Policy, Program and Procedures

We purchase insurance for our FI should I include them under our TPRM? 

This is an interesting question where I would love to hear from other members.  In my opinion, Insurance for your organization would likely not be critical or have elevated risk, but should still be within TPRM. Consider baseline Monitoring and Due-diligence efforts as you would other low risk vendors.