We explicitly made certain types of subscription services out of scope for TPRM: magazines, periodicals and education resources. The remaining subscription services we handle as in scope and base due diligence requirements on assessed operational and data risk.
Shelly Chase
Avidia Bank
------------------------------
Shelly Chase
Senior Risk Analyst Officer
------------------------------
Original Message:
Sent: 07-20-2021 03:42 PM
From: Sonali Patel
Subject: Monthly Subscription Vendors
how are usually monthly subscription vendor's contract's are managed ? meaning they are usually into low to medium risk and they usually don't have any contract other than signing up a monthly subscription as their services are needed. I wanted to ask this question in this group to find out what are the best practices to handle this types of vendors.