk Ratings/Intelligence Supply Wisdom provides real-time, continuous risk intelligence across third parties and locations to help enterprises proactively manage operational, compliance, financial, cyber, location, ESG and Nth party risks. Read More Date: Wednesday, October 21, 2026 Time: 10:30 – 10:55 AM CT TPRM Platform Certa’s Third Party OS is the digital backbone for managing your third party relationships across all risk domains and lifecycle stages. Read More Date: Wednesday, October 21, 2026 Time: 11:00 - 11:25 AM CT Risk Ratings/Intelligence With RiskRecon, you can build a scalable, third-party risk management program and realize dramatically better outcomes. Read More Date: Wednesday, October 21, 2026 Time: 11:30 – 11:55 AM CT TPRM Platform ProcessUnity Third-Party Risk Management protects companies and their brands by reducing risk from third parties, vendors and suppliers. Read More Date: Wednesday, October 21, 2026 Time: 12:00 - 12:25 PM CT TPRM Platform SecurityScorecard is a leading cybersecurity ratings platform that provides continuous risk monitoring, intelligence, and third-party risk management solutions to help organizations assess and improve the security posture of their vendors and supply chains. Read More Date: Wednesday, October 21, 2026 Time: 12:00 – 12:55 PM CT Lunch Read More Date: Wednesday, October 21, 2026 Time: 1:00 – 1:25 PM CT TPRM Platform Coverbase automates 90% of third-party risk management using AI. Read More Date: Wednesday, October 21, 2026 Time: 1:30 – 1:55 PM CT TPRM Platform Safe Security has redefined cyber risk measurement and management with its real-time, data-driven approach that empowers enterprise leaders, regulators, and cyber insurance carriers to understand cyber risk in an aggregated yet granular manner. Read More Date: Wednesday, October 21, 2026 Time: 1:00 – 1:25 PM CT GRC Platform Drata is an AI-native Trust Management platform that unifies governance, risk, compliance, and assurance into one continuous system of record. Read More Date: Wednesday, October 21, 2026 Time: 2:30 - 2:55 PM CT TPRM Platform OneTrust empowers you to collect, govern, and use data with complete visibility and control. Read More Date: Wednesday, October 21, 2026 Time: 3:00 – 3:25 PM CT TPRM Platform Risk Ledger is a network-first platform delivering Active Supply Chain Security. It connects organisations and suppliers through standardised third-party data, enabling continuous visibility and collective defence — because every link matters. Read More Date: Wednesday, October 21, 2026 Time: 3:30 – 3:55 PM CT TPRA will draw names for the opt-in raffle! Read More LOAD MORE Interested in presenting a product demo? Please complete our Sponsor Information Form to start the process or contact Heather Kadavy, TPRA's Senior Membership Success Coordinator, at heather.kadavy@tprassociation.org to learn how to get involved!

This course is the entry point for a four-part series, and the one module every TPRM practitioner should take regardless of seniority. By the end, participants will have a clear picture of what is changing, a calibrated view of what AI can and cannot do in their work, and five concrete actions to take this week and this quarter. AI and the Future of Third-Party Risk Price $119 Duration 2 hours Type Live Training Session Enroll By clicking this button, you will be redirected to our Training & Certification Platform (Inspire360) . Please note that the Inspire360 Training and Certification Platform is separate from the TPRA website. Your TPRA website login credentials will not work on Inspire360, and a separate account is required to register for and access courses. < Back About the Course What the field looks like now, how it got here, and what you need to do about it. This is the entry point for the "TPRM in the Age of AI" series and the one module every TPRM practitioner should take regardless of seniority. It does not assume any AI background. It starts from first principles: why the attestation model is breaking down, what four real incident case studies say about the gap between declared controls and observable evidence, and what the arrival of AI means for the profession — both the opportunity and the threat. The module is deliberately uncomfortable in places. It names which parts of the TPRM role are most at risk. It presents the AI-on-AI problem directly: when both the vendor completing the questionnaire and the program reviewing it are using AI, the result is a fast, confident, expensive process that generates zero new information about actual security posture. It also names the structural fact that assessment volume will increase while headcount stays flat — and frames this as something to prepare for, not fear. By the end, participants have a clear picture of what is changing, a calibrated view of what AI can and cannot do in their work, and five concrete actions to take this week and this quarter — none of which require budget approval. Audience: All practitioners Format: Live sessions over Zoom Length: 120 minutes CPE: 2 CPEs Prerequisites: Minimum one year of TPRM, GRC, vendor management, or related experience. No prior AI or technical background required. Providing Organization: Coverbase Instructor: Clarence Chio – Cofounder & CEO of Coverbase, Instructor at UC Berkley since 2019 Your Instructor Clarence Chio Cofounder & CEO of Coverbase UC Berkley Professor Clarence is the cofounder and CEO at Coverbase, a TPRM copilot that automates 90% of vendor management with AI. Prior to this, he cofounded Unit21, Google-backed company that raised $92m to help top financial institutions combat fraud and money laundering with AI. He has degrees in Computer Science and AI from Stanford, published the book "Machine Learning and Security" with O'Reilly Media, and has been teaching AI and security at UC Berkeley since 2019. He has shared his ideas on machine learning and security at DEFCON, BLACK HAT, and other conferences across more than 30 cities. Clarence Chio Clarence Chio 1/1 Previous Next

Enhance your Third Party Risk Management (TPRM) skills with TPRA’s flexible certificate program. Explore free and paid courses covering AI risk, cloud security, and more. Gain practical knowledge to support your organization. Certificate Program The Third Party Risk Management (TPRM) Certificate Program , offered by TPRA in collaboration with our trusted partners, provides comprehensive training designed to enhance knowledge and expertise in TPRM best practices. This program features a diverse selection of courses covering critical topics in third-party risk, cloud security, AI/LLM security and risk. Participants can choose from both free and paid courses, ranging in duration from one to four hours, allowing for flexible learning tailored to individual needs and schedules. Participants will receive a certificate upon completion of the training course. Please note that this is not a certification program, nor will participants receive any professional credentials. Whether professionals are new to TPRM or looking to deepen their expertise, the program provides valuable insights and practical knowledge to strengthen risk management strategies within their organizations. Available Courses AI/LLM Security & Risk Course for TPRM: Learn the risks that AI in vendors can carry, and how to assess them On-Demand, Self-Paced | 1 hour | $0 | 1 CPE hour The Third Party Risk Association (TPRA) has partnered with PromptArmor to bring you the " AI/LLM Security & Risk Course for TPRM ". This training course includes 12 modules to teach you… Read More Register Securing SaaS Applications: A Comprehensive Approach to Cloud Risk Management Live Virtual Training | 4 hours | $159 | 4 CPE hours As organizations increasingly rely on cloud-based Software-as-a-Service (SaaS) solutions, understanding and mitigating associated risks is critical. This virtual training provides an in-depth exploration of key security considerations when evaluating and… Read More Register

Explore TPRA’s TPRM Consultant Membership plans designed for independent consultants and boutique firms offering third party risk advisory services. Consultant Catalyst Plans Target Audience: Single, Independent Consultants or Boutique Advisory Firms specializing in third party risk management services, including but not limited to TPRM program implementation, tool implementation, and/or staff augmentation. INQUIRE ABOUT MEMBERSHIP About This Membership Plan The Consultant Catalyst Plan is a tailored membership option designed specifically for independent consultants and boutique advisory firms that specialize in third party risk management. Recognizing that these high-expertise professionals often operate with limited marketing resources, TPRA has created an accessible, affordable pathway into its practitioner-driven ecosystem. Through this membership, consultants gain the opportunity to build visibility, credibility, and relevance in a highly targeted community of TPRM professionals. This plan provides structured, ethical exposure to the TPRA network, including guidance on lead generation strategies that respect practitioner boundaries while helping consultants showcase their expertise. Members are encouraged to engage directly in community discussions, contribute thought leadership, and demonstrate their unique value through active participation. While TPRA does not guarantee leads, the Consultant Catalyst Plan creates the foundation for long-term relationship-building, increased brand recognition, and a stronger position in the TPRM space. Key Objectives 1 Provide affordable entry to the TPRA ecosystem. 2 Offer guided lead generation strategies (without violating practitioner privacy). 3 Enable visibility and credibility for consultants. 4 Encourage active participation to demonstrate value. INQUIRE ABOUT MEMBERSHIP Key Benefits Explore a brief overview of the benefits included in our Consultant Catalyst Plan. Exclusive Access to Practitioner-Focused Events Gain invitations to all TPRA Practitioner meetings, including Industry Roundtables and Insight Work Groups. Participate as a panelist or presenter once a year and engage in collaborative development of TPRA tools and guidance—all in a no-solicitation environment that fosters trust and expertise. Lead Generation & Networking Tools Participate in bi-annual Consultant Connector Events with interested practitioners. Plus, use the TPRA's “Lead Generation Blueprint” Toolkit to guide compliant, value-driven outreach based on best practices. Strategic Visibility & Promotion Opportunities Showcase your expertise through a curated TPRA Consultant Directory Profile, a LinkedIn spotlight post, Consultant Corner blogs, and the opportunity to be featured in TPRA’s quarterly newsletter. Position your firm as a recognized thought leader within the third party risk community. Business Growth & Peer Exchange Forums Join quarterly Consultant Roundtables—exclusive, TPRA-moderated sessions where you’ll share challenges, trends, and business growth strategies with fellow consulting peers in a supportive and strategic environment. Co-Hosted Event Collaboration TPRA will partner with your organization to co-host webinars, LinkedIn Live sessions, and/or podcasts. Leverage TPRA’s promotion while leading discussions that highlight your niche knowledge and solutions in front of a relevant and engaged audience. Recognition, Resources & Professional Development Apply for the TPRM Innovator Award, access discounts on certifications for consultant teams, and post jobs on TPRA’s career board. Contribute educational content, share surveys, and participate in our Women in TPRM Program. Consultant Catalyst Members Inquire About Membership Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Follow on LinkedIn > Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

Learn more about Tenchi Security, a TPRA , through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Tenchi Security TPRM Platform Advocate Member CONTACT INFORMATION https://www.tenchisecurity.com/en/contact-us Assess Third-Party Security from the Inside Out Tenchi Security is redefining Third-Party Cyber Risk Management with Zanshin, the only TPCRM solution assessing third-party security from the inside out. Zanshin links external attack surface monitoring with automated, continuous, scalable, and non-intrusive assessments of cloud infrastructure (IaaS, PaaS, SaaS) and security controls across your entire ecosystem. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Continuous Inside-Out Security Assessments Continuously evaluates third-party cloud environments, endpoint security tools, and identity providers through read-only API integrations, identifying vulnerabilities, misconfigurations, excessive privileges, exposed secrets, MFA gaps, and other security issues. Outside-In Attack Surface Monitoring Monitors internet-exposed assets such as domains, certificates, DNS records, open ports, exposed services, leaked credentials, and public vulnerabilities. Relationship-Specific Risk Scoring Calculates risk scores tailored to each vendor relationship, considering both technical findings and business context rather than assigning a generic vendor score. Security Questionnaire Management Automates the creation, distribution, collection, review, and tracking of vendor security questionnaires, reducing manual effort during assessments. Compliance Assessment & Reporting Maps findings to security frameworks and regulations (such as CIS Controls, ISO 27001, NIST, SOC 2, PCI DSS, etc.) and generates compliance reports. Show More RESOURCES FROM THIS VENDOR MEMBER Alice in Supply Chains – the monthly podcast by Tenchi Security VENDOR MEMBER RESOURCE | July 17, 2026 Load More EVENTS FROM THIS VENDOR MEMBER Tenchi Conference 2026 In-Person Conference November 4, 2026 NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Hilda AndelizGomez, VP. Enterprise Third Party Risk Performance Analyst for Valley Bank, and TPRA's WNTPRM August 2025 Leader Spotlight. < See All < Previous Next > Hilda AndelizGomez VP. Enterprise Third Party Risk Performance Analyst Valley Bank Biography Hilda Andeliz is a Dominican American professional with over 10 years of experience in the banking industry. She began her career in retail banking, where she built a strong foundation in operations and customer relationships. Her path into Third-Party Risk Management wasn’t conventional—but the turning point came when a leader saw beyond her résumé. They believed in her potential, recognized the value of her frontline experience, and opened the door to a new career path. Today, Hilda serves as Vice President, Enterprise Third-Party Risk Performance Analyst at Valley Bank, where she oversees third-party performance, regulatory alignment, and operational resilience. She leads with empathy, collaboration, and a deep commitment to continuous growth for herself and those around her. Hilda has shared her journey and insights at events like CeFPro’s Vendor & Third-Party Risk USA and through Aravo’s webinars, championing the belief that growth in risk management is a shared journey driven by support, connection, and purpose.Hilda holds a Bachelor’s degree in Finance from Rutgers University and is a Certified Third-Party Risk Management Professional (C3PRMP). Leadership Characteristics My leadership characteristics are rooted in empathy, integrity, and collaboration. I lead with purpose and adaptability, always focused on creating environments where people feel empowered to grow, contribute, and thrive. I bring a detail-oriented mindset and a passion for continuous improvement, using data, clear communication, and proactive problem solving to drive meaningful results. Whether it’s regulatory stewardship, vendor partnerships, or cross-functional execution, I approach each challenge with a commitment to learning, inclusion, and long-term impact. I believe strong leadership is not just about outcomes—it’s about how we show up for others and create space for innovation and growth. Leadership Challenges One of the most meaningful leadership challenges I’ve faced was stepping into new roles while leading teams with diverse backgrounds, often including individuals with more industry experience or different learning styles. Navigating these dynamics taught me that leadership isn’t about having all the answers; it’s about showing up with humility, listening actively, and creating space for others to thrive. I’ve learned to adapt my approach to meet people where they are, foster an inclusive environment, and lead with empathy and openness. These experiences, much like my own nontraditional path into Third-Party Risk Management, have reinforced my belief that trust, collaboration, and belief in one another are what truly move teams—and careers—forward. Key Take-a-ways One of my favorite aspects of Third-Party Risk Management(TPRM) is how it goes far beyond oversight—it’s about aligning people, processes, and strategy to strengthen the organization as a whole. At its core, TPRM is relationship-driven. The most effective partnerships are built on trust, transparency, and consistent communication. For me, growth in this space begins from within. It starts with believing in yourself and showing up with purpose, courage, and a willingness to evolve. That mindset has shaped how I lead, collaborate, and contribute to the broader mission of risk management. Fun Fact Outside of work, I find balance and energy in the moments that bring me joy and connection. Whether it’s traveling to new places, spending peaceful days at the beach, or dancing to music that lifts my spirits, these experiences help me recharge and stay grounded. The time I treasure most, however, is the time I spend with my daughter. From exploring new adventures to sharing quiet, everyday moments, being with her reminds me of what truly matters. She inspires me to approach life and work with intention, purpose, and gratitude, constantly shaping the example I strive to set for her.

TPRM Service Provider start-ups are invited to join the TPRA as Incubator Members! Apply now! TPRA Incubator Program Welcome to the TPRA Incubator Program, created to be a catalyst for transformative innovation in third party risk management (TPRM) Read More Inquire About Membership About Mission Empower and accelerate the success of innovative third party risk management startups through a comprehensive incubator program. We strive to foster a collaborative ecosystem that provides mentorship, resources, and networking opportunities, enabling startups to navigate challenges, develop cutting-edge solutions, and establish a robust presence in the evolving landscape of risk management. Vision To be a catalyst for transformative innovation in third party risk management, fostering a dynamic ecosystem where startups thrive in pioneering solutions that redefine industry standards. We aspire to build a global community of resilient and adaptive risk management leaders who contribute to a secure and trustworthy business environment. Through our incubator program, we envision a future where emerging startups play a pivotal role in shaping the evolution of risk management practices, driving sustainability, and ensuring resilience in an ever-changing landscape. Transforming the Industry Together Incubator Participants Who Can Participate Inquire About Membership Innovative Third Party Risk Management Startups Only start-up organizations within the Third Party Risk Management space Start-up must be five years old or less and/or within the pre-seed, seed, or early stage (Series A and Series B) Start-ups must not bring in more than $500,000 of revenue annually from product/service offerings Must complete an application and potentially an interview Must provide evidence of the revenue the organization generates from products/services within their last and/or current financial year TPRA retains the right to deny any organization and/or individual entry into the Incubator Program for any reason Goals & Activities The goals and activities of the Incubator Program are to assist with removing roadblocks within the community to allow for better communication, tighten feedback loops to ensure community needs are addressed, and to be a catalyst for innovation within the community. The program will also allow for a common lexicon when speaking about TPRM programs and the value they bring to organizations. Below are the goals and activities related to the TPRA’s Innovator Program: 1 TPRA Vendor Membership Receive “Incubator Status” Vendor Membership based on the Program Tier structure below. Would receive all of the benefits of an “Advocate” Member. Benefits include: Orientation & On-boarding Three website accounts Quarterly updates Invitations to practitioner meetings Website Access Service Provider Profile LinkedIn Welcome Message Share your resources, events, surveys, & job openings with TPRA members Newsletter Spotlight & Links to Blogs Write blogs for TPRA 3 Access to Resources Share TPRA resources, webinars, and training opportunities. TPRA will create a website to share external resources for Incubator Program members only (to include company names and URLs for investment firms, other incubator programs, and other start-up accelerators). 5 Training & Skill Development Incubator participants may attend TPRA webinars, events, and activities on the website to enhance TPRM skill development. 7 Lead Generation Opportunities TPRA to provide incubator participants with discounts on conference sponsorships and demo opportunities. Sponsorships come with opt-in lists. TPRA to create a site for Practitioners to submit RFPs for TPRM tools and for incubator participants (as well as TPRA Vendor Members) to respond to them. 9 Feedback & Improvement of Incubator Program From time to time, participants will receive surveys that request feedback on the Incubator Program. Responses will be used to continually enhance the program. 2 Start-Up Advisory Council Set up regular 1:1 meetings (most likely quarterly) with select practitioners (based on industry and company size) to provide program participants with feedback on their products/services. This can also assist with the incubator program participant figuring out their product market fit, target market, and product/service pitch. Can also assist with the participant better understanding if they are addressing their market’s TPRM pain points. TPRA to create a site for Practitioners to note TPRM pain points and/or note request for innovation. (Note: Can have the community vote on what they would like to see the most.) Incubator Participants would be able to access this list. 4 Network Opportunities TPRA will create network opportunities to introduce incubator program participants other program participants, practitioners, and other service providers. 6 Brand Awareness TPRA to note the incubator participant’s organization on the TPRA website (within Service Provider Profile), highlight the organization on LinkedIn, and note the organization as a spotlight within one of the TPRA’s quarterly newsletters. 8 Collaboration on Additional Resources In collaboration with TPRA, may participate in educational trainings, research, & content creation (such as blog posts, whitepapers, & videos). Inquire About Membership Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Follow on LinkedIn > Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

Learn about  Heather Kadavy, CERP, CBVM, CFSSP,  AVP Third Party Risk Management & Information Security Officer for  Union Bank and Trust Company, and TPRA's WNTPRM October 2022 Leader Spotlight. < See All < Previous Next >  Heather Kadavy, CERP, CBVM, CFSSP  AVP Third Party Risk Management & Information Security Officer  Union Bank and Trust Company Biography Heather Kadavy worked at Union Bank and Trust Company for nearly 34 years with a career focus on Operational Risk Management. As her Bank’s Board of Directors designee, she has managed and evolved several major programs including Third Party Risk Management, Information Security, Physical Security, Safety, Business Recovery, Model Risk Management, and Enterprise Risk Management. She developed and implemented training programs for thousands of employees, had oversight of over a thousand third party relationships, due diligence reviews and contract management activities. Heather has been married for over 20 years to her husband, Patrick, and has a daughter and son both attending the University of Nebraska-Lincoln. In her spare time, Heather enjoys spending time with friends and family, volunteering, doing puzzles, and baking. She is an avid Vikings football and Lakers basketball fan. Leadership Challenges Heather persevered through a previously male dominated industry (e.g., Finance, Physical Security, Information Security, IT, Cyber Security, Business Recovery, and Third Party Risk Management) by addressing complex operational risk areas within an enterprise risk management framework by building one-on-one collaborative relationships with business owners and serving as their expert resource. When it comes to complex topics, Heather found that business unit priorities were typically sales and client-centric support-focused goals. Operational risk management frameworks, documentation, and practices were not part of individual training programs and were often silos with one individual. As an Operational Risk Management translator, educator, and collaborative partner, Heather found a niche that equated to success which allowed her to bypass old silo practices and allow for not only 'train the trainer,' but 'train their successors,' spreading the alignment and understanding of risk management vocabulary, framework, and practices which allowed for continual improvement. Key Takeaways Heather’s favorite part about TPRM is the collaboration that comes when working with teams and seeing the “ah ha” light come on when parties new to TPRM see the enterprise risk view of a third party relationship. Fun Fact Heather loves writing poetry and sends out a new poem each Christmas to over 500 friends and family members. Leadership Characteristics Relator-Responsibility-Restorative-Achiever-Activator Relator – Values one-on-one relationships and authenticity and contributes something unique to relationships. Responsibility – Has a deep sense of purpose and therefore loyalty and dedication and psychological ownership in success. Restorative – Multitasks and trouble shoots problems theoretically or on the fly; are ok that we are never done we are always transforming. Achiever – Self motivated with her own innate intensity. Activator – An action-oriented catalyst to move and improve. Leadership Challenges Heather persevered through a previously male dominated industry (e.g., Finance, Physical Security, Information Security, IT, Cyber Security, Business Recovery, and Third Party Risk Management) by addressing complex operational risk areas within an enterprise risk management framework by building one-on-one collaborative relationships with business owners and serving as their expert resource. When it comes to complex topics, Heather found that business unit priorities were typically sales and client-centric support-focused goals. Operational risk management frameworks, documentation, and practices were not part of individual training programs and were often silos with one individual. As an Operational Risk Management translator, educator, and collaborative partner, Heather found a niche that equated to success which allowed her to bypass old silo practices and allow for not only 'train the trainer,' but 'train their successors,' spreading the alignment and understanding of risk management vocabulary, framework, and practices which allowed for continual improvement. Key Take-a-ways "As Third Party Risk Practitioners, our approach to relationship-building and collaboration outweigh systems and platforms when assisting the first line of defense in understanding the “why” and “how” with their role in overall risk management," Heather noted. Heather’s favorite part about TPRM is the collaboration that comes when working with teams and seeing the “ah ha” light come on when parties new to TPRM see the enterprise risk view of a third party relationship. Fun Fact Heather loves writing poetry and sends out a new poem each Christmas to over 500 friends and family members.

Learn about Olga Baldwin, VP, Vendor Management for Axiom Bank, and TPRA's WNTPRM December 2022 Leader Spotlight. < See All < Previous Next > Olga Baldwin VP, Vendor Management Axiom Bank Biography Olga started working in third party risk management in 2008 in a private company. She has worked in several industries such as banking, insurance, and airline. She specializes in building TPRM programs, developing policies, procedures, change management, system implementation and remediation of TPRM program deficiencies. Leadership Characteristics Olga is very analytical and a fast learner. She is able to analyze a program, identifying any areas for improvement by utilizing her knowledge and lessons learned from previous TPRM programs. She enjoys her work and always ensures her teams are well trained and positioned for success. Leadership Challenges The biggest challenge for Olga is perfection. She sometimes spends extra time to ensure the reports and presentations look flawless. Even through it is important but not always possible. She always thrives for success and looks for opportunities for improvement and efficiencies in processes. Key Take-a-ways Olga enjoys Third Party Risk Manageement. It is important to remember that even though TPRM is a regulatory requirement, it's primary goal is to define the risk exposure and ensure management is aware what level of risk the organization is operating with to make decisions in line with the organization risk appetite. Fun Fact Olga loves traveling with her family. They recently moved to another state and have been busy exploring a new area during the weekends and holidays.

Recently joined a mentorship program or considering joining? Review these resources to ensure your experience is a success! All Categories Previous Category Next Category Mentorship Filter by Resource Type Blogs & Articles Podcast Ted Talk Found 6 Podcast Working Women Mentor Podcast The Working Women Mentor Podcast shines a spotlight on Women Owned Businesses, Women In Business, and Women Business Support. Check out our previous work on the Cracking The Female Business Code series! Recognized as Top 100 Career Minded And Working Women Podcasts Check It Out Meghan Schrader Friday, May 2, 2025 Blogs & Articles Reverse Mentoring – Why it is a must-have in 2023 Reverse mentoring is a practice where younger or less experienced employees are paired with more experienced executives or managers to share knowledge and insights. But it requires the right setting and a work culture where opinions and feedback are welcomed, and it needs to be structured properly to work well and to empower and develop learning. It usually works best in larger or siloed organisations where there is usually less mixing across the hierarchy or where the team is geographically not in the same space or spread apart. Check It Out Meghan Schrader Monday, May 1, 2023 Ted Talk 5 Questions to Ask a Mentor Valorie Burton is the author of thirteen books on personal development, founder of The Coaching and Positive Psychology (CaPP) Institute and an international speaker on resilience and happiness. She has spent more than 15 years studying the research of resilience, positive emotion and courage – and implementing it in her own life and with hundreds of clients from a dozen countries and nearly every state in the US. Her books include, It’s About Time, Successful Women Think Differently, Brave Enough to Succeed, among others. Check It Out Meghan Schrader Saturday, March 4, 2017 Blogs & Articles 35 Questions Mentors Should Ask Their Mentees Wondering what questions you should ask your mentee? This article outlines 27 of them, all of which will help you build a meaningful mentoring relationship that leads to growth. Check It Out Meghan Schrader Tuesday, May 23, 2023 Blogs & Articles What Efficient Mentorship Looks Like When we’re feeling drained, mentoring is one of the tasks that tends to fall by the wayside. But mentors don’t have to burn themselves out to be helpful and effective. This approach, called “fuel-efficient mentoring” by the authors, suggests how to be a mentor in an efficient manner that benefits mentees, growing their confidence and their network, but also conserves your energy. First, define boundaries and expectations, recognizing your own preferences; second, set a time budget that mentees can draw on; third, reconsider how you structure meetings with mentees and try group conversations; fourth, try virtual meetings; and finally, look for ways to turn other commitments, such as professional events, into mentoring opportunities. Check It Out Meghan Schrader Tuesday, August 25, 2020 Ted Talk How to Get a Mentor Mentoring and career expert, Professor Ellen Ensher, Ph.D., discusses tips on how to get a mentor during a TEDx talk at Loyola Marymount University in Los Angeles, CA. (http://www.ellenensher.com ). For more on this subject, and other tips on mentoring and careers, visit: http://www.ellenensher.com Check It Out Meghan Schrader Monday, June 10, 2013