I am very new to vendor management and have some questions I am hoping y'all may be able to provide recommendations on. I get the thought behind scoping public utility companies out of policy. What about utilities brokers? Do you have them ...
Hi. Happy to provide my perspective based upon my experience. However, it really depending on your organization's risk framework. As a best practice based on the organization's risk management policy, Internal Audit should conduct reviews ...
With the recent DEI executive order called, Ending Illegal Discrimination and Restoring Merit-Based Opportunity, some of our vendors have removed their Diversity Classification status. Our bank was required to track Diversity Classification ...
This message was posted by a user wishing to remain anonymous Is anyone adding vendors like Amazon and Office Depot to their "Not in Scope" list? For those vendors on your "Not in Scope" list: How are they being monitored? Are ...
For us, TPRM is subject to risk rating for audit frequency. Because our core banking platform is vendor hosted, some vendors house NPI, some vendors are critical to our IT infrastructure, we have joint ventures sharing customers subject to ...
This Week's Power Users
Join a community dedicated to an area of third-party risk including contracts, infosec, risk assessments, policies, and more.
Gain TPRM knowledge fast. Read through these latest blog articles.
Meet, connect, and network with other users using the same third-party risk tool as you - get support and share new ideas and best practices.
Download the latest guides, infographics, samples, whitepapers, checklists, and more that can help guide you through best practices on third party risk. Visit Resources
Register and join live webinars to learn current trends and best practices from knowledgeable experts.Register Now