Kick off this virtual conference with a few words from Julie Gaiaschi, CEO & Co-founder of the Third Party Risk Association (TPRA).

Geopolitical events no longer impact only global enterprises—they can disrupt organizations of every size through third-party, fourth-party, and extended supplier ecosystems. From regional conflicts and trade restrictions to sanctions, cyber…

Compliance frameworks are built on an assumption that no longer holds: that adversaries need time, budget, and skill to iterate. That assumption is what's actually in the can of worms.

The TPRM landscape has become a maze of overlapping mandates, standards, and stakeholder expectations, and a checklist alone can't get you through it. Navigating this landscape requires more than a…

Turning on risk monitoring and alert feeds is easy but turning them into better decisions is harder. This session looks at how teams are selecting signals, setting thresholds, and building…

Third-party risk management was built for a slower world. Today, organizations face a growing volume of vulnerabilities, faster paths to exploitation, and an expanding attack surface that extends across vendor…

Navigating emerging supply chain risks is becoming evermore complex, particularly with events become concurrent. The tropics are expanding by 0.5 degrees each year, and new countries are being affected by…

The third-party risk function is caught between two converging threats and most programs are equipped for neither.

On one front: AI-enabled vendors deploy adaptive systems that drift, bias, and change…

Cybersecurity isn't becoming more difficult because organizations have more vendors—it's becoming more difficult because adversaries are moving faster than traditional risk management processes.

Forward-looking organizations are shifting away from static…

Take a break to enjoy some lunch before jumping back into learning with our next session staring at 1 PM CT!

A third party may remain under the same contract while quietly changing its models, data sources, subprocessors, embedded copilots, or level of automation. Those changes can materially alter your risk…

Today's TPRM programs must support resilient operations, secure IT, ethical business practices, regulatory compliance, and sustainability while navigating an increasingly interconnected risk landscape. Learn how an agile, human-centered platform provides…

With the beginning of the aggressive trade enforcement era, companies need to focus on third-party risk and sanctions enforcement. The law, the practice, and the risks are important. As we…

Dependencies on sub-contractors and upstream providers can introduce risk that is not obvious from primary contracts. This session considers how organizations are identifying and managing fourth-party and Nth-party risk in…

Third-party vendors are rapidly embedding generative and agentic AI into the services organizations already consume, often without notice and rarely within the scope of existing vendor assessments. Point-in-time questionnaires capture…

AI has produced no shortage of demos, claims, and new terminology. But after the initial wave of experimentation, TPRM teams need a more useful conversation: What is actually working? Where…

Identifying a vendor risk is only the beginning. The real test of a TPRM program is what happens next—how issues are prioritized, remediation is managed, exceptions are governed, and vendor…

We will close out this event with a few announcements and drawings for raffle prizes!