Hi there,
Creating these documents from scratch is indeed quite challenging. I work for a company that assists other organizations in managing their suppliers, so I can offer some guidance on common points typically found in their policies to help you begin your research:
• Analyze your supplier base to identify which vendors are strategic and which are not. This determination may depend on factors such as the amount you are paying to the vendor or the nature of the goods or services you are purchasing from them. You should request more documents from suppliers critical to your operations or from those with whom you spend a significant amount of money.
• Study the regulations applicable to the locations where most of your vendors are situated, which may vary from city to city or state to state. In Brazil, for example, there are federal rules that all companies must comply with.
• Identify the areas that will be involved in the procedure. For instance, procurement and purchasing departments may be the primary stakeholders in the process, but other departments that require goods or services will also be affected.
• Define the exceptions to the program.
I have attached some documents I found from Venminder, Cefpro, and others. I hope they prove helpful to you!
Palloma Mazzeo
linkedin.com/palloma-mazzeo
------------------------------
Palloma Mazzeo
linkedin.com/palloma-mazzeo
------------------------------
Original Message:
Sent: 04-04-2024 09:04 AM
From: Mellisa Hutchins
Subject: Third Party Risk Management Program
I am in the same boat. Been with my organization since September and building TPRM without purchasing policies and procedures. So I am doing it from nothing as well. You might join Third Party Risk Association it is free and they have a lot of questionnaires, a TPRM guidebook etc. Them and Vendminder have been very useful with resources so far.
Original Message:
Sent: 04-03-2024 09:18 AM
From: Amanda McBride
Subject: Third Party Risk Management Program
Is anyone willing to share their TPRM program? I have been asked to build one from scratch. Any templates or information as to what it should it entail would be helpful.