How-to Guide: Determining Third Parties or Vendors That Are In Scope and Out of Scope

While most organizations know that typical vendors, suppliers, and service providers should be included in your third-party risk management program, what about those more nuanced relationships? Should third parties such as rating agencies, insurance companies, and law firms be included?

To get the most out of your (probably limited) third-party risk management resources, you need to define which third parties are going to be included in your program, as not every third party should be included. This eBook covers general guidelines to follow when determining third parties that are in scope and out of scope.

Download the eBook to learn:

• The definition of a third party
• How to determine in- or out-of-scope third parties
• What your quality control checklist should look like
• A risk-based approach to managing third parties