Third-Party Risk Management (TPRM) Service Portfolio

Our third-party risk management services include:

• Program Assessment: We assess and benchmark your TPRM program and define both strategic and tactical plans.
• Program Development: Our team builds your program by creating governance documentation that includes policy, roles and responsibilities. We develop assessment process documentation that includes risk tiers, assessment criteria, artifact requirements and due diligence assessment activities necessary for each level of risk ranking. Additionally, we establish a monitoring process that includes documentation, reporting and tracking.
• Program Support Services: Extend your team and operations with our consultants, who provide services leveraging our partner solutions that you have already acquired. With this service, we manage and conduct vendor assessment services within your platform and process.
• Managed Services: With our managed services offering, we take on the heavy burden of managing your TPRM by engaging in strategic partnerships with key solution vendors, providing service extensions of our strategic partners, ensuring continuous monitoring and delivering external score improvement services.

Program Assessment & Development: Identify/Discover

In this phase, our consultants review your policies and procedures, contract template language, Business Associate Agreements (BAA) and other applicable documents. We interview key stakeholders from your procurement, legal, Enterprise Risk Management (ERM), information security, compliance, privacy and other teams as required.

Program Assessment & Development: Design & Build/Resolve

We assess, help define and mature your current third-party (vendor) intake processes. This includes a robust review of your process owners, defined risk-tiers, artifact requirements, assessment criteria and other appropriate third-party assessment activities necessary for each level of risk ranking.