Exams or Audits

 View Only

Welcome to the Exams and Audits Community. Here you will find the latest discussions and resources that can help you in this area. Use this community to discuss best practices, trends, how to prepare, and more. Note: You will need to Sign In to join in the discussions and access resources. 

About Third-Party Risk Exams and Audits: Exams and audits have vendor management components. Understanding ways to adequately prepare for an upcoming exam or audit is critical. You must understand what the examiners and auditors expect, how to prepare documentation you’ll share with them, who should be involved, and how best to follow up on their exam findings so that the same mistake doesn’t happen again.

Latest Discussion Posts

  • Thank you Chinyere, This is very helpful for me in my role and the project, i have undertaken. More

  • Profile Picture

    RE: Auditing Regularity

    For us, TPRM is subject to risk rating for audit frequency. Because our core banking platform is vendor hosted, some vendors house NPI, some vendors are critical to our IT infrastructure, we have joint ventures sharing customers subject to BSA screening, ... More

    1 person likes this.
  • Hi. Happy to provide my perspective based upon my experience. However, it really depending on your organization's risk framework. As a best practice based on the organization's risk management policy, Internal Audit should conduct reviews of third-party ... More

    1 person likes this.
  • Can you please provide your inputs to the above question? More

  • Profile Picture

    RE: Auditing Expired contracts

    In my opinion, no. The only caveat is a recommendation to audit the exit plan and documentary evidence that supports a safe and secure exit (data, continuity, etc). More

Polls