While each organization will have its own processes in place, it is a reasonable question on how and when to inform stakeholders of risk remediation plans. The key is to identify the roles that stakeholders hold in the individual process. This ...
This sounds very similar to our "partner" program. Prior to the creation of our TPRM team, there was no governance around these relationships. But now, we perform the actions Hilary called out: we have a direct contract with the partner, ...
You are facing an interesting situation. However, without knowing the details of the contract, there is a potential detail that raises a red flag. If your organization owns the customer touchpoints, you must access, process, transmit, or store ...
The following linked pdf was provided as a resource by the Third Party Risk Association (TPRA) and may be helpful. If you are not already a member of the association, you may want to consider joining under the free membership. I highly recommend. ...
I am looking for input for what others do to right size insurance requirements for vendors they do business with? What parameters do you use and how do you determine the amount of insurance coverage that you require the vendor to carry?
Join a community dedicated to an area of third-party risk including contracts, infosec, risk assessments, policies, and more.
Network with others who are running very mature or complex programs at their organizations that require a unique way of thinking.
Meet, connect, and network with other users using the same third-party risk tool as you - get support and share new ideas and best practices.
Download the latest guides, infographics, samples, whitepapers, checklists, and more that can help guide you through best practices on third party risk. Visit Resources
Register and join live webinars to learn current trends and best practices from knowledgeable experts. Free CPE eligible webinars. Register Now
Make sure to sign up to our notification list and be one of the first to know about our self-paced eLearning courses.Get Notified