TPRA News

 

Q2: April 2020 | Volume 1, Issue 2

Inside This Issue

  • From the CEO
  • TPRA Quick Hits
  • Upcoming Events
  • TPRA Spotlight
  • TPRA Vendor Spotlight
  • Write the Editor & Contact Us

 

www.TPRAssociation.org 

From the CEO

Hello TPRA Members, I hope this message finds you well and you are staying healthy and safe.  This is quite the start to 2020.  I am currently working from home while homeschooling my two girls.  While I can't say it's been the easiest transition for us, we are starting to fall into a rhythm that is manageable.  I've also enjoyed spending more time with them and playing a part in their academic journeys.  It makes me all the more thankful for our teachers and the lengths they go through to make learning fun and engaging.  

 

I wanted to start this letter off by letting you know how the TPRA is responding to the COVID-19 pandemic.  While the situation is not ideal, we are diligently working to bring you resources and tools to asses vendor risks that have come along with this pandemic.  We recently held three meetings where we focused on different approaches you can take when assessing your vendors' preparedness and impact to this pandemic.  If you weren't able to attend those meetings, they are available for playback in our "Previous Meetings" site.  Please reference the March, Special COVID-19, and April member meetings.  We've also shared with you a sample questionnaire and sample communication you can leverage when requesting information from your suppliers/vendors on pandemic preparedness and impact.  You can find the documents under "Templates" within our "Information Sharing" site.  We also recently launched a Blog and are posting helpful information there as well.  Last, many of our TPRA vendor members have offered their support in the form of free tools.  You can learn more about their free services in an article below.

 

We are also making it easier for you to maintain your membership with the TPRA. Our Practitioner Membership is free to you for three months.  If you would like to renew after that time, it is only $50 for the year.  To renew, please log into your account and click "Pay Dues".  You can also log in and visit our "Join" page to purchase a new plan. 

 

We know this time is difficult for many and we want you to know that we are here for you.  If you have any questions, thoughts, or ideas, please reach out to me at Julie@tprassociation.org. 

 

Stay Safe ~ Julie Gaiaschi, CEO & Founder

TPRA Quick Hits

 

Free COVID-19 Impact Assessment

By: ARAVO

To help organizations respond quickly to Coronavirus (COVID-19), Aravo is providing free access to a limited version of their Third-Party Management Express application that incorporates a defined COVID-19 impact assessment and reporting functionality. 

 
Read More
 

Collaboration Tools Expose the Remote Office to New Vulnerabilities

By: BitSight

While these work-from-home tools connect us in our isolation, they also expose users and organizations to new cybersecurity risks. 

 
Read More
 

Pandemic Questionnaire Guidance

By: ProcessUnity

Supplemental risk assessments – like a pandemic questionnaire – can help risk management teams to quickly gain answers to critical questions about the health of third parties to aid in making the decision on where resources and focus should be directed.

 
Read More
 

Free Pandemic Assessment

By: Prevalent

Given the supply chain uncertainties related to the COVID-19 crisis, Prevalent would like to offer you access to their platform to conduct a free pandemic assessment both internally and with your critical vendors.

 
Read More

Upcoming Events

 

Q2 Special Interest Call - Healthcare &

Health Insurance

 

April 16

10:00 - 11:00 am CST

 
Register Here
 

Q2 Special Interest Call - Finance &

Insurance

 

April 16

1:00 - 2:00 pm CST

 
Register Here

Spring Virtual Conference

"Third Party Risk Pain Management"

 

April 22

9:00 am - 4:30 pm CST

 
Register Here

May Practitioner 

Member Call

 

May 14

10:00 - 11:00 am CST

 
Register Here

TPRA Member Spotlight

Member: Gina Baker

Gina is a TPRA Member and Board Member.  She currently works for Intermountain Healthcare, where she leads their Third Party Risk Assessment Program.  Prior to leading the assessments team, she worked as a clinical nurse and nurse informaticist.  

 

Gina was raised and currently resides in Utah with her husband, 2 kids and 2 dogs.  In her spare time she enjoys skiing, biking and photography. 

 

Fun fact: Gina is a nurse and has served 2 humanitarian missions in Ghana, Africa.

 

If you would like to be a TPRA Member Spotlight, please email your bio and pic to info@tprassociation.org.

TPRA Vendor Spotlight: Privva

ishan.girdhar@privva.com

(443) 800-3499

PRIVVA is a user-friendly, cloud-based vendor risk assessment platform. Privva's flexibility allows users to manage their inherent risk analysis process and external security assessments on a centralized platform. Privva allows organizations to use an existing assessment questionnaire or use integrated industry standard assessments such as the SIG, CAIQ, or CIS Top 20.

 

PRIVVA's Remediation Management tools allow clients to communicate internally and with vendors to track issues from creation through resolution. Threaded comments, categorization, and attachments also provide an auditable trail of communication to date.

 

PRIVVA’s Reporting Center provides three levels of reporting from granular level details for Infosec and TPRM teams to management reports and high level Board reports. The platform supports data exports to Excel as well as integrations with external systems such as contract management or GRCs via a full-suite of APIs.

 

We adapt our engagements to best suit your needs and resources. Whether you have an internal team and want to enhance your process using Privva's platform or need Managed Services where Privva acts as an extension of your team we can work with your organization as a true partner.

 

Fun Fact: Privva VRM platform is available in French, Spanish, German, and Dutch. They also offer SIG Lite in these same languages.

 

UPCOMING WEBINAR - "Client Case Study - Learn How Mindbody and Privva Partnered to Develop a Leading Vendor Risk Management Program" - Presented by Mindbody’s Kristen Deuel and Privva’s CEO, Ishan Girdhar.  From managing the inherent risk analysis to remediation management, Mindbody’s program has realized a 600% increase in throughput of vendors assessed by streamlining both the administration process and response-side for vendors.

Register Here to Join Privva on May 7th.

"It does not do to leave a live dragon out of your calculations, if you live near one."

- J.R.R. Tolkien

WRITE THE EDITOR 
Do you have a newsletter idea, want to write an article, participate in a spotlight, or provide additional newsletter content?  We would love to hear from you.  Please email the editor at info@tprassociation.org. 

CONTACT US

Third Party Risk Association P.O Box 824, Ankeny, IA 50021

www.TPRAssociation.org    info@tprassociation.org 

Visit us on the web