TRAINING TPCRA 4-Day November Training Only Monday, November 16, 2026 Date & Time Monday, November 16, 2026 at 4:00:00 PM CST Intended Audience Those interested in advancing their careers by taking TPCRA training Duration 12 hrs CPE Credits 12 Fee Starting at $340 Register Event Description The TPCRA Certification is a specialized qualification that validates expertise in assessing third-party cybersecurity controls, managing cyber risk assessments, and evidencing proficiency in cybersecurity assessment techniques, as well as establishing credibility for third-party risk management professionals. SPEAKER(S) INFORMATION CPE CREDIT Your Instructor Gregory Rasner Gregory is a CEO, author, educator, speaker, and leader in the field of cybersecurity, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has helped numerous clients and organizations improve their security posture and reduce their risk exposure. He is the founder and CEO of Third Party Threat Hunting LLC, a cybersecurity consulting firm that specializes in a wide range of areas, including cybersecurity, cloud computing, network architecture, and more. TPCRA training provides you with 12 hours of in-depth discussion on the examination domains, hands-on experience designing and performing cyber assessments, as well as opportunities to perform mock interviews and run through physical validation scenarios. Training is taught by a knowledgeable subject matter expert who has achieved the TPCRA Certification designation. Earn 12 CPE credits for attending 12 hours of TPCRA Training.

The Third Party Risk Association (TPRA) invites you to attend our upcoming Consultant Showcases, which provide an opportunity for TPRM practitioners to connect with TPRM consultants in a virtual, low-pressure format. During these interactive sessions, consultants will deliver 30-minute presentations, providing an overview of their services and offerings to help you address the complex challenges of third party risk management programs. Consultant Showcase The Third Party Risk Association (TPRA) invites you to attend our upcoming Consultant Showcases , which provide an opportunity for TPRM practitioners to connect with TPRM consultants in a virtual, low-pressure format. During these interactive sessions, consultants will deliver 30-minute presentations , providing an overview of their services and offerings to help you address the complex challenges of third party risk management programs. Register Raffle Prizes Look Books Agenda These virtual events allow practitioners to: Gain insights into the latest TPRM techniques. Connect directly with leading consultants to ask questions. Compare consultants and companies to determine the best fit for their organization. Don't miss this opportunity to connect, collaborate, and learn. New consultants present each quarter, so we encourage you to register for as many Showcases as you're able! Register for Upcoming Showcases New consultants present each quarter, so we encourage you to register for as many showcases as you're able! NOTE: TPRM Consultants and their employees, affiliates, parent companies, etc. NOT participating in a presentation are not allowed to register based on conflict of interest. Raffle Prizes for this Quarter Opt-in to providing sponsors with your contact information during registration for the chance to win one of these awesome prizes! Raffle Prize Prize Image Organization Value Description Cybersecurity and Third-Party Risk — signed copy Third Party Threat Hunting $45 Drawn at end of event AI and Third-Party Risk — signed copy Third Party Threat Hunting $35 Drawn at end of event One free seat in Securing SaaS Training (4 hours, 4 CPEs, certificate of completion) Third Party Threat Hunting $159 Drawn at end of event One free seat in AI for TPRM Professionals (4 hours, 4 CPEs, certificate of completion) Third Party Threat Hunting $159 Drawn at end of event A $50 Amazon gift card Third Party Threat Hunting $50 Drawn at end of event $100 Amazon Gift Card TPRA $100 Drawn at end of event $100 Amazon Gift Card TPRA $100 Drawn at end of event HydroJug Water Bottle TPRA $40 Drawn at end of event UGG Euphoria Throw Blanket 50 x 70 TPRA $55 Drawn at end of event Titelist Pro V1 Golf Balls TPRA $60 Drawn at end of event September 2026 Lookbook Showcase Agenda Showcase times are subject to change depending on the number of presentations per session. All times are in Central Time. Date: September 23, 2026 Time: 8:55 – 9:00 AM CT Join us for opening remarks and pertinent information on the Showcase format. Read More Date: September 23, 2026 Time: 9:00 – 9:30 AM CT RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. Read More Date: September 23, 2026 Time: 9:35 – 10:05 AM CST HITRUST, the leader in cybersecurity assurance used in risk management and compliance, offers certification programs for the application and validation of security, privacy, and AI controls. Read More Date: September 23, 2026 Time: 10:10 – 10:40 AM CST Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. Read More Date: September 23, 2026 Time: 10:45 – 11:15 AM CST We help regulated and high risk organizations build practical, resilient and regulator-ready Third-Party Risk Management programmes. Read More Date: September 23, 2026 Time: 11:20 – 11:50 AM CST Third Party Threat Hunting LLC (TPTH) was founded by Gregory Rasner, the leading author of third-party risk books and one of the leaders in the field of TPRM and cybersecurity. Read More Date: September 23, 2026 Time: 12:00 – 12:30 PM CT Taking Cyber Defense to the Next Level Read More Date: September 23, 2026 Time: 12:35 – 1:05 PM CT Risk Tide Solutions trains every level of the third-party risk ecosystem: the business lines engaging vendors, the teams running the program, and the leaders answering for it. Read More Date: September 23, 2026 Time: 1:10 – 1:15 PM CST Closing & Raffle Prizes! Before we close out the day, names for raffle prizes will be drawn for those who opted in to providing sponsors with their contact information! Read More

Coverbase automates 90% of third-party risk management using AI. < Back Coverbase Wednesday, October 21, 2026 1:00 – 1:25 PM CT TPRM Platform Globe Mail Search Search Search Third-party risk management (TPRM) is often a manual, time-consuming process, where teams spend more time on admin tasks than risk mitigation. Coverbase automates the review of third-party questionnaires, security policies, and legal documents, ensuring seamless alignment with internal requirements. The platform also streamlines vendor communication by automating document requests and issue remediation, freeing teams to focus on what matters most - reducing risk. As one customer shared: “This assessment took me 25 days to review last year. With Coverbase, I finished it in under two days.” This is why the #1 bank, #1 credit union, and #1 insurance provider in the world trust Coverbase to power their third-party risk programs. Presenter(s) Clarence Chio CEO Clarence is the cofounder and CEO at Coverbase, a TPRM copilot that automates 90% of vendor management with AI. Prior to this, he cofounded Unit21, Google-backed company that raised $92m to help top financial institutions combat fraud and money laundering with AI. He has degrees in Computer Science and AI from Stanford, published the book "Machine Learning and Security" with O'Reilly Media, and has been teaching AI and security at… Show More Previous Next

Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. Vendor Centric Website Email LinkedIn Video Fact Sheet Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. We are senior practitioners who work side by side with your team, bringing practical experience and straightforward guidance. Our approach is modern and AI-ready, but always grounded in what works in the real world, helping you improve performance, reduce risk, and build a third-party management operation that can scale as you grow. Presenter(s) Tom Rogers CEO Tom Rogers is the Founder and CEO of Vendor Centric, a boutique, practitioner-led firm that helps organizations build and maintain effective vendor and third-party management operations. Since 2011, Tom and his team have worked with nearly 100 organizations in mostly regulated industries across banking, insurance, asset management, healthcare, pharma, life sciences, energy and nonprofits. Tom leads strategy and growth at Vendor Centric, and is the architect of the company's Vendor Management Operating Model, a standards-based framework and methodology for enterprise vendor management. He writes a bi-weekly blog on vendor management best practices, and speaks regularly in webinars and industry events.

Get to know Chris Phillips, Lendmark Financial Services, and a member of TPRA's Board of Directors! < Back Chris Phillips Lendmark Financial Services BOARD OF DIRECTORS Chris Phillips is a seasoned executive with a deep commitment to operational excellence, risk governance, and leadership development. Known for driving innovation in vendor oversight and compliance strategy, Chris brings a collaborative mindset and a passion for empowering teams and organizations to navigate complex regulatory landscapes. Her career reflects a consistent focus on aligning risk management with business growth, and she actively contributes to industry conversations through thought leadership, mentorship, and cross-sector engagement. Next >

Learn about Kim LaBarbiera, Director & Counsel of Third-Party Risk for American Express, and TPRA's WNTPRM September 2023 Leader Spotlight. < See All < Previous Next > Kim LaBarbiera Director & Counsel of Third-Party Risk American Express Biography Kim M. LaBarbiera is currently Director and Counsel for Third-Party Risk in the General Counsel’s Organization at American Express. In her practice, she provides global legal support to business and legal colleagues related to third-party risk, including strategy, third-party lifecycle management, fintech, bank vendor risk, compliance and audit functions, regulatory requirements and cloud computing, among other areas. Prior to American Express, Kim held various legal, compliance and risk roles including General Counsel and Chief Compliance Officer in London, Paris, and New York at firms including USAA, Lloyds Bank, and ING, among other global financial institutions. In April 2023, she was recommended by a U.S. Department of State’s Bureau of Educational and Cultural Affairs (ECA) and World Learning Peer Review Panel to serve as a risk management expert in the Fulbright Specialist Program, serving countries and institutions around the globe. Kim holds a BA in Political Science with a minor in Spanish from Boston College, a JD as a Centennial Scholar from Seton Hall Law School and a Masters of Law in Financial Regulation from Georgetown University, where she authored her thesis on the Regulation of Credit Default Swaps. In addition, she holds leadership and technology program certificates from Harvard and FINRA. She has also served in the Observer Program in the Division of Enforcement for the SEC. Kim is GDPR, CAMS, and CTPRP certified and has previously held Equity and Options FINRA principal licenses, among others. Kim is fluent in Spanish, and conversant in Italian and French, in which she has negotiated contracts for her various clients. She is a member of the New York and New Jersey state bar associations. Kim resides in Old Town Alexandria, VA, with her husband Rob and her chocolate lab and two cats. They enjoy travel, art appreciation, sailing, skiing, and scuba diving. Leadership Characteristics Kim believes in the servant-leader model of leadership and places her clients' needs and satisfaction as the cornerstone of her practice. A few of Kim's work mottos are: Some management principles will never go out of style, especially the one where you realize it is all about the people; Be the change you want to see in the company; Consider adopting progress over perfection and, Insist on having a job you love and loving your job, without compromise. Leadership Challenges "The financial services field has always been feast or famine which means members of its community must learn to embrace and thrive in periods of change. I have lost track of all the mergers, acquisitions and other industry changes through which I have navigated. If you work very hard, and stay passionate, the opportunities to weather the storm present themselves. The trick is to stay focused on the core principles: do your very best, freshen your skills everyday if possible, especially tech, be an excellent steward of the company, care about others, be fair, be patient, and try to smile and laugh as much as possible. Everything else takes care of itself." Key Take-a-ways "From my perspective, Third-Party Risk is one of the most exciting financial service fields to be in right now. It is exploding in growth and presents scores of opportunities to get in on the ground floor and make a difference. I liken it to compliance in the 2000s and privacy in the 2010's. I am so energized and excited to be here." Fun Fact I am an avid scuba diver and white water rafter and have been lucky enough to have gotten to go all over the world: Australia, Bali, Croatia, Italy, Mexico, Florida Keys, Oman, Grand Caymen and Belize.

Learn more about Vanta, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Vanta TPRM Platform Advocate Member CONTACT INFORMATION Adrian Conley Director, Specialty Sales adrian.conley@vanta.com Vanta accelerates every step of vendor due diligence, automating evidence collection, pre-filling questionnaires, and highlighting the most critical risks. Customers see up to a 50% reduction in time to complete risk assessments and a 3× faster time to findings, allowing teams to identify and remediate issues far more efficiently. With over 12,000 customers across 60 countries, including Atlassian, Quora, Omni Hotels, and ZoomInfo, Vanta is trusted globally to build, maintain, and demonstrate security, all in a way that’s real-time, automated, and AI-driven. TOP PRODUCT FUNCTIONALITY CATEGORIES Vanta is the leading trust management platform, helping organizations simplify, centralize, and automate their security, compliance, and third-party risk programs. By unifying Trust Center, GRC, Security Questionnaire Automation, and Third-Party Risk Management (TPRM) into one platform, Vanta enables organizations to build and demonstrate trust in real time. Third-Party Risk Management – Automate vendor reviews with AI-powered evidence collection, risk flagging, and renewal comparisons. Governance, Risk & Compliance (GRC) – Centralize frameworks and automate controls for SOC 2, ISO 27001, HIPAA, GDPR, and more. Trust Center – Publicly share your real-time security posture through an auto-updating, customizable trust portal. Security Questionnaire Automation – Enable instant, AI-assisted pre-filling and review of vendor questionnaires. Continuous Monitoring & Alerts – Maintain compliance through live monitoring of your infrastructure, vendors, and cloud stack. Framework & Standards Integration – Map once, comply everywhere: crosswalk controls across 20+ frameworks. Reporting & Analytics – Measure and visualize compliance, vendor performance, and remediation velocity. Remediation & Collaboration – Assign follow-ups, close findings faster, and track progress across teams. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn about Kelsey Theroux, Third Party Risk Analyst for , and TPRA's WNTPRM June 2025 Leader Spotlight. < See All < Previous Next > Kelsey Theroux Third Party Risk Analyst Biography Kelsey Theroux is a third-party risk professional with a strong background in compliance, due diligence, and operational resilience. She began her career in member-facing roles within the banking industry, where she developed a deep appreciation for the systems that uphold trust, accountability, and regulatory integrity. Her early experience in frontline operations naturally progressed into roles focused on backline operations and quality assurance. This foundation eventually led her into risk management, where she has led comprehensive third-party assessments and contributed to building scalable, centralized third-party risk programs. Currently between roles, Kelsey is taking this time to intentionally deepen her expertise in third-party risk, staying engaged with evolving frameworks, tools, and best practices. She believes effective risk management is not just about meeting regulatory requirements, it’s about fostering trust, supporting business continuity, and driving smarter, more resilient partnerships. Beyond her professional work, Kelsey is an active advocate for public health and community causes. She brings that same sense of purpose and dedication to everything she does, whether she’s strengthening an organization’s risk posture or helping drive change in her community. Leadership Characteristics Initiative-Driven, Collaborative, Detail-Oriented, Process Improvement, Strategic Thinker, Resilient, Adaptable, Educator and Mentor, Mission-Oriented. Leadership Challenges "When I stepped into third-party risk management, I faced the challenge of inheriting a program that was outdated and ineffective, all while having limited prior experience in the field. Drawing on my expertise in operations and operational efficiency, I approached the situation with confidence, focusing on streamlining processes and implementing effective strategies. By taking the time to learn the intricacies of third-party risk, I was able to apply my leadership skills to modernize the program, bringing it back up to date and making it more efficient. Through dedication and strategic improvements, I transformed the program into a functional, well-structured framework that aligns with current standards and the organization’s operational needs." Key Take-a-ways "One of the aspects I appreciate most about third-party risk management is the opportunity to dissect processes and uncover gaps. By pulling apart the due diligence of a third party, I can identify areas where vulnerabilities exist, not just within the vendor relationship but across the broader organization. This analytical approach strengthens risk management and presents opportunities to enhance efficiency in other operational areas. Addressing these gaps leads to a more resilient and well-structured framework." Fun Fact "I have been dancing since I was two years old, and it has been an incredible journey. From attending a performing and visual arts high school to competing in dance competitions, every step led to an exciting opportunity to earn a bronze medal as an Olympian in Modern and Jazz Dance. Competing for a spot on the USA dance team was a thrilling experience, and dance has always been a source of joy, discipline, and creativity in my life."

Learn more about Aprovall, a TPRA Advocate, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Aprovall TPRM Platform Advocate Member CONTACT INFORMATION https://www.aprovall.com/en/book-a-demo/ Aprovall is a European TPRM platform that centralizes third-party governance, risk, and compliance (TPGRC) across the full third-party lifecycle. From evaluation and onboarding to ongoing monitoring and offboarding, Aprovall gives procurement, compliance, legal, and risk teams a single system of record for managing third-party relationships. Trusted by 1,800+ public sector organizations and leading private companies across Europe. Recognized by Gartner in the 2025 Market Guide for Third-Party Management Technology. Organizations using Aprovall reduce administrative time by 25%, save 9 days monthly on third-party processing, and improve supplier response rates by 30%. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Centralized Third-Party Database (Single System of Record) Third-Party Onboarding & Lifecycle Management Risk Assessment & Tiering Compliance & Regulatory Requirement Tracking Cross-Functional Workflow Automation Supplier Portal & Self-Service Continuous Monitoring & Risk Intelligence Audit Trail & Reporting Document Collection & Management ESG & CSR Due Diligence RESOURCES FROM THIS VENDOR MEMBER TPRM Organizational Silos: How to Break Down Barriers VENDOR MEMBER RESOURCE | March 6, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

FOR IMMEDIATE RELEASE TPRA and Industry Leaders Unite to Launch the Standard Trust Portal Guidance Monday, May 4, 2026 1/1 A collaborative framework to streamline due diligence, enhance transparency, and enable AI-driven risk management. ANKENY, IOWA — 4 MAY 2026 — The Third Party Risk Association (TPRA), in partnership with ten leading third party risk management service providers, today announced the release of the Standard Trust Portal Guidance for Third Party Risk Management (TPRM). Designed to unify how organizations demonstrate security, compliance, privacy, and governance maturity, the guidance provides a standardized framework for building and managing trust portals, which are centralized hubs for evidence sharing and transparency between organizations and their third parties. “This guidance represents the collective voice of the TPRM community,” Julie Gaiaschi, CEO and Co-Founder of TPRA, said. “By coming together across the ecosystem, we’re simplifying due diligence and enabling a future where transparency replaces endless questionnaires.” The guidance aims to empower practitioners, vendors, regulators, and platform providers to align around a single, trusted model that reflects industry expectations and best practices for transparency, efficiency, and responsible evidence sharing. It also supports AI-driven TPRM technologies by standardizing evidence formats for automated review and analysis. The following organizations contributed perspectives and subject matter expertise to help shape this guidance (listed in alphabetical order): Aravo Bitsight Certa Drata ProcessUnity RiskRecon, a Mastercard Company SecurityScorecard Vanta Their collective insights reflect practical experience across third-party risk management, compliance automation, trust assurance, and practitioner due diligence. The document, created jointly by TPRA and the above-named service providers, is now available for free download at https://www.tprassociation.org/trust-portal . It is also currently open for comment . You can provide your comments using the submission form . The comment period is open from May 4 to July 3, 2026 . After the comment period has closed and comments are reviewed and incorporated into the standard, a finalized version will be released shortly after. ### The Third Party Risk Association (TPRA) is a non-profit organization dedicated to advancing the profession of third party risk management (TPRM) through collaboration, education, and community engagement. TPRA supports practitioners and organizations around the world with resources, training, and networking opportunities that strengthen risk management programs and professional development. MEDIA CONTACT Meghan Schrader Marketing & Communications Manager Third Party Risk Association (TPRA) meghan.schrader@tprassociation.org https://www.tprassociation.org/ FOR MORE INFORMATION https://www.tprassociation.org/trust-portal Previous Next

Learn more about Fabrik, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Fabrik TPRM Platform Incubator Member CONTACT INFORMATION Henry Stanley CPO henry@thetrustfabrik.com Fabrik's Data Connectivity Platform makes third-party risk assessments faster by enabling real-time access to vendor security documents and monitoring data directly inside their existing TPRM platforms. This removes the need for time-consuming manual document collection and review, saving effort for both vendors and TPRM teams. Fabrik helps TPRM teams by giving them instant access to up-to-date vendor security documentation directly within their existing workflows, eliminating manual document collection and review cycles, maintaining continuous visibility into vendor security postures, and ensuring proper authorization and data access controls between platforms. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

We help regulated and high risk organizations build practical, resilient and regulator-ready Third-Party Risk Management programmes. TPRM Consulting Ltd. Website Email LinkedIn Video Fact Sheet TPRM Consulting helps regulated and high-risk organisations turn third-party risk from a compliance burden into a strategic advantage. We design and strengthen practical, regulator-ready TPRM operating models across the full supplier lifecycle: inherent-risk tiering, deep dive third party due diligence, continuous monitoring, contract assurance, remediation, reporting and controlled offboarding. Independent and technology-agnostic by design, we improve the processes and tools clients already have rather than pushing a prescribed platform. We combine deep TPRM, operational resilience and supply-chain security expertise with responsibly governed AI and automation to accelerate risk decisions, improve visibility and help leadership teams act on the risks that matter most. Presenter(s) Darryl Williamson Head of Third-Party Risk & Strategic Growth Darryl works with FinTechs and regulated firms to tackle one of today's biggest challenges: understanding and managing third-party risk. Specializing in supplier due diligence, outsourcing oversight, operational resilience, and DORA readiness, he works with organizations to strengthen supplier governance and risk management. Combining experience in private banking, business development, and transformation, Darryl brings a practical perspective that balances business agility with regulatory compliance. With a particular interest in cloud services, technology dependencies, and modern supplier ecosystems, Darryl helps organizations gain greater visibility over critical vendors, subcontractors, data flows, and concentration risk, building stronger oversight and more resilient third-party risk programmes. Denis Caragea Lead Third Party Assessments Lead: Third Party Assessments | Third-Party Risk, Supplier Oversight & Information Security Clive Besterwitch Managing Director As Founder of TPRM Consulting Ltd, Clive helps regulated and high-risk organisations design, transform and run Third Party Risk Management programmes that can stand up to regulators, boards and customers. His work spans operating model design, OSIs, policy and standards, critical supplier oversight, continuous monitoring and executive-ready reporting. Clive is pro-AI for TPRM - when it is used responsibly. That means leveraging AI to accelerate intake, due diligence and monitoring, while maintaining strong governance, auditability and alignment to regulatory expectations. Through his work and content, he shares pragmatic insight on third-party risk operating models, regulatory developments, lessons from real-world TPRM… Show More