Latest Discussions

  • Posted in: Contract Management

    Hi Cathy, You are correct that the SSAE 18 supersedes the SSAE 16. I keep a collection of provisions that I use as examples and should update that in my file. We often review contracts prior ...

  • Posted in: Contract Management

    Rather than insert our "Right to Audit" clause. I am going to second Heather's. Just because it says the right things. It asks for due diligence documentation up front. This is important ...

  • Posted in: Contract Management

    Thanks ever so much for sharing your "Right to Audit" clause. In my examination of the clause against our subcontract I noted that SSAE 16 (with which I was unfamiliar) says online it has ...

  • Posted in: Contract Management

    Hi Paul, Here is an example of a clause you may find helpful. Vendor Management: (a) To meet the mandates associated with third party vendors, the Client may request annually from the ...

Trending Discussions

  • Profile Picture

    Insurance coverage

    This message was posted by a user wishing to remain anonymous Good Afternoon, Looking for guidance on Insurance coverages for vendors. Currently, I am just reviewing that they have coverage ...

    1 person likes this.
  • Posted in: Risk Assessments

    Good afternoon, I am reviewing our current risk assessment questionnaire and looking for input. Our current questionnaire includes the following question: "The vendor deploys adequate accounting ...

Most Recent Announcements

  • Community Update - 1,000 Members

    Hi Everyone, I want to share some very exciting news with you all. We have reached 1,000 community members! This is a milestone we’re very proud of and it’s all thanks to the fantastic third-party risk conversations you all are having every day. As always, please let me know if you have any thoughts or feedback on ways that we can improve the community. In the meantime, here are some links ... More
  • COVID-19 Resources Page

    Hi Everyone,   With the COVID-19 pandemic upon us, organizations are implementing their pandemic plans, many employees are working remotely and changes in vendor management are rapidly occurring. In the industry, it has raised lot of questions about pandemic planning and best practices and reminds us no organization is immune to business impacting events. It’s important now more than ever to ... More

Communities Built For You


Topic Communities

Join a community dedicated to an area of third party risk including contracts, infosec, risk assessments, policies and more.


Special Interest Communities

Network with others who are running very mature or complex programs at their organizations that require a unique way of thinking. 

Product Communities

Meet, connect and network with other users using the same third party risk tool as you - get support and share new ideas and best practices.

Learning Center


Resources Library

Download the latest guides, infographics, samples, whitepapers, checklists and more that can help guide you through best practices on third party risk.

Visit Resources

Live Webinars

Register and join live webinars to learn current trends and best practices from knowledgeable experts. Free CPE eligible webinars.

Register Now

Venminder Academy

Coming in 2020! Don't miss out - make sure to sign up to our notification list and be one of the first to know about our self-paced eLearning courses.

Get Notified

Learn more about the Third Party ThinkTank Community


The professionals who take on the job of third party risk ensure the right steps are taken to protect their organizations from vendor risks and avoid costly regulatory enforcement actions. While risk comes in many forms - a good third party risk management program can help address financial, reputation, credit, operational risk and much more during the business lifecycle. 

This dedicated and free community is open to those involved in or running third party risk management programs at their organization. Inside you have the opportunity to network, share stories, ask questions, give advice and gain access to a vast library of educational content, webinars and training opportunities. 


Latest Articles

  • As we enter the fall season, and National Cybersecurity Awareness Month, make sure you stay caught up on vendor management and vendor cybersecurity news with the articles covered below.
  • We all wear masks, literally and figuratively. We wear them for fun, safety, privacy and lately we’ve been wearing them everywhere for protection, health and compliance. Some say that wearing makeup or feigning a smile is a form of wearing a mask by, in some way, showing an exterior that is slightly different than what is within.
  • Reviewing a SOC report can feel like a daunting task, especially if you’re unsure of what parts of the SOC report are considered key components, what best practices to follow, how to assess the controls, evaluate results and why vendors write the control activities the way they do. The best way to tackle such a colossal task is, of course, to start at the beginning.