Getting Started

checklist-third-party-risk-management

Third-Party Risk Management Checklist

Creating and implementing a program can be an overwhelming process. This checklist for creating and implementing a third-party risk management program is designed to help you identify, assess, manage, and mitigate third-party risks. Follow these practical steps to get your program started.  

DOWNLOAD NOW

ebook-mini-vendor-risk-management-handbook

Mini Vendor Risk Management Handbook

VRM is a complex practice that requires a thorough understanding of your organization's objectives, regulatory requirements, and vendors' business practices. It also requires ongoing effort to stay informed and manage new and evolving vendor risks. Following the tips and best practices in this mini handbook can help maintain an effective VRM program that protects your organization and customers. 
DOWNLOAD NOW

31 Third-Party Risk Management Best Practices in 2024

Third-party risk management is a constantly evolving field, as risks continue to emerge and evolve. As your third-party risk management program grows, it's important to learn recent best practices that can effectively protect your organization against third-party risk. These 31 best practices will greatly help you on your path to improved third-party risk management practices for your organization.
DOWNLOAD NOW

how-develop-third-party-risk-culture

How to Develop a Third-Party Risk Culture

With third-party risk management, the importance of a strong and proactive third-party risk culture can’t be overstated. What do organizations need to know and do to ensure they have a strong third-party risk culture? Identifying and assessing risk culture components is a good place to start. Learn more in the eBook.
DOWNLOAD NOW

infographic-what-process-vendor-risk-management

What Is the Process of Vendor Risk Management?

Vendor risk management is the process and ongoing practice of identifying, assessing, managing, and monitoring the risks posed to your organization and its customers through vendor relationships. We'll dive deeper into the process of effective vendor risk management in this infographic. 
DOWNLOAD NOW

resources-toolkit-who-responsible-third-party-risk-management.png

Who Is Responsible for Third-Party Risk Management?

Effective third-party risk management ensures that various responsibilities and requirements are distributed across a range of accountable stakeholders, each with a specific job to do. In this toolkit, explore the various roles and responsibilities involved in third-party risk management to ensure your program is effective.
DOWNLOAD NOW

resources-infographic-jump-into-vendor-risk-management

11 Things to Do Before You Jump Into Vendor Risk Management

If you haven’t already, now is the time to get on top of vendor management. Whether you are new to vendor management, or simply need a refresher, use the 11 tips in this infographic to help you prepare yourself for properly managing vendor risk.
DOWNLOAD NOW

08.02.2019-resources-choosing-the-right-third-party-operating-model.jpg

Choosing the Right Third Party Risk Operating Model

Because there's no one-size-fits all approach to vendor management, determine which model will help you reach goals. This eBook covers the approaches, differences between them and advantages and disadvantages of each.
DOWNLOAD NOW

infographic-resources-differences-vm-models.png

The Differences Between Vendor Management Models

Choosing the model for how your organization approaches vendor management is important. Find out the different models, how each model works and the advantages and disadvantages of each.
DOWNLOAD NOW

infographic-creating-vendor-risk-program-protects.jpg

Creating a VRM Program that Protects Your Organization

Managing the multi-faceted risks that vendors pose today is a daunting task. This infographic covers what to do to protect your organization’s data, 5 critical elements for your program and an overview of different lifecycle stages.
DOWNLOAD NOW

resources-ebook-how-to-engage-educate-enable-vendor-managers-png

How to Engage, Educate and Enable Your Vendor Managers

Vendor managers play a crucial role in your vendor management program. To help teams build and maintain effective and mutually beneficial relationships with their line of business vendor managers, the "three E's" come in - Engagement, Education and Enablement. Read this eBook.
DOWNLOAD NOW

resources-infographic-14-third-party-risk-management-myths-to-ditch

14 Third-Party Risk Management Myths to Ditch

In an era where you can instantly communicate with someone on the other side of the planet and find information on virtually anything, there’s a real danger of believing wrong information. We see this often and there are a few common third-party risk management misconceptions that you should make sure to ditch.

DOWNLOAD NOW

infographic-resources-bank-credit-union-what-is-vendor-management.png

Third Party Risk - What Is Vendor Management

Vendor management. Third party risk management. What does it mean? Learn how to identify vendors, essential steps of vendor management, prioritizing according to risk level and importance of fourth parties.
DOWNLOAD NOW

resources-infographic-building-effective-vm-program.png

Building an Effective Vendor Management Program

Financial, operational and reputational risks are negative exposure pain points to protect against. This infographic covers 9 steps for developing an effective vendor management program, importance of due diligence and more.
DOWNLOAD NOW

ebook_resources_guidance_tprm.png

Guidance and Regulations on Third Party Risk Management

It's good to keep an eye on the most recent and stringent guidance to meet those standards and follow best-in-class practices. Learn third party risk guidance from major regulators, key takeaways and incorporation tips.
DOWNLOAD NOW

Infographic_resources_Navigating_Your_Vendor_Management.jpg

Navigating Your Vendor Management

Navigating vendor management is filled with challenges and roadblocks. As you manage changing and emerging vendor risks, essential practices like risk assessments, due diligence, contract management, and continuous monitoring will keep you on course. This infographic will help.
DOWNLOAD NOW

infographic-6-elements-of-a-successful-vendor-risk-management-program-1.jpg

6 Elements of a Successful Vendor Risk Management Program 

Evolving vendor risks, new regulatory expectations, and dwindling budgets bring challenges to VRM programs. Maintaining a successful VRM program can feel like an uphill battle, but with the right strategy your organization can establish a set of processes and procedures to effectively manage vendor risk. Learn more in the eBook.
DOWNLOAD NOW

business-case-third-party-risk-management

A Business Case for Third-Party Risk Management

Organizations are increasingly outsourcing products and services to gain a competitive advantage. While third parties are often essential to provide certain products and services, they can also expose organizations to risky situations. This business case for third-party risk management explores why your organization should invest in third-party risk management.
DOWNLOAD NOW

Guidance on How to Master Third-Party Risk Management in 2024

The success of a third-party risk management program depends on a carefully integrated combination of rules, tools, processes, and people. If you’re struggling to figure out third-party risk management, there’s good news: there’s already a well-established roadmap. Use the third-party/vendor risk management lifecycle as your roadmap to master each activity.
DOWNLOAD NOW

how-get-buy-in-commitment-third-party-risk-management

How to Get Buy-In and Commitment for Third-Party Risk Management

It's easy to assume that everyone understands why organizations need a TPRM program, but it can be challenging to get all stakeholders to understand the need and importance. This eBook explores how you can articulate the many requirements and benefits for your stakeholders to enhance their understanding and improve their TPRM program buy-in.
DOWNLOAD NOW

how-to-use-raci-method-third-party-risk-management-responsibilities

How to Use the RACI Method to Determine Third-Party Risk Management Responsibilities

Defining roles and responsibilities for your TPRM program is an essential step. One of the most effective methods to use in this process is called RACI, which refers to identifying the individuals that are responsible, accountable, consulted, and informed for TPRM tasks. Read this infographic and use the template.
DOWNLOAD NOW

third-party-risk-management-reports-maintain

6 Third-Party Risk Management Reports to Maintain

Third-party risk management stakeholders, such as risk committees, senior leadership, and the board of directors, need high-quality reports that will support their decision-making. Use this infographic as a guideline for important data to collect and continuously update, and ensure that the appropriate stakeholders are well-informed.
DOWNLOAD NOW

Top Third-Party Risk Management Terms to Know

There are so many terms and acronyms used in third-party risk management. It can be difficult to keep everything straight. Use this glossary of the top third-party risk terms and phrases to help you be successful and to better understand third-party risk concepts.
DOWNLOAD NOW

resources-infographic-what-why-who-how-vendor-risk-management

What/Why/Who/How of Vendor Risk Management

Vendor risk management involves securing the organization's operations against avoidable interruptions, controlling costs, driving service excellence, protecting your brand and reputation, and ensuring regulatory and legal compliance. There's a lot to know to have a successful vendor risk management program. This infographic breaks down the what, why, who, and how.
DOWNLOAD NOW

resources-guide-creating-your-third-party-risk-management-program-steps

Creating Your Third-Party Risk Management Program: A Step-By-Step Guide

Have you been tasked with building a TPRM program from scratch? Developing and implementing a TPRM program requires considerable planning, coordination, and as they say, good old-fashioned hard work. Use this step-by-step guide to develop a TPRM program that meets regulatory requirements and best practices and helps your organization manage third-party risks effectively.
DOWNLOAD NOW

resources-infographic-vendor-risk-management-cheat-sheet.png

Vendor Risk Management Cheat Sheet

There are several critical elements your vendor risk management program should have that will greatly contribute to your success. Whether you're new to vendor risk management or want to take your program to the next level, this cheat sheet will help you lay the foundation.
DOWNLOAD NOW

resources-guide-essential-third-party-risk-management.png

The Essential Third-Party Risk Management Guide

Even though third-party risk management is a complex practice with many interdependent processes and stakeholders, it doesn’t have to be overwhelming and impossible. In this guide, learn essential building blocks for implementing a successful third-party risk management program.
DOWNLOAD NOW

resources-eBook-setting-expectations-third-parties-playbook

Setting Expectations with Prospective Third Parties: A Playbook for Third-Party Risk Managers

Clearly communicating and setting expectations with your third party is essential. Read the playbook specifically designed to support third-party risk management teams and third-party vendor managers.

DOWNLOAD NOW

ebook_resources_vrm_ppp.png

Guide to Your TPRM Policy, Program and Procedures

Learn the key components of your high-level third party risk management policy, comprehensive program and detailed procedures along with tips, using lines of defense strategy and best practices for using all 3.
DOWNLOAD NOW

resources-lets-solve-third-party-risk-puzzle.png

Let's Solve the Third Party Risk Management Puzzle

Put your knowledge to the test by downloading this crossword puzzle that is filled with third party risk clues and phrases. Download and test yourself, or your colleagues, to see who has learned the most about vendor risk management this year!
DOWNLOAD NOW

infographic-resources-scope-of-your-actively-managed-vendors.png

Scope of Your Actively Managed Vendors

You determine who your active third parties are? From a risk standpoint, some vendors should be managed more actively than others. Learn active and in-active examples, 5 areas to cover with actively managed ones and more.
DOWNLOAD NOW

Infographic_resources_Key_Components_of_a_Good_Vendor_Management_Program.jpg

7 Key Components of a Good Vendor Management Program

Vendor management is not an optional activity, it's required by regulation. Examiners will review your program and expect to see evidence of program maturity.
DOWNLOAD NOW

How to Manage Third-Party Risk

While you can't eliminate all the risks posed by your vendors, you can reduce them by following the steps of the TPRM lifecycle. This video will walk you through how to effectively manage third-party risk.

9 Steps to Creating an Effective Vendor Management Program

To protect your organization, you need an effective third party risk management program. Watch this 90-second video to learn 9 steps to take in order to create a third party risk program. 

Latest Discussions List

  • Profile Picture

    RE: Secure fax line options

    This message was posted by a user wishing to remain anonymous We use Concord Fax

  • Hi. We use xMedius. It is a a digital fax solution that allows users to send and receive faxes through email. It is convenient to send a fax, via email. I think it is a good solution. ------------------------------ -Nicole ------------------------ ...

  • When we got rid of fax machines, we started using Faxage.

  • Profile Picture

    Secure fax line options

    This message was posted by a user wishing to remain anonymous Hi all, we have one old school fax line left at one of our branches and it seems they fax around 10 times a month and most faxes are from the State or something for HR. I would like to ...

  • Profile Picture

    RE: Vendor Due Diligence - Alternatives

    This message was posted by a user wishing to remain anonymous P&L Statement, written statement from company with explanation as to why they don't release the statement Security testing results, a letter from their auditor or Director of IT, as ...