Contract Management

 View Only
  • 1.  Lease Agreements

    This message was posted by a user wishing to remain anonymous
    Posted 07-16-2024 04:12 PM
    This message was posted by a user wishing to remain anonymous

    Hello all,

    We are a financial institution and have lease agreements for some of our branch and ATM locations. Within your TPRM or Vendor Management program, do you include these types of relationships as regular vendors and follow typical vendor due diligence processes? Is this a vendor you would consider out of scope or exempt from your process? Thank you.



  • 2.  RE: Lease Agreements

    Posted 07-16-2024 04:40 PM

    We have them in our system, to track the lease expiration and renewal dates, but don't typically vet them.

     

    We do, however, vet any company we contract with that comes on the premises. For example, shredding or trash companies, janitors, etc. It's mostly to ensure they have insurance.

     

    I'm still trying to figure out how to verify if a janitorial service uses ethical hiring practices and does background checks on their employees. If anyone has any suggestions on that, I'd appreciate it.

     

    Cheryl

     






  • 3.  RE: Lease Agreements

    Posted 07-16-2024 04:40 PM

    We are a credit union and we track the contracts in our TPRM software and show them as Exempt (for tracking purposes).  But are looking at other options that can be easier for all parties involved.  Hope this is helpful.



    ------------------------------
    Karen Waterman, CFSA, NCCO, NCRM, CUERME
    Enterprise Risk Director
    Nusenda Credit Union
    ------------------------------



  • 4.  RE: Lease Agreements

    This message was posted by a user wishing to remain anonymous
    Posted 07-17-2024 09:51 AM
    This message was posted by a user wishing to remain anonymous

    Our company is a registered investment adviser. We treat leases for office space (etc.) within our vendor management program because of potential access to PII, our business spaces during the work day etc. (Clean desk policy doesn't guarantee that employees keep confidential materials off their desk.) Another factor is the availability of the office space for usage-less of a factor with remote working, but still important ICO emergency situation where power is out for employees' homes but not at the workspace. (Not saying we'd force people to the office in a severe earthquake, snowstorm, hurricane etc. scenario.)

    An analogous situation is this: Does your program include the cloud service providers? Any off-site storage locations for hard copy records? Shredding companies?

    Hope this is helpful. Good luck!




  • 5.  RE: Lease Agreements

    This message was posted by a user wishing to remain anonymous
    Posted 07-17-2024 10:25 AM
    This message was posted by a user wishing to remain anonymous

    Hello,

    I'm newer to my company and am not sure the backstory but SAAS, cloud service providers, off-site storage locations for hard copy records, and Shredding companies used to be out of scope for our program. However that is no longer the case and they are now being added to our TPRM program for due diligence and tracking.