Policy, Program, and Procedures

 View Only

Welcome to the Policy, Program, and Procedures Community. Here you will find the latest discussions and resources that can help you in this area. This community focuses on creating a policy, program, and procedures; best practices; ideas; tips; guidance; how to implement; and more. Note: You will need to Sign In to join in the discussions and access resources. 

About Third-Party Risk Policy, Program, and Procedures: Successful vendor risk management requires a fully documented set of practices. Regulators and examiners expect you to have three written documents – a policy, program, and procedures. These documents must be updated at least annually or more frequently as guidance changes or significant organizational changes occur. And, it’s important the work product produced matches what the policy and program documentation says.  

Latest Discussion Posts

  • Profile Picture

    RE: Career Advice

    Hello! we have a few discussions from the past about certifications and learning resources, you can view one of them here . If you want to broaden your TPRM knowledge, check out the Education tab here in Third Party ThinkTank, we have a variety of eBooks, ... More

  • Profile Picture

    Career Advice

    This message was posted by a user wishing to remain anonymous Hey, I was wondering if this community could give me some direction in continuing my pursuit in TPRM. I am unsure of my current position at my current company due to being acquired by another ... More

  • Profile Picture

    RE: Vendor DD vs. Third Party Service Providers

    This message was posted by a user wishing to remain anonymous I totally agree with your process in principal. In practice its not always so smooth to perform due diligence and obtain required documentation on certain third party services/providers ... More

  • Profile Picture

    Third Party Inventory

    This message was posted by a user wishing to remain anonymous Has anyone worked on centralizing third-party inventory across multiple systems of record-especially in preparation for a regulatory data inventory request? How did you approach it, and what ... More

  • Profile Picture

    RE: How Are Your Organizations Adapting to AI

    This message was posted by a user wishing to remain anonymous At our mortgage brokerage, we're actively exploring how AI can support both internal operations and client-facing services. Some of our third-party vendors already leverage AI to streamline ... More

    2 people like this.

Polls