Managing Your Supply Chain: Inside the Third Party Risk Association (TPRA)

On HITRUST Secrets, Sue Richards, Donna Nodson, and Jeff McCue welcome Julie Gaiaschi and Heather Kadavy from the Third Party Risk Association (TPRA) to discuss how third-party risk has grown with the shift to cloud and SaaS, moving from “check-the-box” compliance to true risk mitigation and operational resiliency. Julie shares TPRA’s origins as a virtual roundtable starting in 2017, its nonprofit launch in 2019, and its global membership, plus resources members requested such as templates, webinars, certifications, conferences, and industry roundtables. They recap TPRA’s virtual conference on operational resiliency and emerging risks (including AI, geopolitical risk, sanctions, governance, and N-party risk), highlight TPRA’s free 146-page TPRM 101 guidebook, maturity model, and guidance like “right to review” clauses, and preview in-person events in Fort Worth (Oct 14–15) and London (Nov 10–11). 00:00 Welcome and Introductions 00:50 How TPRA Started 02:37 Early Growth and Member Needs 03:47 TPRM Evolution and Challenges 07:19 Virtual Conference Highlights 09:06 Global Reach and Expansion 09:41 TPRM Guidebook and Maturity Model 17:02 Frameworks Evidence and AI Shift 23:51 Roundtables Councils and Trust Portals 26:51 Legal Industry Security Gap 34:57 How Programs Get Started 38:37 Membership Plans and Upcoming Events 41:47 Roundtable Format and Participation 43:48 Certifications and Training Paths 46:21 Wrap Up and Next Steps