Search Results

Vendor & Third Party Risk Europe In Strategic Partnership Between CeFPro and the TPRA November 10 – 11, 2026 | London REGISTER NOW BECOME A SPONSOR BECOME A SPEAKER AGENDA Why Attend? Explore how organizations across sectors are responding to an increasingly complex third-party risk landscape, from cloud concentration and critical vendors to extended supply chain exposure. This event is brought to you by TPRA in partnership with the Center for Financial Professionals (CeFPro) . Are you ready to strengthen resilience in the face of disruption? Register your interest to be the first to see the agenda when it launches, or secure your place today at the lowest pre-agenda ticket price. Topics & Tracks Operational Risk & Resilience Third‑Party Risk at Scale (From Spreadsheets to Systems) Dependency & Concentration Risk Critical Supplier Resilience Operational Scenario Testing Cyber Resilience Across Ecosystems Global Supply Chain Governance Innovation & Automation Scaling TPRM with AI Automated Due Diligence & Monitoring End‑to‑End TPRM Automation Human Oversight & Decision Ownership AI‑Enabled Supplier Risk Digital TPRM Ecosystems Regulation & Standards From Regulation to Execution Operationalising Compliance Third‑Party Due Diligence & Assurance Regulatory Reporting & Transparency Data Protection & Incident Readiness Navigating Global Regulatory Complexity Preparing for Future Regulation Tickets & Pricing Single Ticket £799 per person For individual TPRM practitioners* *those who assess, monitor, mitigate, etc., third party risk within their own organizations Register Group Ticket £639.20 per person For teams of 5 or more TPRM practitioners* *those who assess, monitor, mitigate, etc., third party risk within their own organizations Register Vendor Ticket £1499 per person For those representing information or service providers* *Vendor, platform or tool provider, consultant, TPRM services, etc. Register ⭐ TPRA Members are eligible for 15% off ! Email info@tprassociation.org for the code! This event is brought to you by the Third Party Risk Association (TPRA) and the Center for Financial Professions (CeFPro) as part of our strategic partnership, bringing together practitioners and industry experts to share practical insights and real-world experiences. + REGISTER NOW BECOME A SPONSOR BECOME A SPEAKER SUBSCRIBE TO UPDATES

Learn more about Vanta, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Vanta TPRM Platform Advocate Member CONTACT INFORMATION Adrian Conley Director, Specialty Sales adrian.conley@vanta.com Vanta accelerates every step of vendor due diligence, automating evidence collection, pre-filling questionnaires, and highlighting the most critical risks. Customers see up to a 50% reduction in time to complete risk assessments and a 3× faster time to findings, allowing teams to identify and remediate issues far more efficiently. With over 12,000 customers across 60 countries, including Atlassian, Quora, Omni Hotels, and ZoomInfo, Vanta is trusted globally to build, maintain, and demonstrate security, all in a way that’s real-time, automated, and AI-driven. TOP PRODUCT FUNCTIONALITY CATEGORIES Vanta is the leading trust management platform, helping organizations simplify, centralize, and automate their security, compliance, and third-party risk programs. By unifying Trust Center, GRC, Security Questionnaire Automation, and Third-Party Risk Management (TPRM) into one platform, Vanta enables organizations to build and demonstrate trust in real time. Third-Party Risk Management – Automate vendor reviews with AI-powered evidence collection, risk flagging, and renewal comparisons. Governance, Risk & Compliance (GRC) – Centralize frameworks and automate controls for SOC 2, ISO 27001, HIPAA, GDPR, and more. Trust Center – Publicly share your real-time security posture through an auto-updating, customizable trust portal. Security Questionnaire Automation – Enable instant, AI-assisted pre-filling and review of vendor questionnaires. Continuous Monitoring & Alerts – Maintain compliance through live monitoring of your infrastructure, vendors, and cloud stack. Framework & Standards Integration – Map once, comply everywhere: crosswalk controls across 20+ frameworks. Reporting & Analytics – Measure and visualize compliance, vendor performance, and remediation velocity. Remediation & Collaboration – Assign follow-ups, close findings faster, and track progress across teams. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Being a leader is often about mastering the more subtle aspects of communication and interpersonal relationships. Learn how through a variety of resources. All Categories Previous Category Next Category Soft Skills Filter by Resource Type Blogs & Articles Book Ted Talk Found 6 Book Becoming You: The Proven Method for Crafting Your Authentic Life and Career by Suzy Welch Discover your true self and build a fulfilling career with Suzy Welch, director of NYU Stern;s Initiative on Purpose and Flourishing. Drawing from her popular NYU class, Welch provides a dynamic, step-by-step guide to uncovering your purpose in today's fast paced world. Check It Out Tuesday, May 6, 2025 Ted Talk How vulnerability makes you a better leader As the founder of a startup, Tracy Young often worried that employees and investors valued male CEOs more -- and that being a woman compromised her position as a leader. In this brave, personal talk, she gives an honest look at the constraints women face when trying to adapt to a male-dominated business culture -- and shares how she developed the courage and vulnerability to lead as her complete, raw self. (This talk contains a graphic story. Discretion is advised.) Check It Out Meghan Schrader Tuesday, March 2, 2021 Blogs & Articles 'Sorry' but these are things women should never write in an email "When it comes to emails, it isn't a surprise that men and women communicate differently. But research shows that when certain writing styles are used by women, the message can be received differently." Check It Out Meghan Schrader Monday, August 5, 2019 Blogs & Articles The Language Women Use in the Workplace and What it Means "As a woman, have you ever found yourself using the phrases “I may be wrong, but…”, or “I’m not an expert in this, but…”, or excessively using the word “sorry…”? Research has found that women are much more likely to use self-deprecating or ‘softer’ language in the workplace. Let’s take a closer look at what language women tend to use and why." Check It Out Meghan Schrader Wednesday, May 19, 2021 Ted Talk Crucial Facts You Need To Know About Your Voice In Your Career Why do top all the professionals, executives, organizational leaders and speakers get a voice coach to help them? When you can communicate what is remarkable, and exceptional about you, you then become irreplaceable in the marketplace. Here are a few defining facts. Your voice speaks louder than what you have to say. Your voice makes people believe what you say. Just a small adjustment can make a big difference to your speaking. Think about it….what do you hope to accomplish with your communication skills and is your voice ready? Check It Out Meghan Schrader Tuesday, December 8, 2020 Ted Talk Get Comfortable with Being Uncomfortable Luvvie Ajayi Jones isn't afraid to speak her mind or to be the one dissenting voice in a crowd, and neither should you. "Your silence serves no one," says the writer, activist and self-proclaimed professional troublemaker. In this bright, uplifting talk, Ajayi Jones shares three questions to ask yourself if you're teetering on the edge of speaking up or quieting down -- and encourages all of us to get a little more comfortable with being uncomfortable. Check It Out Meghan Schrader Tuesday, January 2, 2018

< Back Mitratech Wednesday, August 19, 2026 2:30 – 2:55 PM CT TPRM Platform Globe Mail Search Search Search Presenter(s) Previous Next

Learn about Kim LaBarbiera, Director & Counsel of Third-Party Risk for American Express, and TPRA's WNTPRM September 2023 Leader Spotlight. < See All < Previous Next > Kim LaBarbiera Director & Counsel of Third-Party Risk American Express Biography Kim M. LaBarbiera is currently Director and Counsel for Third-Party Risk in the General Counsel’s Organization at American Express. In her practice, she provides global legal support to business and legal colleagues related to third-party risk, including strategy, third-party lifecycle management, fintech, bank vendor risk, compliance and audit functions, regulatory requirements and cloud computing, among other areas. Prior to American Express, Kim held various legal, compliance and risk roles including General Counsel and Chief Compliance Officer in London, Paris, and New York at firms including USAA, Lloyds Bank, and ING, among other global financial institutions. In April 2023, she was recommended by a U.S. Department of State’s Bureau of Educational and Cultural Affairs (ECA) and World Learning Peer Review Panel to serve as a risk management expert in the Fulbright Specialist Program, serving countries and institutions around the globe. Kim holds a BA in Political Science with a minor in Spanish from Boston College, a JD as a Centennial Scholar from Seton Hall Law School and a Masters of Law in Financial Regulation from Georgetown University, where she authored her thesis on the Regulation of Credit Default Swaps. In addition, she holds leadership and technology program certificates from Harvard and FINRA. She has also served in the Observer Program in the Division of Enforcement for the SEC. Kim is GDPR, CAMS, and CTPRP certified and has previously held Equity and Options FINRA principal licenses, among others. Kim is fluent in Spanish, and conversant in Italian and French, in which she has negotiated contracts for her various clients. She is a member of the New York and New Jersey state bar associations. Kim resides in Old Town Alexandria, VA, with her husband Rob and her chocolate lab and two cats. They enjoy travel, art appreciation, sailing, skiing, and scuba diving. Leadership Characteristics Kim believes in the servant-leader model of leadership and places her clients' needs and satisfaction as the cornerstone of her practice. A few of Kim's work mottos are: Some management principles will never go out of style, especially the one where you realize it is all about the people; Be the change you want to see in the company; Consider adopting progress over perfection and, Insist on having a job you love and loving your job, without compromise. Leadership Challenges "The financial services field has always been feast or famine which means members of its community must learn to embrace and thrive in periods of change. I have lost track of all the mergers, acquisitions and other industry changes through which I have navigated. If you work very hard, and stay passionate, the opportunities to weather the storm present themselves. The trick is to stay focused on the core principles: do your very best, freshen your skills everyday if possible, especially tech, be an excellent steward of the company, care about others, be fair, be patient, and try to smile and laugh as much as possible. Everything else takes care of itself." Key Take-a-ways "From my perspective, Third-Party Risk is one of the most exciting financial service fields to be in right now. It is exploding in growth and presents scores of opportunities to get in on the ground floor and make a difference. I liken it to compliance in the 2000s and privacy in the 2010's. I am so energized and excited to be here." Fun Fact I am an avid scuba diver and white water rafter and have been lucky enough to have gotten to go all over the world: Australia, Bali, Croatia, Italy, Mexico, Florida Keys, Oman, Grand Caymen and Belize.

Learn about Preeti Temple, Executive Director, Third Party Risk for USAA, and TPRA's WNTPRM December 2022 Leader Spotlight. < See All < Previous Next > Preeti Temple Executive Director, Third Party Risk USAA Biography Strategic Supplier Management & Risk Leader with 13 + years of experience managing complex global contracts and relationships. Demonstrated competency in strategic thinking, and leadership skills with strong abilities in relationship management. Business and risk experience in large financial/insurance leading people in execution of planning, development, implementation, integration of risk/compliance management programs. Motivational leader who can easily navigate a dynamic and ambiguous environment while leading and developing high performing teams. Led the development of risk indicators, internal audit policies, risk mitigation controls and provided continual improvement of financial, operational, compliance and regulatory processes. Advanced knowledge in purchasing, contracts management, negotiation, vendor relations, strategic sourcing, training, process improvements, supplier performance, category management, and Third Party Relationships ensuring contracts provided by suppliers adhere to company standards and meet the legal/commercial commitments of the company. "I love this work-- building relationships and mitigating risk is the dream job!" Leadership Characteristics Clifton Strengths: Empathy-Achiever-Activator-Strategic-Positivity Leadership Challenges Preeti's motto is "people first and work second." The result will yield a high performing team who loves to work together and do their best work. Being a leader is a calling to help people and organizations reach their highest potential while enjoying the ride. This is tough to balance with business needs, but people will always outweigh the work in Preeti's book. Key Take-a-ways A simplified process is easy to tailor to regulator expectations. Keep it simple and reduce risk strategically. Fun Fact Preeti enjoys spending time with her family adventuring the outdoors. The joys of her life include her three children, Sophie, Justis and Kate. Preeti is a Veteran wife and daughter. They enjoying living the small town life in Bulverde, Texas.

Learn about Abigail Pia Magat, TPRM Manager for EY GDS Philippines, and TPRA's WNTPRM July 2024 Leader Spotlight. < See All < Previous Next > Abigail Pia Magat TPRM Manager EY GDS Philippines Biography Abigail is a Third Party Risk Manager at EY GDS Philippines. She has spent the duration of her career in fraud prevention, risk management and regulatory compliance. She is currently focused on third-party risk management and threat risk assessment. She manages end-to-end TPRM Programs that includes Risk Profiling, Third-Party Risk Assessments, Findings management, etc. that is aligned to different information security standards, such as but not limited to, ISO27001, SOC 2 Type 2, HIPAA/HITRUST, PCI-DSS, etc. Abigail played an integral role in the stabilization and growth of TPRM in EY GDS Philippines during the pandemic. She leveraged her experience and leadership skills, to ensure the team continued to perform at a high level and at the same time, capitalize on the growth opportunities presented. Leadership Characteristics Throughout the years, Abigail has shown great commitment to her work and is someone that can be trusted as she always carries herself with integrity. Abigail is also supportive to her direct reports and appreciative in the work they do. Additionally, Abigail is detail oriented and has great communication skills. Leadership Challenges A challenge a leader always faces is balancing the responsibilities of work and family, and taking care of their mental and physical health. As a leader, Abigail understands that her responsibilities increased and expectations are higher. The demand for success in her engagements, coupled with ensuring a high-performing team, meant increased pressure to perform. Abigail realized that the key to becoming effective in her role and maintaining a healthy balance was learning how to delegate and setting boundaries for work and personal life. Key Take-a-ways Cybersecurity Risks is continuously evolving as new threats and vulnerabilities are discovered. With the implementation of different Data Protection Laws and Regulatory, the risk appetite of organizations has shifted, investing time and effort in improving their cybersecurity governance and compliance. Although the use of Third Parties has a lot of benefits to organizations, it also comes with great responsibilities to ensure that the risks associated with third parties are identified, evaluated and addressed in a timely manner. Fun Fact Abigail enjoys collecting and listening vinyl records during her free time. She also loves spending time with her four adorable cats (Molly, Marly, Shadow and Mocha) and one dog (Max).

Learn more about Bitsight, a TPRA Champion Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Bitsight Risk Ratings/Intelligence Champion Member CONTACT INFORMATION Michael Hermann Enterprise Sales Director michael.hermann@bitsight.com Bitsight delivers an integrated third-party risk management solution that enables organizations to measure, monitor, and mitigate vendor and supply chain risk using real-time cyber intelligence. Built on one of the world’s largest external cybersecurity datasets and powered by AI, Bitsight TPRM transforms third-party risk programs from manual, point-in-time assessments into continuous, outcomes-driven operations across the vendor lifecycle. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Third Party/Supply Chain Risk Management Cyber Risk Intelligence Continuous Monitoring Vulnerability Detection and Response Fourth Party Risk Management Dark Web Intelligence for Supply Chains Vendor Onboarding & Assessment Vendor Collaboration and Risk Reduction Exposure / Attack Surface Management Professional Services RESOURCES FROM THIS VENDOR MEMBER How Early Signals Surfaced by Dark Web Intelligence Enhance Supply Chain Cyber Resilience VENDOR MEMBER RESOURCE | March 6, 2026 Dark Web Intelligence for Supply Chains: From Reactive TPRM to Threat-Led Defense VENDOR MEMBER RESOURCE | March 6, 2026 A Third-Party Risk Management Framework Template: 10 Critical Elements VENDOR MEMBER RESOURCE | January 9, 2026 Load More EVENTS FROM THIS VENDOR MEMBER After Mythos: How Security and Risk Teams Take Action and Prove Resilience Webinar July 16, 2026 Doomed or Prepared? How Frontier AI Models Reshape TPRM Programs Webinar July 23, 2026 NEWS & UPDATES Bitsight Launches Industry’s First Dark Web Intelligence for Supply Chains, Empowering Organizations to Predict and Prevent Third-Party Exploits February 10, 2026 ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Aravo, a TPRA Champion Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Aravo TPRM Platform Champion Member CONTACT INFORMATION Stephen Fahey Chief Sales Officer sales@aravo.com https://aravo.com/ Aravo provides leading third-party risk management solutions powered by intelligent automation software. Designed to meet the needs of third-party risk management teams at Global 2000 enterprises, we help organizations thrive in a global economy with growing security, regulatory, and brand risk. With our innovative Intelligence First™ Platform, purpose-built to manage third-party risk, Aravo uses AI to optimize time-intensive processes, reduce manual work, and drive better business outcomes. Trusted by over 9 million third-party users and 800,000 corporate users in 195+ countries, Aravo empowers global enterprises to mitigate risk, build business resilience, and promote brand integrity across their extended enterprise. TOP PRODUCT FUNCTIONALITY CATEGORIES End-to-end risk management lifecycle with highly visual dashboards and data Automated onboarding, assessments, monitoring, and termination Fully integrated risk intelligence evaluation and scoring Inherent risk, control effectiveness, and residual risk evaluations Cross-category risk scoring, segmentation, classification, and sequestration Enhanced due diligence and continuous monitoring Agentic AI and programmatic intelligence Real-time incident alerts, issue management, and corrective actions Highly accessible and auditable processes and conditional workflows Simple configuration for easy adaptation to regulatory and market reporting requirements RESOURCES FROM THIS VENDOR MEMBER Why You Should Vibe Code Your TPRM Solution VENDOR MEMBER RESOURCE | June 15, 2026 Closing the Accountability Gap in an Evolving Compliance Landscape VENDOR MEMBER RESOURCE | May 26, 2026 From AI Ambition to Impact: Building AI-Ready TPRM with Aravo and PwC VENDOR MEMBER RESOURCE | May 21, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Aravo Named a Leader in the Gartner® Magic Quadrant™ for Third-Party Risk Management Tools for Assurance Leaders April 15, 2026 Aravo Introduces Aravo Advantage to Help Organizations Maximize Value from Third-Party Risk Programs March 10, 2026 Aravo Named Category Leader in Chartis RiskTech Quadrant for Third-Party Risk Management Solutions October 21, 2025 Aravo Innovates Risk Scoring to Provide Greater Visibility and Control with Escalating Third-Party Risk June 17, 2025 ADDITIONAL OPPORTUNITIES Previous Next

FOR IMMEDIATE RELEASE TPRA and Industry Leaders Unite to Launch the Standard Trust Portal Guidance Monday, May 4, 2026 1/1 A collaborative framework to streamline due diligence, enhance transparency, and enable AI-driven risk management. ANKENY, IOWA — 4 MAY 2026 — The Third Party Risk Association (TPRA), in partnership with ten leading third party risk management service providers, today announced the release of the Standard Trust Portal Guidance for Third Party Risk Management (TPRM). Designed to unify how organizations demonstrate security, compliance, privacy, and governance maturity, the guidance provides a standardized framework for building and managing trust portals, which are centralized hubs for evidence sharing and transparency between organizations and their third parties. “This guidance represents the collective voice of the TPRM community,” Julie Gaiaschi, CEO and Co-Founder of TPRA, said. “By coming together across the ecosystem, we’re simplifying due diligence and enabling a future where transparency replaces endless questionnaires.” The guidance aims to empower practitioners, vendors, regulators, and platform providers to align around a single, trusted model that reflects industry expectations and best practices for transparency, efficiency, and responsible evidence sharing. It also supports AI-driven TPRM technologies by standardizing evidence formats for automated review and analysis. The following organizations contributed perspectives and subject matter expertise to help shape this guidance (listed in alphabetical order): Aravo Bitsight Certa Drata ProcessUnity RiskRecon, a Mastercard Company SecurityScorecard Vanta Their collective insights reflect practical experience across third-party risk management, compliance automation, trust assurance, and practitioner due diligence. The document, created jointly by TPRA and the above-named service providers, is now available for free download at https://www.tprassociation.org/trust-portal . It is also currently open for comment . You can provide your comments using the submission form . The comment period is open from May 4 to July 3, 2026 . After the comment period has closed and comments are reviewed and incorporated into the standard, a finalized version will be released shortly after. ### The Third Party Risk Association (TPRA) is a non-profit organization dedicated to advancing the profession of third party risk management (TPRM) through collaboration, education, and community engagement. TPRA supports practitioners and organizations around the world with resources, training, and networking opportunities that strengthen risk management programs and professional development. MEDIA CONTACT Meghan Schrader Marketing & Communications Manager Third Party Risk Association (TPRA) meghan.schrader@tprassociation.org https://www.tprassociation.org/ FOR MORE INFORMATION https://www.tprassociation.org/trust-portal Previous Next

Learn about Merav Vered, VP GRC & Strategic Intiatives for Vendict Ltd., and TPRA's WNTPRM October 2023 Leader Spotlight. < See All < Previous Next > Merav Vered VP GRC & Strategic Intiatives Vendict Ltd. Biography Merav has 29 years of professional experience in Cybersecurity, focusing on developing security methodologies, regulation, consulting, and management of information security companies. In her experience, she has accompanied hundreds of organizations in certification audits for compliance with ISO Standards 27001, 27799, 27032, GDPR, and the Israeli Privacy Protection Law. This is both as the actual executor of the preparation and as the manager of the advisory team working in the field. Merav has vast experience in information security strategic consultancy to management in organizations, worldwide. In addition, she managed tech consulting areas, which included penetration tests and risk surveys. Merav's first role in the Information Security field was as Head of TPRM in one of the largest mobile companies in the country. "There were no best practices or methodologies back then, and I practically constructed them from scratch. I'm proud to say that 99% of these have become commonly used global best practices of TPRM." Leadership Characteristics Merav is always willing to listen, open to learning, keen to teach, and hungry to achieve. Leadership Challenges Merav's main leadership challenge was to locate the very precise team members who would strive to develop with similar professional concepts and personal aspirations as herself so that they could create an effective work engine, capable of leaving their mark. Key Take-a-ways "My favorite part of TPRM is the challenging moment in which I see the sudden change of expression in a CEO's eyes, when he/she realizes that TPRM is not a pain for the organization, but rather - a solution." Fun Fact In her spare time, Merav volunteers in various hospitals–in the Emergency Ward and the Children's Wards–where she can provide a mere smile or a comforting shoulder. To her surprise, many times these really make a world of difference to patients in pain, fear, and despair.

Learn about Chris Phillips, VP, Procurement and Vendor Risk for Lendmark Financial Services, and TPRA's WNTPRM April 2023 Leader Spotlight. < See All < Previous Next > Chris Phillips VP, Procurement and Vendor Risk Lendmark Financial Services Biography Chris has an extensive background within the banking and financial industry with an emphasis in Regulatory Compliance, Third-Party Risk Management, and Procurement. Chris's skills include the ability to identify solutions to improve internal processes, self-starter, and exceptional problem solver. Her skills and experience assisted in successfully developing, implementing, and overseeing the current Third-Party Risk Management Program at Lendmark Financial Services. Certifications included: Certified Regulatory Vendor Program Manager IV (CRVPM IV) Leadership Characteristics Of her many outstanding qualities, Chris has a genuine care and concern for people and enjoys coaching and mentoring others as they endeavor to unlock their inner potential. Servant leadership is at the core of who she is. The saying “There is no ‘I’ in team” is a daily motto that Chris incorporates into her day-to-day responsibilities. Leadership Challenges Having the controls in place to identify and mitigate potential risk sooner rather is a sign of a strong Third-Party Risk Management program. Hindsight is having the ability to see something more clearly after the fact. Once the contract has been executed, the organization will have to live with all that comes along with that contract. Contracts are legally binding agreements between two or more parties. Having the Procurement and Vendor Risk teams engaged sooner rather than later will assist with identifying and mitigating potential risks. Key Take-a-ways "I find having a career in Third-Party Risk Management (TPRM) to be very fulfilling. No two days are every alike. TPRM requires being adaptable and having the ability to think outside the box. TPRM is so much more than following a checklist. Each vendor relationship is unique and must be viewed from various lenses to ensure proper tracking and monitoring of the vendor relationship from a risk perspective, knowing the compliance and regulatory requirements, and collaborating with the various stakeholders." Fun Fact Outside of work, Chris enjoys spending quality time with her husband, Charles and two children, Ryan and Morgan. She also enjoys exercising, coaching/mentoring, and volunteering.