North America – October 27, 2026 -- Hyperproof and GRC 20/20 Research will host a webinar on November 17 at 12 PM ET / 9 AM PT arguing that third-party risk management (TPRM) programs should be measured by the risk they reduce, not by how many vendor assessments they complete.
Speakers are Michael Rasmussen of GRC 20/20 Research and David Zambrano, Director of GRC at Hyperproof. Rasmussen will present research on why vendor criticality and exposure matter more than assessment volume. Zambrano will explain how GRC teams use AI-powered assessments and a centralized system of record to measure and report vendor risk.
Completion counts fail when scoring varies and evidence goes stale
The organizers say completion counts reveal little about vendor risk posture in three situations: scoring varies by reviewer, evidence ages between review cycles, and remediation is not tracked to completion. The session will cover how to track the shift from inherent to residual risk.
Contract value is a weak proxy for vendor criticality, session argues
The agenda challenges spend-based prioritization. Vendors would instead be ranked by the data they can access and the services they support.
Standardized, AI-assisted assessments target cross-team consistency
Speakers will address how standardized, AI-assisted assessments make vendor risk comparable across teams and business units. They will also cover how continuous monitoring and remediation tracking keep risk data current between assessment cycles.
The final segment focuses on board-ready reporting: presenting TPRM as a strategic capability backed by defensible, auditable risk data.