Third Party Risk Association's
Third Party Cyber Risk Assessor (TPCRA) Certification
The TPCRA Certification is a specialized qualification that validates expertise in assessing third-party cybersecurity controls, managing cyber risk assessments, and evidencing proficiency in cybersecurity assessment techniques, as well as establishing credibility for third-party risk management professionals.

What is the TPCRA?
The TPCRA Certification is a specialized qualification designation which will:
-
Confirm your understanding & skill in the assessment of third party cyber security controls and processes.
-
Validate your competency in the creation, execution, & management of third party cyber risk assessments.
-
Authenticate & add credibility to your expertise as a third party cyber risk assessor.
Evidence your proficiency with various cyber security & information technology assessment terms & techniques.
Who is the TPCRA for?
The TPCRA is the standard of achievement for those who assess, monitor, and review third party cyber security and information technology controls, as well as identify and mitigate risk related to said controls. Such roles may include, but not be limited to:
-
Third Party Risk Management Practitioners
-
Procurement Specialist
-
Vendor Managers
-
Auditors
-
Information Security Professionals
-
Privacy or Compliance Specialists
-
Legal Professionals


"The TPCRA Certification is foundational to achieving success as a third party risk management professional."
Domains
Building Core Competencies for Lasting Professional Excellence
Cybersecurity & Third Party Risk Management Basics
Pre-Contract Due Diligence
Continuous Monitoring
Physical Validation
Disengagement Due Diligence
Cloud Due Diligence
Reporting & Analytics
Practitioner Ethics
Training Schedule
DATE | TIME | LOCATION | INSTRUCTOR | REGISTER |
---|---|---|---|---|
April 7 - 8, 2025 | 9 AM - 4 PM ET | Myrtle Beach, SC | Greg Rasner | Author of "Cybersecurity & Third-Party Risk", SVP of Cyber Third Party Risk at Truist, Educator, and Frequent Keynote Speaker | REGISTER NOW |
August 4 - 7, 2025 | 6 PM - 9 PM ET | Zoom | Greg Rasner | Author of "Cybersecurity & Third-Party Risk", SVP of Cyber Third Party Risk at Truist, Educator, and Frequent Keynote Speaker | REGISTER NOW |
September 22 - 23, 2025 | 10 AM - 5 PM ET | Zoom | Greg Rasner | Author of "Cybersecurity & Third-Party Risk", SVP of Cyber Third Party Risk at Truist, Educator, and Frequent Keynote Speaker | REGISTER NOW |
October 6 - 9, 2025 | 6 PM - 9 PM ET | Zoom | Greg Rasner | Author of "Cybersecurity & Third-Party Risk", SVP of Cyber Third Party Risk at Truist, Educator, and Frequent Keynote Speaker | REGISTER NOW |
November 17 - 18, 2025 | 10 AM - 5 PM ET | Zoom | Greg Rasner | Author of "Cybersecurity & Third-Party Risk", SVP of Cyber Third Party Risk at Truist, Educator, and Frequent Keynote Speaker | REGISTER NOW |
In-Person Training
TPRA will be offering In-Person TPCRA Training during our 2025 TPRM Conference, “Navigating Risky TPRM Waters.” This training will be held Monday, April 7 to Tuesday, April 8, 2025, from 9 AM - 4 PM Eastern. Instructions on how to sign up for In-Person TPCRA Training can be found below. For any additional questions, email Julie at julie@tprassociation.org.
1. Complete Registration & Payment for TPCRA Certification
Fill out and submit the TPCRA Registration form, select the Training or Exam & Training Bundle option, and complete payment.
2. Receive Automated Email with Instructions
Upon completing payment, you will receive an email with instructions on how to select your TPCRA training dates and times. Please select the TPCRA training in Myrtle Beach, SC.
3. Book Travel & Lodging
If needed, book your travel and lodging for In-Person Training at the Marriott Myrtle Beach Resort & Spa at Grande Dunes in Myrtle Beach, South Carolina. Book Hotel Room >