TPRA News

 

Q3: July 2020 | Volume 1, Issue 3

Inside This Issue

  • From the CEO
  • TPRA Quick Hits
  • Upcoming Events
  • TPRA Member Spotlight
  • Post a Job With Us
  • Write the Editor & Contact Us

 

www.TPRAssociation.org 

From the CEO

Hello TPRA Members,

I hope this message finds you and your families well and you are continuing to stay healthy and safe.  It's hard to believe that half of our 2020 year is over!  While I was optimistically hoping COVID-19 would be dissipating by now, it does not feel we have had such luck.  While we are wading through the unfamiliar territory that is this year, I find hope in seeing how so many people have come together for the greater good.  My grandmother always told me that for every hard story/news broadcast heard, try to see what people are doing behind the scenes to help those affected by the hardship.  It's a great reminder we should continue to see the good in humanity.  

 

In quarter 2, the TPRA continued to focus on helping organizations navigate through the effects COVID-19 has had on our vendors.  The law firm Nyemaster presented on "Managing Third-Party Contractual Disruptions Caused by COVID-19" as well as "Responding to a Data Breach Involving Data Hosted by a Third Party" at our May meeting.  We also diverged from pandemic aftermath and focused on GDPR & CCPA from a third party risk perspective at our June meeting.  If you weren't able to attend those meetings, they are available for playback in our "Previous Meetings" site.  I'm also excited to share that our August meeting will provide a look into assessing cloud controls from a security perspective.  To register for this and any upcoming meetings, please visit our "Practitioner Member Events" page. 

 

We are also excited to share that registration is now open for our Fall Virtual Conference "Tightening Your Belt - Doing More With Less".  This event will take place on Wednesday, August 5th from 9 AM to 4:30 PM.  To review our full agenda and register, please visit our Virtual Conference homepage.  Registration is free for members and only $25 for non-members.  You will also be entered into a $25 raffle for registering.  If you opt-in to providing your information to our speakers, you will be entered into several other raffles. 

 

Last, if you have an interest in volunteering for one of TPRA's programs, please contact me at Julie@tprassociation.org. For more information on our volunteer program, please visit the "Previous Events" page and watch playback from our Volunteer Interest meeting.

 

As always, please let me know if there is anything you need and stay safe. 

~ Julie Gaiaschi, CEO & Founder

TPRA Quick Hits

 

Quickly Assess Risks with New Personal Protective Equipment (PPE) Vendors

By: Censinet

Censinet is helping healthcare organizations in dealing with fraud and scams in the supply chain for PPE. They are working help organizations evaluate supply chain risks for these non-data-related medical supplies by offering free and open access to their platform for any HCOs and government buyers.

 
Read More
 

Amazon Web Services Playbook

By: Risk Recon

Risk Recon has created a new playbook that provides a step-by-step methodology for assessing the security configurations of any AWS deployment.  It helps practitioners understand the 33 essential AWS security assessment criteria with an assessment-ready questionnaire.

 
Read More
 

HITRUST Assessment XChange

By: HITRUST

Recently, HITRUST announced that they would provide access to the "HITRUST Assessment XChange" to the healthcare industry free of charge for two years. The XChange empowers organizations around the world to gain visibility into vendor risks, including managing and maintaining risk assessment and compliance information for them in an efficient and effective manner.

 
Read More
 

Free Cybersecurity Assessments

By: Risk Recon

Risk Recon + Mastercard are offering small businesses in the US and Canada, plus organizations in the healthcare industry free free cybersecurity rating assessments through December 31, 2020.  Using safe, non-invasive techniques, RiskRecon helps hundreds of organizations better understand and act on their own enterprise and third-party cybersecurity health.

 
Read More

Upcoming Events

Fall Virtual Conference

"Tightening your Belt - Doing More With Less"

 

August 5

9:00 am - 4:30 pm CST

 
Register Here

August Practitioner 

Member Call

 

August 14

10:00 - 11:00 am CST

 
Register Here

August Focus Group Call 

TPRM 101 Guidance Build-Out

 

August 27

10:00 AM - 11:00 AM CST

 
Button

TPRA Member Spotlight

Member: Dave Pendroy

Dave is a Senior Risk Management Specialist for Principal. He is located in Monroe, Iowa and enjoys outdoors (hunting, fishing, kayaking, hiking) and spending time with my new grandson!

 

Fun fact: I’m a hometown kinda guy. My family’s roots run deep here dating back to the 1860’s. With large extended families in the area it’s not uncommon for 30 - 50 of us to get together for a cookout, monthly birthday gathering or long weekend together. Love having family and friends close!

If you would like to be a TPRA Member Spotlight, please email your bio and pic to info@tprassociation.org.

"Risk comes from not knowing which cog in your supply chain is in trouble."

- Warren Buffet

Have a third party risk-related job you would like communicate to qualified candidates?  Post it in our Practitioner Member Forums!

WRITE THE EDITOR 
Do you have a newsletter idea, want to write an article, participate in a spotlight, or provide additional newsletter content?  We would love to hear from you.  Please email the editor at info@tprassociation.org. 

CONTACT US

Third Party Risk Association P.O Box 824, Ankeny, IA 50021

www.TPRAssociation.org    info@tprassociation.org 

Visit us on the web