Policy, Program, and Procedures

 View Only

Welcome to the Policy, Program, and Procedures Community. Here you will find the latest discussions and resources that can help you in this area. This community focuses on creating a policy, program, and procedures; best practices; ideas; tips; guidance; how to implement; and more. Note: You will need to Sign In to join in the discussions and access resources. 

About Third-Party Risk Policy, Program, and Procedures: Successful vendor risk management requires a fully documented set of practices. Regulators and examiners expect you to have three written documents – a policy, program, and procedures. These documents must be updated at least annually or more frequently as guidance changes or significant organizational changes occur. And, it’s important the work product produced matches what the policy and program documentation says.  

Latest Discussion Posts

  • Profile Picture

    RE: Individual Physician Consultant

    By: Vickie McGregor , 10 days ago

    Are individual practitioners considered third parties subject to your TPRM policy? Yes Do they undergo the same risk assessment and due diligence process as traditional vendors? No If not, do you have an alternative assessment approach ... More

  • Profile Picture

    Individual Physician Consultant

    By: Anonymous Member , 17 days ago

    This message was posted by a user wishing to remain anonymous How does your organization handle individual medical professionals (e.g., physicians, medical consultants, peer reviewers) who perform underwriting or claim-related reviews and require ... More

  • Profile Picture

    TPRM Staffing Structure

    By: Anonymous Member , 2 months ago

    This message was posted by a user wishing to remain anonymous I'm researching how credit unions structure leadership over Vendor Management and Third-Party Risk Management programs. For those willing to share: What is your credit union's asset ... More

    1 person likes this.
  • Profile Picture

    Push Notifications Marketing

    By: Steven Farhat , 3 months ago

    Are any credit unions currently using push notifications for marketing purposes within their mobile apps? If so, could you share how you distinguish between marketing and transactional/service-related messages, including how consent is obtained and managed ... More

  • Profile Picture

    Job Description

    By: Ginger Gilbert , 4 months ago

    Hi all – As a Vendor Management function led by a department of one, I'm working to better define roles and responsibilities as the program continues to mature. If anyone is open to sharing sample job descriptions for vendor management or third-party ... More

    2 people like this.

Polls

Most Active Users List