Upcoming Events

This committee exchanges ideas, shares best practices, and identifies collaboration opportunities related to the TPRM needs of healthcare companies. Areas of interest include, but are not limited to, regulatory requirements, emerging technology, program governance, and procurement.

This group meets via an open forum allowing for active engagement and discussion of relevant topics. Participants examine integration, challenges, opportunities, and solutions posed by emerging technologies including Machine Learning, Artificial Intelligence, Cloud, 6G, Distributed Ledgers (Blockchain), and Cryptocurrencies.

What is the role of Third Party Risk Management during and after a widespread incident? How can TPRM programs best prepare for potential security incidents? When and how should TPRM programs conduct “ad hoc” vendor assessments? With whom should TPRM practitioners communicate during incidents? Join this webinar to explore recommended “best practices” for TPRM professionals during incident response and management situations.

The Data Governance Committee consists of members who are data owners, managers, and consumers, and other enterprise risk management and privacy professionals. The focus of this committee is to enable data-driven decision-making to address challenges specific to data protection obligations organizations encounter in managing data and compliance governance risks by communicating changes in domestic and international data regulations.

Incorporating industry standards, emerging risks, and regulations, our products are used by organizations worldwide for efficient and effective TPRM. From evaluating the maturity of an organization’s own risk management program to assessing vendors with the Standardized Information Gathering Questionnaire (SIG), learn about how our products accelerate risk management processes. (Please note this session is intended for those seeking to learn more about Shared Assessments' offerings - no CPEs offered).

Improve your readiness for the CTPRA exam by attending the CTPRA Open House, which will be led by Elizabeth Dunsmoor, TPRM Principal, Shared Assessments. This event will provide you with the chance to ask any questions related to the CTPRA course content as you prepare for the exam.

Product Development Committees ensure that Shared Assessments Third-Party Risk Management Product Suite is relevant, thorough, and responsive to a range of new and emerging U.S. and international guidelines for privacy, information (cyber) and data security, and business continuity.

This course runs October 29-30, 2024. The CTPRP designation is a professional credential designed to validate knowledge, experience, and proficiency in the design, structure, and implementation of a comprehensive Third-Party Risk Management (TPRM) Program. The program also incorporates best practices for TPRM program metrics, management reporting and evaluating the operational performance of the program. 12 Shared Assessments CPEs can be earned for completing the course.

Banish your risk management ghosts and ghouls and join the annual Shared Assessments’ 2025 TPRM Product Suite launch! Learn how our updated solutions help you ensure vendor compliance with Interagency Guidance, DORA, NIS 2, NIST CSF 2.0, and more. Preview usability upgrades that accelerate every step of the vendor risk management lifecycle.

If the recent CrowdStrike incident taught us anything it's that we need to drastically change how we assess third-party service providers in the face of emerging threats and vulnerabilities. There are too many vendors to assess, compounded by the increasing volume of threats we face each year. On a normal day, TPRM teams already have too much to do. When an incident like this occurs, they need to stop what they're doing and conduct an emergency assessment -- an ugly process that overburdens companies and their vendors, and typically takes weeks, if not months. As a result, companies may remain exposed to vulnerabilities that could eventually result in loss. But does it really have to be that way? Join third party risk experts from ProcessUnity and RiskRecon to discuss best practices and emerging technologies for: • Improving monitoring for critical vulnerabilities to determine which ones matter • Identifying, Prioritizing and Assessing affected third parties in real-time • Incorporating objective data into the decision-making processes • Streamlining workflows and scaling your operations