I think this depends on whether or not your third party is a regulated entity- many are not. If that is the case our TPRM will look to see if the functional business unit using that vendor has appropriate citations and controls that are rated ...
A regulation-by-regulation checklist per vendor isn't necessary if you do two things. First, assess compliance risk by product or service. Second, understand how the vendor participates in that product. Then, for each compliance risk in the ...
$1.9 Billion
Review your contract first. What does it say about the right to audit? I would start with that and then push back, "as we are providing you with confidential data; we need to ensure how you are safeguarding that data". Then if you can leverage ...
I am meeting with my compliance team on Friday and will bring this up. What size is your institution?
This Week's Power Users
Join a community dedicated to an area of third-party risk including contracts, infosec, risk assessments, policies, and more.
Gain TPRM knowledge fast. Read through these latest blog articles.
Meet, connect, and network with other users using the same third-party risk tool as you - get support and share new ideas and best practices.
Download the latest guides, infographics, samples, whitepapers, checklists, and more that can help guide you through best practices on third party risk. Visit Resources
Register and join live webinars to learn current trends and best practices from knowledgeable experts.Register Now