TRAINING Securing SaaS Applications: A Comprehensive Approach to Cloud Risk Management Friday, November 6, 2026 Date & Time Friday, November 6, 2026 at 11:00:00 AM CST Intended Audience Ideal for risk management professionals, security teams, and procurement specialists. Duration 4 hrs CPE Credits 4 Fee $159 Register Event Description Ideal for risk management professionals, security teams, and procurement specialists, this training provides actionable knowledge to strengthen SaaS security practices and enhance third-party risk management strategies. SPEAKER(S) INFORMATION CPE CREDIT COURSE INSTRUCTOR Gregory Rasner Chief Executive Officer Third Party Threat Hunting Gregory is a CEO, author, educator, speaker, and leader in cybersecurity, AI, zero trust, and third-party risk. With over 25 years of experience in IT and cybersecurity, he has assisted numerous clients and organizations in improving their security posture and reducing risk exposure. Currently, he is engaged with some clients, training their AI Agents to process and analyze data as a human risk professional would do, and ensure intended outcomes with AI implementations. Gregory is also the author of four books published: His latest book, "AI & Third-Party Risk: Stragegies for Success with your AI-enabled Vendors and Partners" is due out in Jan 2026. “Cybersecurity & Third-Party Risk: Third-Party Threat Hunting” (2021) and “Zero Trust and Third-Party Risk: Reduce the Blast Radius” (2023). He has a third book out, co-authored with his wife, Maria Rasner, titled “Privileged Access Management: A Guide to Zero Trust in the Enterprise.” He is the content creator of the training and certification program “Third-Party Cyber Risk Assessor” with the Third Party Risk Association (TPRA). Recently, he launched a 4-hour certificate course with TPRA called “Securing SaaS Applications.” He has won several awards and honors for his innovation and leadership, such as the CSO40 Award and the Security Professional of the Year finalist. He is a frequent keynote speaker, panelist, blogger, podcaster, and online article writer on cybersecurity and risk management topics. He was the SVP and leader for cyber third-party risk at Truist Financial Corp, where he led a team of 20+ cyber professionals and managed the enterprise risk posed by vendors. He holds a BA from Claremont McKenna College, a master's certificate in project management from Villanova University, and multiple certifications in IT, cybersecurity, and project management. He is passionate about cybersecurity and enjoys traveling internationally with his family. Gregory's certifications: CISSP, CCNA, CIPM, ITIL The Third Party Risk Management (TPRM) Certificate Program , offered by TPRA in collaboration with our trusted partners, provides comprehensive training designed to enhance knowledge and expertise in TPRM best practices. This program features a diverse selection of courses covering critical topics in third-party risk, cloud security, AI/LLM security and risk. Participants can choose from both free and paid courses, ranging in duration from one to four hours, allowing for flexible learning tailored to individual needs and schedules. Participants will receive a certificate upon completion of the training course. Please note that this is not a certification program, nor will participants receive any professional credentials. Whether professionals are new to TPRM or looking to deepen their expertise, the program provides valuable insights and practical knowledge to strengthen risk management strategies within their organizations. Attendees will earn four (4) CPE credits upon completion of this course.

Learn more about NetRise, Inc., a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > NetRise, Inc. Risk Ratings/Intelligence Advocate Member CONTACT INFORMATION holly.tam@netrise.io gary.schwartz@netrise.io ryan.owen@netrise.io NetRise helps third‑party risk, procurement, and security teams supplement vendor questionnaires by verifying the software that vendors ship into the enterprise. By analyzing compiled code rather than source code, the NetRise platform creates a binary‑derived software asset inventory that shows what is actually installed and running in your environment. The Software Bill of Materials (SBOMs) provides a comprehensive view of risk in the devices and software you procure, allowing you to create controls and mitigate risk to improve your organization’s resilience when cybersecurity incidents inevitably occur. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES Third-Party Firmware and Application Risk Assessment Software Bill of Materials (SBOM) Generation, Validation & Assurance Application & Firmware Composition Inventory (Deep Asset Visibility) Compliance, Regulatory Alignment & Audit Support Continuous Monitoring of Vendor Software Risk Across Your Installed Software Inventory Assurance that software patches and updates don’t introduce new risk Supply-Chain Security & Vendor Assurance Workflows (Evidence and Reporting) Exploitability, Reachability & Runtime Impact Analysis Broad Platform Support (IoT, ICS, OT, Networking Infrastructure, Web and Mobile Apps, Appliances, Containers) RESOURCES FROM THIS VENDOR MEMBER NetRise - What's Inside Your Software? VENDOR MEMBER RESOURCE | January 7, 2026 Fragile by Design: Large-Scale Evidence of Software Supply Chain Risk VENDOR MEMBER RESOURCE | January 7, 2026 The Dependency Mirage: Hidden Vulnerabilities in Compiled Binaries VENDOR MEMBER RESOURCE | January 7, 2026 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

FOR IMMEDIATE RELEASE TPRA and Industry Leaders Unite to Launch the Standard Trust Portal Guidance Monday, May 4, 2026 1/1 A collaborative framework to streamline due diligence, enhance transparency, and enable AI-driven risk management. ANKENY, IOWA — 4 MAY 2026 — The Third Party Risk Association (TPRA), in partnership with ten leading third party risk management service providers, today announced the release of the Standard Trust Portal Guidance for Third Party Risk Management (TPRM). Designed to unify how organizations demonstrate security, compliance, privacy, and governance maturity, the guidance provides a standardized framework for building and managing trust portals, which are centralized hubs for evidence sharing and transparency between organizations and their third parties. “This guidance represents the collective voice of the TPRM community,” Julie Gaiaschi, CEO and Co-Founder of TPRA, said. “By coming together across the ecosystem, we’re simplifying due diligence and enabling a future where transparency replaces endless questionnaires.” The guidance aims to empower practitioners, vendors, regulators, and platform providers to align around a single, trusted model that reflects industry expectations and best practices for transparency, efficiency, and responsible evidence sharing. It also supports AI-driven TPRM technologies by standardizing evidence formats for automated review and analysis. The following organizations contributed perspectives and subject matter expertise to help shape this guidance (listed in alphabetical order): Aravo Bitsight Certa Drata ProcessUnity RiskRecon, a Mastercard Company SecurityScorecard Vanta Their collective insights reflect practical experience across third-party risk management, compliance automation, trust assurance, and practitioner due diligence. The document, created jointly by TPRA and the above-named service providers, is now available for free download at https://www.tprassociation.org/trust-portal . It is also currently open for comment . You can provide your comments using the submission form . The comment period is open from May 4 to July 3, 2026 . After the comment period has closed and comments are reviewed and incorporated into the standard, a finalized version will be released shortly after. ### The Third Party Risk Association (TPRA) is a non-profit organization dedicated to advancing the profession of third party risk management (TPRM) through collaboration, education, and community engagement. TPRA supports practitioners and organizations around the world with resources, training, and networking opportunities that strengthen risk management programs and professional development. MEDIA CONTACT Meghan Schrader Marketing & Communications Manager Third Party Risk Association (TPRA) meghan.schrader@tprassociation.org https://www.tprassociation.org/ FOR MORE INFORMATION https://www.tprassociation.org/trust-portal Previous Next

Find out what the women leaders in our community are reading, and join in for insightful advice! All Categories Previous Category Next Category Book Club Filter by Resource Type Audiobook Book Found 14 Book Becoming Bulletproof: Life Lessons from a Secret Service Agent Former Secret Service agent and star of Bravo’sSpy Games Evy Poumpouras shares lessons learned from protecting presidents, as well insights and skills from the oldest and most elite security force in the world to help you prepare for stressful situations, instantly read people, influence how you are perceived, and live a more fearless life. Becoming Bulletproof means transforming yourself into a stronger, more confident, and more powerful person. Evy Poumpouras—former Secret Service agent to three presidents and one of only five women to receive the Medal of Valor—demonstrates how we can overcome our everyday fears, have difficult conversations, know who to trust and who might not have our best interests at heart, influence situations, and prepare for the unexpected. When you have become bulletproof, you are your best, most courageous, and most powerful version of you. Poumpouras shows us that ultimately true strength is found in the mind, not the body. Courage involves facing our fears, but it is also about resilience, grit, and having a built-in BS detector and knowing how to use it. In Becoming Bulletproof, Poumpouras demonstrates how to heighten our natural instincts to employ all these qualities and move from fear to fearlessness. Check It Out Heather Kadavy Tuesday, March 12, 2024 Book Unfiltered: Proven Strategies to Start and Grow Your Business by Not Following the Rules Using personal stories that both instruct and inspire, Unfiltered shares the lessons Rachel has learned on her incredible journey from welfare to millions—and gives you a new way to think about what success can look like in your life. Check It Out Meghan Schrader Tuesday, September 20, 2022 Book The Gifts of Imperfection: 10th Anniversary Edition: Features a new foreword and brand-new tools NEW YORK TIMES BESTSELLER • This tenth-anniversary edition of the game-changing #1 New York Times bestseller features a new foreword and new tools to make the work your own. For over a decade, Brené Brown has found a special place in our hearts as a gifted mapmaker and a fellow traveler. She is both a social scientist and a kitchen-table friend whom you can always count on to tell the truth, make you laugh, and, on occasion, cry with you. And what’s now become a movement all started with The Gifts of Imperfection, which has sold more than two million copies in thirty-five different languages across the globe. What transforms this book from words on a page to effective daily practices are the ten guideposts to wholehearted living. The guideposts not only help us understand the practices that will allow us to change our lives and families, they also walk us through the unattainable and sabotaging expectations that get in the way. Brené writes, “This book is an invitation to join a wholehearted revolution. A small, quiet, grassroots movement that starts with each of us saying, ‘My story matters because I matter.’ Revolution might sound a little dramatic, but in this world, choosing authenticity and worthiness is an absolute act of resistance.” Check It Out Tijuwana Burton Tuesday, March 1, 2022 Audiobook Set Boundaries, Find Peace: A Guide to Reclaiming Yourself Healthy boundaries. We all know we should have them - in order to achieve work/life balance, cope with toxic people, and enjoy rewarding relationships with partners, friends, and family. But what do "healthy boundaries" really mean - and how can we successfully express our needs, say "no", and be assertive without offending others? Check It Out Meghan Schrader Tuesday, March 16, 2021 Book Insight: The Surprising Truth About How Others See Us, How We See Ourselves, and Why the Answers Matter More Than We Think Most people feel like they know themselves pretty well. But what if you could know yourself just a little bit better—and with this small improvement, get a big payoff…not just in your career, but in your life? Research shows that self-awareness—knowing who we are and how others see us—is the foundation for high performance, smart choices, and lasting relationships. There’s just one problem: most people don’t see themselves quite as clearly as they could. Fortunately, reveals organizational psychologist Tasha Eurich, self-awareness is a surprisingly developable skill. Integrating hundreds of studies with her own research and work in the Fortune 500 world, she shows us what it reallytakes to better understand ourselves on the inside—and how to get others to tell us the honest truth about how we come across. Through stories of people who have made dramatic gains in self-awareness, she offers surprising secrets, techniques and strategies to help you do the same—and how to use this insight to be more fulfilled, confident, and successful in life and in work. Check It Out Xylia Hall Tuesday, June 5, 2018 Book "Playing Big" by Tara Mohr Playing Big is for you if... • You feel a calling or longing to play bigger, but you feel afraid or unsure about the next right steps. • You want to make a positive difference in the world but feel held back in some way. • You feel done with striving to play big on the world’s terms – but you do want to play big according to what that truly means to you. • You wish you struggled less with fear, self-doubt, worries about what others think, or tentativeness around your ideas. • You suspect it would be a whole lot more fun to play big. Check It Out Meghan Schrader Tuesday, December 29, 2015 Book The Speed of Trust: The One Thing that Changes Everything From Stephen R. Covey's eldest son comes a revolutionary new path towards productivity and satisfaction. Trust, says Stephen M.R. Covey, is the very basis of the new global economy, and he shows how trust—and the speed at which it is established with clients, employees and constituents—is the essential ingredient for any high–performance, successful organization. For business leaders and public figures in any arena, The Speed of Trust offers an unprecedented and eminently practical look at exactly how trust functions in our every transaction and relationship—from the most personal to the broadest, most indirect interaction—and how to establish trust immediately so that you and your organization can forego the time–killing, bureaucratic check–and–balance processes so often deployed in lieu of actual trust. Check It Out Heather Kadavy Tuesday, January 6, 2009 Book "Permission to Speak" by Samara Bay Getting heard is a tricky business: It’s what you say and how you show up, filtered through your audience’s assumptions and biases—and maybe even your own. For women, people of color, immigrants, and queer folks, there’s often a dissonance between how you speak and how we collectively think powerful people should speak: like the wealthy white men who’ve historically been in charge. But, fortunately, the sound of power is changing. Check It Out Meghan Schrader Tuesday, February 7, 2023 Book Speak: Find Your Voice, Trust Your Gut, and Get from Where You Are to Where You Want to Be From Tunde Oyeneyin, the massively popular Peloton instructor, fitness star, and founder of SPEAK, comes an empowering, inspiring book about how she transformed grief, setbacks, and flaws into growth, self-confidence, and triumph—perfect for fans of Shonda Rhimes, Brene Brown, and Glennon Doyle. On any given day, thousands of devoted people clip into their bikes and have their lives changed by Tunde Oyeneyin. From her platform in a Peloton studio, she encourages riders with her trademark blend of positivity, empathy, and motivational “Tunde-isms,” to push themselves to their limits both on and off the bike. Now, fans and readers everywhere can learn about her personal journey, and discover how they too can “live a life of purpose, on purpose” with Speak, a memoir-manifesto-guide to life inspired by her immensely popular Instagram Live series of the same name. Taking us through each step of the SPEAK acronym—Surrender, Power, Empathy, Authenticity, and Knowledge—Oyeneyin shares the lessons she has learned about loss, love, body image, and how she has successfully created an intentional, joyful life for herself, offering an accessible blueprint for anyone looking to make a positive change in their lives. Check It Out Heather Kadavy Tuesday, May 3, 2022 Book Jacinda Ardern: Leading with Empathy Jacinda Ardern: Leading with Empathy carefully explores the influences - personal, social, political and emotional - that have shaped Ardern. Peace activist and journalist Supriya Vani and writer Carl A. Harte build their narrative through Vani's exclusive interviews with Ardern, as well as the prime minister's public statements and speeches and the words of those who know her. We visit the places, meet the people and understand the events that propelled the daughter of a small-town Mormon policeman to become a committed social democrat, a passionate Labour Party politician and a modern leader admired for her empathy and courage. Check It Out Heather Kadavy Tuesday, August 10, 2021 Book "Untamed" by Glennon Doyle There is a voice of longing inside each woman. We strive so mightily to be good: good partners, daughters, mothers, employees, and friends. We hope all this striving will make us feel alive. Instead, it leaves us feeling weary, stuck, overwhelmed, and underwhelmed. We look at our lives and wonder: Wasn’t it all supposed to be more beautiful than this? We quickly silence that question, telling ourselves to be grateful, hiding our discontent—even from ourselves. Check It Out Meghan Schrader Tuesday, March 10, 2020 Book I Am Malala: How One Girl Stood Up for Education and Changed the World In this New York Times bestselling memoir, Malala Yousafzai—the youngest winner of the Nobel Peace Prize—inspires young readers with her stunning story of resilience and power. I Am Malala. This is my story. Malala Yousafzai was only ten years old when the Taliban took control of her region. They said music was a crime. They said women weren't allowed to go to the market. They said girls couldn't go to school. Raised in a once-peaceful area of Pakistan transformed by terrorism, Malala was taught to stand up for what she believes. So she fought for her right to be educated. And on October 9, 2012, she nearly lost her life for the cause: She was shot point-blank while riding the bus on her way home from school. No one expected her to survive. Now Malala is an international symbol of peaceful protest and the youngest ever Nobel Peace Prize winner. In this Young Readers Edition of her bestselling memoir, reimagined specifically for a younger audience and including exclusive photos and material, we hear firsthand the remarkable story of a girl who knew from a young age that she wanted to change the world—and did. Malala's powerful story will open your eyes to another world and will make you believe in hope, truth, miracles and the possibility that one person—one young person—can inspire change in her community and beyond. Check It Out Heather Kadavy Tuesday, June 14, 2016 Book Drive: The Surprising Truth About What Motivates Us The New York Times bestseller that gives readers a paradigm-shattering new way to think about motivation from the author of When: The Scientific Secrets of Perfect Timing Most people believe that the best way to motivate is with rewards like money—the carrot-and-stick approach. That's a mistake, says Daniel H. Pink (author of To Sell Is Human: The Surprising Truth About Motivating Others). In this provocative and persuasive new book, he asserts that the secret to high performance and satisfaction-at work, at school, and at home—is the deeply human need to direct our own lives, to learn and create new things, and to do better by ourselves and our world. Drawing on four decades of scientific research on human motivation, Pink exposes the mismatch between what science knows and what business does—and how that affects every aspect of life. He examines the three elements of true motivation—autonomy, mastery, and purpose-and offers smart and surprising techniques for putting these into action in a unique book that will change how we think and transform how we live. Check It Out Rachel Curran Tuesday, April 5, 2011 Book The Platinum Rule: Discover the Four Basic Business Personalities and How They Can Lead You to Success In this entertaining and thought-provoking book, Tony Alessandra and Michael O'Connor argue that the "Golden Rule" is not always the best way to approach people. Rather, they propose the Platinum Rule: "Do unto others as "they'd" like done unto them". In other words, find out what makes people tick and go from there. Check It Out Heather Kadavy Sunday, February 1, 1998

Learn more about Supply Wisdom, a TPRA Advocate Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Supply Wisdom Risk Ratings/Intelligence Champion Member CONTACT INFORMATION Dan Boyle Global Head of Sales & Partnerships danielb@supplywisdom.com 🏆 TPRA's 2022 TPRM Service Provider Innovator Award Winner Supply Wisdom delivers real-time, continuous risk intelligence across third parties, Nth parties, and their operating locations. Its AI-driven platform provides verified alerts and predictive insights that help organizations identify emerging risks sooner, reduce exposure, and strengthen operational resilience. Supply Wisdom is the only solution offering true real-time visibility across all major risk domains: Show More TOP PRODUCT FUNCTIONALITY CATEGORIES The Supply Wisdom Difference: Continuous, human-verified intelligence across your vendors, locations, and supply chain. Core capabilities include: Continuous monitoring across 7 critical risk domains Human-verified alerts by subject-matter experts Location tagging and Nth party intelligence Built-in dashboards, APIs, and automated reports RESOURCES FROM THIS VENDOR MEMBER Understanding Digital Operational Resilience Act and Its Impact on TPRM Strategies VENDOR MEMBER RESOURCE | October 3, 2024 Insights from Supply Wisdom's 2024 Survey of Risk Professionals: Risk Management in a Technology-Driven World VENDOR MEMBER RESOURCE | July 22, 2024 Weekly Update: Global Supply Chain Disruptions - The Tigray Conflict: A Humanitarian Crisis in Ethiopia VENDOR MEMBER RESOURCE | October 30, 2023 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Supply Wisdom has once again earned a spot on the Inc. 5000 list of the fastest-growing private companies in America August 12, 2025 Supply Wisdom Announces $14 Million Funding Round and Industry Veteran Jenna Wells’s Appointment as CEO June 18, 2025 Supply Wisdom recognized as an Incredible Workplaces(™) Gold Certified organization in the Mid Sized category. January 28, 2025 ADDITIONAL OPPORTUNITIES Previous Next

Learn about Laura Valente, Director, Compliance, Ethics & Regulatory Affairs (& Chief Privacy Officer) for General Bank of Canada, and TPRA's WNTPRM May 2025 Leader Spotlight. < See All < Previous Next > Laura Valente Director, Compliance, Ethics & Regulatory Affairs (& Chief Privacy Officer) General Bank of Canada Biography Laura is the Director of Compliance, Ethics, and Regulatory Affairs (& Chief Privacy Officer) at General Bank of Canada. Bringing 10 years of experience across the banking and energy sectors, she has a proven track record in leading strategic initiatives, including the design and operationalization of Third-Party Risk Management and Regulatory Compliance frameworks, managing critical regulatory responses, and establishing key partnerships. Laura brings a global perspective from her experience working in the UK and Canada and studying in France, allowing her to tailor risk management to diverse business environments. Her work focuses on enhancing cross-functional collaboration, aligning risk management with business objectives, and fostering a culture of compliance and operational excellence. Laura is known for advancing risk management practices, driving change and her commitment to empowering others. In addition to her professional achievements, Laura is passionate about volunteering and mentoring individuals, guiding them in navigating their careers and building confidence. Leadership Characteristics Myers Briggs: INTJ Laura approaches leadership with a strategic and long-term outlook. She is detail-oriented, proactive, and committed to building strong partnerships. Her leadership style is rooted in fostering collaboration and trust, while maintaining high standards for quality and integrity in everything she does. Laura is passionate about enabling others to succeed, providing guidance and support to help her team members grow and develop their skills. She can adapt her leadership approach to meet the needs of individuals, demonstrating emotional intelligence and an ability to connect with her team on a personal level. Laura drives meaningful change by empowering her team to take ownership of their work, encouraging accountability, professional growth, and a culture of continuous improvement. Leadership Challenges As a traditional 2nd line of defense function, Risk Management is often viewed as a blocker to operations. Laura has faced the challenge of shifting the perception to Risk Management being a business enabler and strategic partner. This transformation is an ongoing journey and won’t happen overnight. Laura’s perseverance and resilience have been a key force in helping to build and maintain strong partnerships and demonstrate the value of proactive risk management. Operationalizing the TPRM program in the Bank provided a key opportunity to address this challenge. Laura used this initiative to collaborate with, train and guide stakeholders, ensuring they understood how Risk Management could support business objectives and strengthen strategic decisions. Key Take-a-ways The true value of a strong TPRM program extends beyond just mitigating threats - it lays the foundation for operational resilience and long-term success. A well-designed TPRM program helps businesses anticipate risks, adapt to change, and seize opportunities with confidence, knowing they have made well-informed decisions. Achieving this requires building strong relationships, educating stakeholders, and fostering a culture where risk is seen as a strategic partner in achieving business goals. When embedded effectively, TPRM becomes an integral part of decision-making processes, acknowledged early on rather than treated as an afterthought. Laura’s favourite aspect of TPRM is its dynamic, cross-functional nature, allowing her to collaborate with diverse teams across the entire organization. Fun Fact Laura grew up in Scotland before moving to Canada and has a passion for exploring new places and staying active. She loves road-tripping, hiking, kayaking and camping with her husband and their energetic Australian labradoodle puppy. And of course, with her personality type, she is always planning their next adventure!

Learn more about Securis360 Inc., a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Securis360 Inc. TPRM Services Incubator Member CONTACT INFORMATION Harsh Kashiparekh +1 (619) 559-3838 Securis360 Inc. is a boutique cybersecurity and data privacy compliance managament consulting firm based in Pittsburgh, PA, founded by Mr. Harsh who used to work at PwC in New York and holds a CISA certification. Our India office head Mr. Nisarg Trivedi was heading the EY practice in Ahmedabad for over7 years. Our expertise lies in SOC1/SOC2, ISO27001, GDPR, HIPAA, HITRUST, CCPA as well as Pentest, Cloud Security, Devops etc. TOP PRODUCT FUNCTIONALITY CATEGORIES GRC SOC2 ISO27001 GDPR HIPAA TPRM RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

CPE ELIGIBLE Roundtable: Strengthening Risk Terms and Third Party Accountability Thursday, October 8, 2026 Date & Time Thursday, October 8, 2026 at 10:00:00 AM CDT Intended Audience All TPRM Professionals Duration 1 hr CPE Credits 1 Fee Free Register Event Description Join us on October 8, 2026, from 10 to 11 AM CT for a roundtable focused on enhancing risk related contract terms and improving third party accountability. Discussion will cover setting clear expectations, aligning risk requirements with program needs, incorporating enforceable terms, and navigating common negotiation challenges. Show More SPEAKER(S) INFORMATION CPE CREDIT FACILITATED BY Julie Gaiaschi CEO & Co-Founder | Third Party Risk Association (TPRA) Julie Gaiaschi, CISA, CISM, is the CEO & Co-Founder of the Third Party Risk Association (TPRA). She has over 15 years of technology and information security risk experience, with the last 10 years specializing in third party risk identification and mitigation techniques. In her role as CEO, she provides strategic direction for the non-profit, whose mission it is to further the third party risk profession through knowledge sharing and networking. She also has a passion for helping others enhance their own third party risk management programs. In 2021, Julie was awarded " CEO of the Year " by Women in Governance, Risk, and Compliance. Prior to co-founding the TPRA, Julie consulted on third party risk for a large bank. She also developed and led a large health payer organization’s Third Party Security program. There, she established and executed the third party risk assessment process, which included integration into the Procurement process. Prior to her role as the leader over Third Party Security, Julie was a Senior IT Auditor. Julie resides in Iowa with her husband and two girls. She enjoys traveling and cooking. About These Meetings Monthly Member Meetings are held every second Thursday of the month. Join us for relevant and informative roundtables, panels, and/or presentations on TPRM topics and pain points our members noted within the 2025 end-of-year survey. Who Should Attend All TPRM professionals are invited to these events, including TPRA Practitioner Members, TPRA Vendor Members, and Non-members. Cancellations In the event that this session would need to be canceled, you will be contacted and invited to register for the rescheduled event. Questions & Concerns For more information regarding administrative policies such as complaints, please contact us at info@tprassociation.org . TPRA Members are eligible to receive 0.5 CPE credits for every 30 minutes of the LIVE meeting that they attend. (Ex. Attend for 30 minutes = 0.5 CPE credits. Attend for 1 hour = 1 CPE credits). CPE Credit will be issued upon completion of the post-event survey. Please allow at least one week following the event to receive your CPE certificate.

LIVE WEBINAR Women In TPRM Meeting Tuesday, October 20, 2026 Date & Time Tuesday, October 20, 2026 at 1:00:00 PM CDT Intended Audience All TPRM Professionals Duration 1 hr CPE Credits 0 Fee Free Register Event Description Join us for this empowering Women In TPRM (WnTPRM) Meeting . Discover the key to success in third-party risk management and be part of an inspiring virtual gathering. Embrace this opportunity to connect with influential women in the field, share insights, and build lasting connections. Journey to TPRM: TBD Show More SPEAKER(S) INFORMATION CPE CREDIT About These Meetings Join us for our monthly Women In TPRM (WNTPRM) meeting to hear from inspiring women about their "Journey to TPRM" as well as exciting program updates! Who Should Attend All TPRM professionals are invited to these events. This group is open to ANYONE, regardless of gender identity or TPRA membership status. Cancellations In the event that this session would need to be canceled, you will be contacted and invited to register for the rescheduled event. Questions & Concerns For more information regarding administrative policies such as complaints, please contact us at info@tprassociation.org . No CPE credits are provided for this event type.

Learn more about Ventara Risk Solutions, a TPRA Consultant Catalyst Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Ventara Risk Solutions TPRM Services Consultant Catalyst CONTACT INFORMATION Steve Alameda Managing Principal steve@ventararisksolutions.com Ventara Risk Solutions provides senior, business-aligned TPRM advisory and operating support for organizations under pressure from assessments, backlog, renewals, remediation, audit scrutiny, regulatory expectations, unclear ownership, or vendor approval friction. Ventara helps teams connect third-party oversight to material business risk, evidence sufficiency, residual-risk ownership, and decisions leadership can explain and defend. Engagements may start with practical assessment, backlog, or remediation support, but the goal is a stronger TPRM program where review depth matches business consequence and the business can stand behind its approvals, exceptions, and ongoing reliance decisions. TOP PRODUCT FUNCTIONALITY CATEGORIES Business-Risk Tiering and Intake Governance: Classify requests by revenue, operations, data exposure, access, and dependency so review effort scales to consequence. Risk Acceptability and Decision Standards: Define what is acceptable, who decides, what evidence is enough, and how exceptions are approved and time-bound. Use-Case Due Diligence and Evidence Calibration: Match evidence to the actual use case, business reliance, and risk tier rather than defaulting to generic questionnaires. Decision-Ready Approvals and Renewals: Provide practical, prioritized, and defensible approve, remediate, exception, and renewal options leaders can act on. Contract Controls and Assurance Rights: Translate requirements into enforceable terms, audit rights, assurance rights, and flow-down obligations. Material-Change and Vendor Change Governance: Identify change triggers for SaaS, AI, data-flow changes, subcontractors, and scope shifts before risk drifts between reviews. Onboarding Control Activation and Handoffs: Turn requirements into operating reality through access, configuration, ownership, evidence, and cadence setup. Monitoring and Renewal Cadence: Establish tier-based monitoring, renewal rhythm, evidence refresh, and escalation paths for relationships that matter. Remediation, Exceptions, and Closure Verification: Track remediation, verify closure evidence, define compensating controls, and time-bound exceptions. Exit Readiness and Offboarding Resilience: Reduce disruption through exit planning, access removal, transition assumptions, and data return or deletion evidence. RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next

Learn more about Coverbase, a TPRA Incubator Member, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > Coverbase TPRM Platform Incubator Member CONTACT INFORMATION Clarence Chio CEO sales@coverbase.ai Coverbase is a TPRM copilot that automates 90% of third-party risk assessments using AI. Coverbase is your mission control for automating and managing third-party risk management workflows. TPRM teams are constantly under water because of highly manual and time-consuming processes that don't accurately assess a company's risk exposure due to vendors. We help TPRM teams automate workflows so they can stay ahead of problems instead of spending all their time keeping up with risk assessments and vendor reviews. Show More TOP PRODUCT FUNCTIONALITY CATEGORIES AI Workflow Automation AI Vendor Outreach AI Risk Assessment Reviews AI Document Reviews False Positive Alert Filtering Enhanced Vendor Due Diligence Real-time Continuous Monitoring SLA Monitoring & Reporting Issue Management Reports & Dashboards RESOURCES FROM THIS VENDOR MEMBER Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES Coverbase Raises $20M To Bring AI-Enabled Security To the Forefront of Procurement November 20, 2025 ADDITIONAL OPPORTUNITIES Previous Next

Learn more about BraunWeiss Inc., a TPRA Consultant Catalyst, through this comprehension profile, including a bio, product functionality, contact info, and more. < Main Page < Previous Next > BraunWeiss Inc. TPRM Services CONTACT INFORMATION Contact us at compliance@braunweiss.net Phone: 781 489 3743 BraunWeiss is a recognized leader in Third-Party Risk Management (TPRM) services, focused on supporting small and mid-sized organizations in meeting TPRM compliance requirements. As a valued member of Third Party Risk Association (TPRA), BraunWeiss is at the forefront of transforming the outsourced TPRM services landscape while empowering organizations to proactively manage, monitor, and mitigate and fulfill their Vendor and Third-Party Risk Assessments obligations. BraunWeiss delivers comprehensive TPRM services, as “TPRM AS A Service” by leveraging decades of expertise and third-pary risk practioners with industry standard certifications (CTPRP, CTPRA, CISM, CISA, CDPSE, CRISC). By offering the specialized outsourced TPRM services, empowering organizations across diverse industries to confidently navigate the complexities of third-party relationships, safeguard their operations, and achieve regulatory compliance in an increasingly interconnected business environment. TOP PRODUCT FUNCTIONALITY CATEGORIES 1. Third-Party Risk Assessments: (On-site and Remote) BraunWeiss conducts thorough risk assessments on behalf of clients to uncover potential vulnerabilities, compliance gaps, and security risks posed by third-party relationships. These assessments are tailored to the unique requirements of each client and industry, ensuring that organizations can make informed decisions about vendor selection and ongoing management. 2. Vendor Lifecycle Management: BraunWeiss supports clients throughout the entire vendor management lifecycle, from sourcing and onboarding to ongoing monitoring and periodic reviews. This approach ensures that third-party risks are continuously evaluated and managed as business needs and regulatory landscapes evolve. 3. Regulatory Compliance Alignment: BraunWeiss assists organizations in aligning TPRM programs with leading compliance frameworks such as SOC 2, NIST, ISO, HIPAA, HITRUST and GDPR, helping clients prepare for independent audits, maintain certifications, and demonstrate robust information security practices. 4. Cybersecurity Risk Mitigation: As part of TPRM services, BraunWeiss implements effective strategies to reduce cybersecurity threats originating from third-party vendors, helping organizations protect sensitive data and maintain business continuity. RESOURCES FROM THIS VENDOR MEMBER TPRM and Compliance Slick July 2025 VENDOR MEMBER RESOURCE | July 28, 2025 10 Steps for SOC 2 Compliance Readiness VENDOR MEMBER RESOURCE | July 28, 2025 SOC 2 Compliance Readiness Services VENDOR MEMBER RESOURCE | July 28, 2025 Load More EVENTS FROM THIS VENDOR MEMBER NEWS & UPDATES ADDITIONAL OPPORTUNITIES Previous Next