Home

I agree with Jenn. We are a highly regulated entity (U.S. community bank). I would be too burdensome for me to list every statute and regulation that might potentially apply to us and use that as a checklist. As Michael says, you should take ...

We have encountered several instances where business owners signed contracts before initial due diligence was completed and approved, and we're interested in learning how other organizations address this challenge. (We are a $2.6 billion federally ...

I think this depends on whether or not your third party is a regulated entity- many are not. If that is the case our TPRM will look to see if the functional business unit using that vendor has appropriate citations and controls that are rated ...

A regulation-by-regulation checklist per vendor isn't necessary if you do two things. First, assess compliance risk by product or service. Second, understand how the vendor participates in that product. Then, for each compliance risk in the ...

$1.9 Billion