Resource Library

Infographics

Learn more about the specific differences between high-risk and critical vendors with this helpful infographic.

high risk vendor, critical vendor, differences between high risk critical vendors

Infographics

Third-party risk management is becoming a larger focus area, not only for the OCC, but also for other regulators across the financial industry. Reading and understanding these regulations can help strengthen your compliance program and ensure it's headed in the right direction.

OCC exam priorities, examination priorities, regulatory exam, vendor exam, occ regulations, occ priorities

Infographics

As you review the cybersecurity information provided, you'll notice that vendors often have a wide assortment of cybersecurity documents available. To help, this infographic breaks down the types of evidence to collect from vendors.

vendor cybersecurity, cybersecurity documents, document collection, vendor cybersecurity documents

Infographics

Your organization is solely responsible for implementing CUECs, and failing to do so means your organization isn’t protected from known vendor risks. By identifying, reviewing, and mapping vendor CUECs, your organization can ensure the right controls are implemented.

vendor cuecs, soc report cuecs, complementary user entity controls, mapping cuecs, vendor soc controls,

Infographics

As cybersecurity risk continues to evolve it's getting more challenging to identify and manage. Learn next steps to address a vendor's poor cybersecurity practices in this infographic.

poor cybersecurity practices, cybersecurity red flags, vendor cybersecurity risk, cybersecurity practices

Infographics

This infographic breaks down the elements you should look for in vendor business continuity and disaster recovery plans.

bdcr, bcdr plans, bcp, drp, business continuity management, business impact analysis

Infographics

Lack of preparation in advance of the contract end date leaves little time for negotiation or modification. Mid-term contract reviews are effective to ensure your vendors continue to deliver products and services as expected.

vendor contract management, contract assessment, mid-term agreement, vendor agreement

Infographics

Incorporate sound contract compliance techniques to lessen exposure to vendor risk and improve contract management practices. Use these techniques to help you with the process.

contract negotiation, contracts, vendor contract compliance, vendor contracting, contract management

Infographics

Download the infographic to learn the definitions of each type of SOC report and how they can benefit your organization.

information security, soc report, vendor soc, vendor soc 1, vendor soc 2, vendor soc 3

Infographics

Vendor data breaches can range in severity, from minor incidents to significant events that create operational failures and require public disclosure. Protect your organization by learning about the different categories and types of vendor data breaches.

vendor breach, data breach, types of data breaches, tips to prevent breaches, breach, third-party breach

Infographics

There are many consequences that can arise from a vendor’s poor financial performance. In this infographic learn strategies and tips to help your organization use relevant contract language and SLAs to address a vendor’s poor financial health.

poor vendor performance, vendor financial performance, SLA, vendor contracts, service level agreements, track vendor financial health

Infographics

Managing vendor risks is crucial to the success of any business. It requires identifying all potential risk associated with products and services provided by a vendor. Learn the steps to complete the vendor risk assessment process in this infographic.

vendor risk, vendor profiling, questionnaires, risk assessment process, assessing vendors

Infographics

Vendor due diligence is one of the most vital activities within third-party risk management. But, it's not always clear when and how often vendor due diligence should be done. By following these recommended guidelines for the frequency of due diligence, you can ensure your time and efforts are well spent.

vendor due diligence process, perform due diligence, perform vendor due diligence, when to perform due diligence, how often perform due diligence

Infographics

One of the first activities in the third-party risk management lifecycle is completing an inherent risk assessment. This process identifies the different types and levels of inherent risk, which occur naturally within the vendor’s product or service. Learn the steps to complete an inherent risk assessment in this infographic.

vendor inherent risk, risk assessment process, vendor risk assessments, how to complete risk assessments, due diligence

Infographics

Maintaining regulatory compliance with third-party vendors can be challenging, especially when it comes to cybersecurity guidance and state privacy laws. Learn key cybersecurity regulations and tips to strengthen compliance in this infographic.

vendor cybersecurity, cybersecurity preparation, preparing for cybersecurity regulations, state privacy laws

Infographics

Cybersecurity threats will always exist, but maintaining regulatory compliance can help your organization prevent and respond to events more effectively. Learn who must comply with 23 NYCRR 500, highlights of the regulation, and more.

regulatory compliance, guidance

Infographics

Keeping your eye on any negative news or adverse media on a third-party vendor is necessary for any organization that wants to safeguard its reputation. Learn examples of adverse media, tips to monitor adverse media, and more.

negative news, reputation risk, vendor reputation, adverse media screening, screening news, safeguard your reputation

Infographics

Understanding how to maximize your TPRM resources will take some effort, but it's a worthwhile goal to help your organization manage risk, regardless of limitations. This informative infographic covers how to maximize your resources.

maximize resources, tprm resources, manage resources, vendor management resources, tprm processes

Infographics

Reviewing a vendor's business continuity and disaster recovery plans is an essential step in your due diligence process. A weak finding as you assess plans should be concerning, as this can expose your organization to significant risks. Learn more in the infographic.

business continuity testing, bcp, business continuity planning, weak bc/dr plans, weak business continuity, vendor business continuity, vendor disaster recovery

Infographics

Effective vendor contract management has many benefits that all organizations can experience, including potential cost savings and safer third-party vendor relationships. Learn effective contract management practices in the infographic.

vendor contract management, vendor contract risk, contract management risk, vendor contracts, contract risk, effective contract management, contract management practices

Infographics

By monitoring vendor privacy scores as part of your vendor risk management program, you can mitigate potential risks associated with third parties more effectively. Download this infographic to learn what vendor privacy scores are and more.

privacy scoring, vendor privacy, vendor privacy scores, how to use privacy scores, manage vendor risk, risk mitigation

Infographics

Without the right documents, your vendor risk assessment can't be completed correctly, if at all. In this infographic, learn best practices and tips to improve document collection efficiency.

document collection, vendor due diligence, due diligence, vendor documents, documents

Infographics

Having an effective planning process will justify the need, cost, and benefits of a vendor relationship and start your onboarding process on the right foot.

onboarding a vendor, planning onboarding, planning steps,

Infographics

For the vendor performance management process to be effective, organizations must think carefully and plan ahead. An effective process helps reduce costs, enhance customer satisfaction, mitigate risks, and more.

vendor performance, performance management, performance process, vendor performance process, managing vendor performance, performance questions

Infographics

The program document answers the "how" of each third-party risk management activity. In this infographic, learn how to write an effective third-party risk management program document.

third-party program document, write policy and program, program writing, program document, write third-party risk management program document

Infographics

Third-party compliance risk can be one of the more challenging areas to manage, but it's necessary to protect your organization from significant consequences. Use the 6 techniques covered in this infographic.

compliance management, vendor compliance, third-party compliance, manage compliance risk, manage vendor compliance

Infographics

When you learn the key steps, building a vendor risk management program doesn't have to be an overwhelming task. Organizations of all sizes can build a program that will satisfy regulators and manage vendor risk.

vendor management, effective vendor risk management program, program building, building a program, vendor risk management program

Infographics

While there are many benefits of BaaS, these services come with risks on both sides of the partnerships. It’s crucial to identify and assess the associated risks and the measures banks and non-bank entities can take to manage them effectively.

banking as a service risk, banking as a service partnerships, banking as a service vendors, baas vendor partnerships, baas vendor relationship, banking as a service

Infographics

Defining the roles and responsibilities within your TPRM program is crucial for success. Learn how to implement the RACI method with this infographic and customizable template.

raci method, roles and responsibilities, tprm roles, tprm responsibilities, organizational structure

Infographics

This infographic covers why the board and senior management should set the "tone-from-the-top", responsibility guidelines, and tips to help you gain support.

Organizational buy-in, vendor owners, vendor managers, board of directors, reporting, data

Infographics

If your organization doesn't have the right vendor risk management practices, your organization's and customers' data is at risk. To protect data, you must understand how your vendors plan to use it and safeguard it.

data privacy, cybersecurity, information security, lines of defense, third-party risk management lifecycle, documenting, reporting

Infographics

An effective third-party risk management program provides many strategic advantages to an organization. One obvious benefit is meeting regulatory requirements, but there's a much broader range of benefits.

SLA, service level agreement, operational advantages, outsourcing

Infographics

While technology sophistication is growing, so are the capabilities of hackers. Use this infographic to learn how to build a solid defense against cybersecurity risks.

data breach, information security

Infographics

While all are important, there are differences to be aware of between questionnaires, risk assessments, due diligence, and continuous monitoring.

ongoing monitoring, risk re-assessments, vendor offboarding, third-party risk management lifecycle

Infographics

Some healthcare organizations will accept an independent audit report in lieu of a vendor completing an assessment questionnaire. In this infographic learn what to look for in a vendor's SOC 2 Type II audit report and key elements to review.

risk posture, risk assessment, audit report, cybersecurity, PHI, protected health information, healthcare due diligence

Infographics

What do you do if a vendor's SOC report is filled with issues? Use this infographic as a guide to determine how to proceed with the vendor, whether that's addressing the issues or passing on the vendor relationship.

cybersecurity, due diligence, regulatory audit, vendor offboarding, controls

Infographics

Use this infographic as a guideline for important data to collect and continuously update. Ensure that the appropriate stakeholders are well-informed to drive action in your third-party risk management program.

document collection, risk assessment, ongoing monitoring, issue management, Inventory

Infographics

By understanding your vendor's cybersecurity posture and doing the appropriate steps to prevent risk, you can reduce the chances of your healthcare third parties compromising you.

inherent risk, due diligence, information security, infosec, controls, HITRUST, data breach

Infographics

Risk-based vendor due diligence can save your organization valuable time and resources. In this infographic learn what vendor risk-based due diligence is and why it matters

Vendor due diligence, risk-based due diligence, level of risk, due diligence frequency

Infographics

For a third-party risk assessment to be effective, you must know what kind of data they can access within your network and what kind of data they will access, process, transmit, or store on their networks. Learn more in the infographic.

vendor risk assessment, healthcare risk assessment, healthcare vendor management, healthcare vendor

Infographics

Successful TPRM programs should involve key metrics that evaluate a vendor's health and stability. To help you better understand how to develop key metrics for your TPRM program, we've created this informative infographic.

key metrics, KPIs, third-party risk metrics, develop metrics

Infographics

Identifying critical vendors is a necessary process that drives many TPRM activities. In this infographic, learn how to identify which vendors are critical to your organization.

high risk, identifying critical vendor, critical vendor overview, high risk vendor

Infographics

There's a lot to know to have a successful vendor risk management program. This infographic breaks down the what, why, who, and how to help. 

risk management, involved in vendor management, third-party risk management, vendor risk management basics, beginner vendor management

Infographics

What is vendor management and where to start, what you should know to mitigate risk, vendor lifecycle stages, who's responsible for what in a typical lifecycle and useful links and resources.

third-party risk management, to-do list, vendor management

Infographics

Vendor risks are always present. Although you can't eliminate the vendor's inherent risk you can lessen the likelihood by identifying and implementing controls. In this infographic, learn the process of inherent to residual vendor risk.

inherent vendor risk, residual vendor risk, inherent to residual risk process

Infographics

In order to properly manage your vendors' associated risk, you need to thoroughly understand your organization’s vendor risk appetite statement. Use this infographic to help.

third-party risk management, vendor risk appetite, risk appetite statement, vendor risk

Infographics

Establishing clear expectations with your vendor from the earliest stages of entering a relationship is important. There are two clauses that are essential, learn more about them in this infographic.

right to audit, cybersecurity, information security, data protection, data breaches, vendor management

Infographics

The truth is that a good third-party risk management program can be a valuable strategic asset. However, it's sometimes necessary to push your organization to ensure that you have a sufficient third-party risk budget. Learn more in the infographic.

vendor management budget, TPRM budget, budget, vendor manager budget

Infographics

Vendor risk management is a best practice, and, for many organizations, it's also a regulatory requirement. Dive deeper into the process of vendor risk management in this infographic.

vendor management process, vendor risk, risk management process,

Infographics

Understanding what subservices (fourth parties) your vendors use is important. This infographic outlines how to review your subservice organizations within SOC reports.

subservice organizations, fourth-party vendor, reviewing SOC reports, vendor SOC report

Infographics

When managing vendor risk, many mistakenly consider critical and high risk synonymous, but they are not. There's an important difference between these terms and how they should be applied. Learn more in this infographic.

risk ratings, vendor criticality, high-risk vendor, vendor risk

Infographics

Your contract and due diligence processes requires a unique focus when working with an international vendor. Use this infographic to help.

due diligence, contract management, overseas, international vendors, international vendor management

Infographics

No single financial statement will provide a full picture of a vendor's financial health. There are three statements that should be analyzed together to better understand financial risks posed.

financial statements, vendor financial health, financial performance, vendor financial statements

Infographics

Measuring a vendor's performance is a necessary process that ensures the engagement continues to be beneficial. Also, helps protect your organization's reputation and ensures any issues are identified and addressed quickly.

measure vendor performance, vendor performance management, ways to measure, performance management

Infographics

Knowing the risk your vendor brings to your organization is crucial. But, do you know and understand the risk categories or types to be reviewing and monitoring? Take the quiz to test how much you know!

quiz, risk categories, vendor management risk, vendor risk, third-party risk quiz

Infographics

The healthcare industry practices proactive care, this same concept can be done for managing its third-party risks. Learn the importance for proactive vendor risk management in healthcare in this infographic.

healthcare, proactive care, proactive vendor risk management, vendor management, vendor risk, hipaa

Infographics

Outsourcing a product or service to a vendor is a standard business strategy that can provide many benefits. Ensure you know these 6 vendor risk categories and common red flags.

red flags, outsourcing, risk categories, vendor management categories, vendor risk

Infographics

Are you prepared to handle it when your vendor suffers a data breach? Cyber attacks have become a normal part of daily routine. Learn what to do.

vendor data breach, suffered data breach, vendor data breach next steps, cyber attack next steps

Infographics

Although you don't have direct contact with your fourth parties, it's essential to understand how your third-party vendors manage their risk. Use this helpful infographic when discussing fourth-party due diligence with your vendors.

vendor relationship, vendor risk, vendor management, fourth-party risk

Infographics

Your critical vendors provide products or services that your organization is highly dependent on. Learn the questions you can ask to determine if a vendor is critical or non-critical in this infographic.

high-risk vendor, vendor management, vendor risk, third-party vendor

Infographics

You should partner with a vendor who meets your organization’s expectations. Download this infographic for signs that it is time to end your vendor relationship.

vendor relationship, vendor management, third-party risk management, vendor profiling

Infographics

Better understand when to start your due diligence, what to do if you can't get a document, why you need a good working relationship with your lines of business.

vendor management, third-party risk, document collection

Infographics

All vendor relationships have inherent risks. If you choose to work with the vendor, you'll need different techniques to handle the risk. This infographic covers three risk handling techniques known as mitigation, transference and acceptance.

inherent risk, vendor relationship, vendor management

Infographics

Third-party risk management is no exception, and as a practice, has steadily changed its tune over the past few decades. Explore the advances in third-party risk management in this infographic.

vendor management evolution, vendor lifecycle, industry change

Infographics

Well-written contracts are the foundation of the relationship between your organization and your vendor. Download this infographic to learn 5 reasons you should renegotiate vendor contracts.

vendor contract management, addendum, vendor relationship

Infographics

Don't let your vendors scare you this Halloween. Discover risky vendor situations that should be laid to rest in the third-party risk management cemetery in this infographic.

vendor management, vendor behavior, critical vendor, third-party risk management

Infographics

Your third parties should be ranked as critical or non-critical for business disruption. This infographic outlines 10 general items that are needed to be on file for critical vendors.

vendor management, vendor risk, critical vendor management, due diligence, due diligence items to review

Infographics

This infographic breaks down four key areas to pay attention to regarding vendor cybersecurity that will help you prepare your organization.

cybersecurity areas, vendor risk, vendor management

Infographics

Performing risk assessments may seem daunting, but are a worthwhile investment. Download this infographic to learn the tried-and-true steps to complete a vendor risk assessment.

vendor risk assessment, risk assessment, how-to, TPRM, vendor risk, risk management, vendor risk management, assessments, third-party risk

Infographics

Learn how to maximize value, cost, quality, day-to-day advantages and more. Download this infographic to understand the strategic advantages of doing TPRM.

Third-party risk management, cost advantage, quality advantage, maximize benefits, vendor management

Infographics

Well-written business continuity and disaster recovery plans are important. Ensure your critical vendors are accounted for in your plans. Download the infographic to learn how.

third-party risk management, critical vendor management, continuity planning

Infographics

Learn examples of fourth-party related clauses and how to write these requirements into your vendor contracts.

third-party risk management, due diligence, contract management, fourth parties, requirements

Infographics

Learn the most common myths of third-party risk management and learn the truth about the misconceptions in this infographic.

due diligence, vendor management, vendor risk

Infographics

Download the infographic to learn the next steps to take that enhance your organizations internal processes and procedures.

financial risk, financial assessment

Infographics

This infographic will breakdown what you need to be looking for in your vendor's pandemic plan to keep your employees and customers safe.

business continuity, disaster recovery, pandemic planning, due diligence

Infographics

Learn 6 best practices you need to do when measuring, assessing and planning vendor management processes in the new year.

Infographics

If you don’t have an adequate plan to properly manage your vendor’s risk, then your organization could be another scary statistic. Learn how to stay safe.

data breach, information security, data breach statistics

Infographics

To help fintechs win points with your clients, use this infographic that covers what you need to know about the changing vendor management expectations.

third-party risk management

Infographics

Use this quick, but comprehensive, guide to help mitigate fourth-party risk.

Infographics

To make sure both your organization and your vendors are on the same page, follow the best practices covered in this infographic.

contract management, contract negotiation, contracts

Infographics

This infographic will walk you through key best practices and a process that will help you mitigate some of the risks of dealing with issues with your vendors.

issue management, vendor issues, vendor issue management

Infographics

When it comes to vendor risk assessments, the process can seem overwhelming. This infographic helps you determine your vendor's risk rating.

rate vendor risk, risk rating, vendor risk ratings

Infographics

Looking for ways to improve your program in light of the recent pandemic? This infographic breaks down what you need to know.

covid 19, third-party risk management covid, covid 19 tprm, pandemic third-party risk management

Infographics

With COVID-19 impacting many vendors' businesses, use this infographic to help you prepare for the aftermath.

Infographics

Do you know what steps to take after the vendor management exam concludes? This infographic breaks down the main areas that you should focus on.

examinations, vendor management exam, vendor exams

Infographics

You must maintain proper vendor oversight, especially in today's changing environment. Download this infographic that breaks down how to handle the process efficiently.

ongoing monitoring, oversight, due diligence, vendor oversight tips

Infographics

Use the 11 tips in this infographic to help you prepare yourself for properly managing vendor risk.

third-party risk, third-party risk management, vendor management

Infographics

Is your vendor’s financial performance declining? To protect your organization there are some warning signs to look out for. Be aware of what the consequences are and your steps for recourse.

oversight, ongoing monitoring

Infographics

These COVID-19 vendor management best practices will help you with current challenges.

third-party risk best practices

Infographics

Communication and collaboration are key in implementing a risk assessment process. Download this infographic for how to collaborate during the process.

vendor risk assessments, risk assessments, collaborate vendor risk assessment process

Infographics

Due diligence is an important step in vendor management, so cutting corners can be dangerous. Learn what could go wrong with a check-the-box approach.

Infographics

To help you with the due diligence and vendor oversight stages of the third-party risk process, use this infographic to help walk you through what you need to know.

ongoing monitoring

Infographics

Understand why the risk your third parties pose to you is important to your financial institution clients. Download the infographic.

fintech provider, financial institution

Infographics

What fintech companies need to know about third-party risk management, regulations and 4 tips to meet regulator and client expectations.

tprm practices, fintech tprm, fintech best practices, best practices for tprm, fintech tprm practices

Infographics

You need to focus on oversight and ongoing monitoring of your vendors before and after you sign the contract using the 6 ways to improve your process.

Infographics

This useful infographic that will walk you through what to negotiate into a contract for third-party management.

Infographics

In this infographic, dive into the negotiation component and ensure maximum value from your outsourced relationship.

Infographics

Improve your vendor due diligence process, with this informative infographic that covers specific strategies that you can use to protect your organization.

Infographics

To help you and your team succeed in your vendor management, we’ve put together an infographic on the top 10 best practices that every good vendor manager should follow.

Infographics

Risk assessments are vital to the success of an organization’s vendor management program as you delve further into any risks vendors pose. This infographic shows you the what, why, when, who and where of them.

Infographics

Having a strong vendor risk management program is a great way to protect you and your customers. This infographic covers how to create a program.

Infographics

Is there a way to know if you have “dirty” vendors who could use some dusting off? Ensure you know everything important and what steps to take to help you spring clean your vendors.

Infographics

Do you know who your fourth parties are? This infographic will help get you started with the when and how of identifying your fourth-party vendors.

fourth-party management, fourth-party vendors, fourth-party vendor risk

Infographics

What is inherent risk and how to determine it, why residual risk is never higher than inherent risk and 4 important tips to follow.

inherent vendor risk, residual vendor risk, inherent vs residual risk

Infographics

Evaluating your vendor's regulatory risks ahead of time can help you avoid some very costly surprises down the road. Use this infographic to see how to rate your vendor's regulatory risks.

regulatory risk, vendor regulatory risk, rate vendor risk, rate vendor regulatory risks

Infographics

Put your knowledge to the test by downloading this crossword puzzle that is filled with third-party risk clues and phrases.

Infographics

It's easy to get so involved with vendor management that you miss basic, but key, items. Find out what the top 25 errors are to avoid in your vendor management program in 2019.

risk management errors, how to avoid vrm errors, vendor risk management, third-party risk errors

Infographics

This infographic will guide you through what you need to know about UDAAP and add clarity to what to do as it relates to your vendors.

udaap, vendors udaap, udaap vendors, what is udaap

Infographics

With the increase in regulatory demands, it's crucial to be as efficient as possible. Take the right steps to increase efficiency - we have 8.

third-party risk efficiency, improve third-party risk management, vendor management improvement, program improvement

Infographics

Be prepared for when your vendor experiences a data breach by doing these 10 best practices. Hackers do not discriminate when looking for an asset to attack.

handle vendor data breach, vendor data breach, how to handle vendor data breach, vendor data breach best practices

Infographics

Follow these basic dos and don'ts of vendor contract risk management. There are steps to take, 8 additional tips to help mitigate vendor risk and 5 huge mistakes to avoid.

vendor contract, contract management, vendor contract management process

Infographics

Could your vendors be your weak link? To learn how to protect your organization from third-party vendor cyber risk, our infographic covers 7 key steps to follow.

cybersecurity, information security, rising vendor risk

Infographics

Fourth parties are just as important as third parties. They can have access to your confidential information and thus you must make sure you do proper oversight and effort with these companies.

fourth-party vendor, fourth-party vendor oversight, vendor oversight

Infographics

Whether negotiating a new vendor relationship or renewing an existing one, learn how to develop a contract that clearly defines expectations and responsibilities of the vendor, tips and best practices.

vendor contract, contract management, sign vendor contract

Infographics

Learn what to include, reasons why you'd need multiple assessments, an example and 3 best practices.

assess vendors, product level assessment, how to assess vendors

Infographics

Take a look at what we consider to be 24 of the current best practices to minimize vendor risk and ensure your org is a top performer in TPRM.

minimize vendor risk, how to minimize vendor risk, best practices to mitigate risk, mitigate vendor risk

Infographics

Ensuring that your vendors are meeting their regulatory exam expectations is a key part of vendor risk management. Download this infographic now to learn about managing and mitigating compliance risk.

vendor compliance, know your vendor

Infographics

When and how to request a SOC for Cybersecurity, what it includes and differences between a SOC 2 vs. a SOC for Cybersecurity. Mitigate cybersecurity risk now.

vendor soc report, soc for cybersecurity, cybersecurity soc report

Infographics

What the SLA should state, opportunities provided by SLAs to your organization, negotiating service levels, the 8 elements a model SLA should include, best practices and more.

exit strategy, get out of vendor contract, vendor contracts, contract management

Infographics

On-site visits are an important part of vendor due diligence. While the vendor types which warrant one will vary, these tried and true best practices remain the same.

vendor on-site visits, best practices site visits

Infographics

A third-party information security assessment is an integral part of judging a vendor's risk level. Learn 3 core principles, key regulatory guidance, why use one and 3 questions to ask.

cybersecurity, information security assessments, what are infosec assessments, infosec assessments

Infographics

When you understand why vendor due diligence reviews are necessary, it’s easier to see the increased benefits and make due diligence a priority. Download this vendor management infographic where we'll further explain why.

vendor due diligence, why do we do vendor due diligence, conduct vendor due diligence, how to conduct vendor due diligence

Infographics

Learn what is a critical vendor, how to identify your critical vendors, examples of critical vendors and best practices to monitor for proper third-party risk management.

risk assessments, critical vendor, identify critical vendor

Infographics

How to assess vendor financial risk. Failing to do so can be detrimental to not only your third-party risk management program, but may have direct implications on how you operate your business.

vendor financial risk, assess financial risk, vendor financials, vendor financial risk assessment

Infographics

Be prepared to comply with the General Data Protection Regulation (GDPR) - it impacts EU and U.S. companies.

GDPR, general data protection regulation, EU regulation

Infographics

Guide for initial and ongoing due diligence that covers how to do it properly, benefits, items to request, understanding your vendor's regulatory risk impact and more.

vendor due diligence, how to do vendor due diligence, vendor due diligence how to, conduct vendor due diligence

Infographics

Understanding you vendor's classification is a third-party risk management best practice, but what does it mean? This infographic will walk you through the steps to classify your vendors.

vendor management, list creation, vendor rating, risk rating, classify vendors

Infographics

An important step to vetting a vendor is onboarding. Learn best practices, how to streamline a vendor vetting process and more.

vendor onboarding, how to onboard a vendor, onboarding a vendor, how to onboard vendors

Infographics

The types of vendor risk management model frameworks, advantages and disadvantages of each, how to help promote consistency and clarity and how to set up.

vendor management models, differences between vendor management models

Infographics

Learn 4 tips when determining who your high risk vendors are, what to do with those high risk vendors and key points of assessing risk.

vendor risk, vendor management, risk look big

Infographics

Download this infographic for what you need to know to protect your institution, your best insurance against unexpected problems, fundamental requirements of vendor risk management.

vendor management, vendor risk, risk management, tprm

Infographics

Use this handy tool to keep you and your team on track to properly measure, monitor and control risks. Learn what is due diligence, the importance of due diligence & the scope.

Infographics

How to classify based on product or service, how to classify based on level of risk and next steps to take after you've classified your vendors.

classifying vendor, vendor classification, what is vendor classification, how to classify a vendor

Infographics

How to identify all your vendors, essential steps of vendor management, prioritizing vendors according to risk level and why fourth parties are important.

what is vendor management, what is third-party risk management, vendor risk management meaning, vendor management definition

Infographics

Download this infographic for 4 tips to help you avoid an enforcement action, 6 top websites for legal analysis, 2 Q's to ask when reviewing enforcement actions.

regulatory guidance, regulatory compliance, vendor management, enforcement actions

Infographics

Who should decide and who should approve, why you should not simply accept a boiler plate contract and taking your new vendor through a risk assessment.

pre contract considerations, vendor vetting, vetting a vendor

Infographics

Download this infographic for who should decide and who should approve, why you should not simply accept a boiler plate contract and taking your new vendor through a risk assessment.

vendor management best practices, third-party risk best practices, best practices in tprm

Infographics

Learn what info to include in board reports, the frequency and format, the appropriate materials to provide in your board reporting package with this infographic.

reporting

Infographics

What the three lines of defense are, how they guard against undue risk and tips for implementing this strategy at your institution.

three lines of defense, 3 lines of defense strategy

Infographics

What to include in SLAs, about reviewing SLAs and what you can do if one is broken.

service level agreements, slas, vendor service level agreements

Infographics

13 best practices for managing contracts that you won't find in the FFIEC handbook, where your contracts should be stored and why SLAs in contracts are so important.

contract management, best practices vendor contract, vendor contract best practices, contract best practices

Infographics

Learn what your policy should consist of, best practices and tips and 3 common errors to avoid with this infographic.

third-party policy, policy creation, how to create third-party policy, write policies

Infographics

From a risk standpoint, there are some vendors that you should be managing more actively than others.

vendor scope, managed vendors, vendor monitoring

Infographics

How you should prepare for an exam ahead of time, who's responsible and our expert tips for the examiner's arrival.

vendor exam, notice of exam, vendor management exam, prepare for exam

Infographics

What a fourth-party is vs. a third-party, how to get information on your fourth parties and what to review on your fourth parties.

Infographics

Improve your vendor risk management program, what requesting one means, what to do if your vendor won't give those reports to you, another way of obtaining the reports.

due diligence items, vendor manager due diligence, vendor manager

Infographics

The consequences of making these mistakes and an opportunity to visit your contract process and ensure that you have firm standards in place.

vendor contract management, contract management mistakes, vendor contracts

Infographics

10 errors we commonly see in vendor management programs - check your program now to find out if you have any gaps that need fixing.

Infographics

How to work with overseas vendors and give them special attention, whether they're a third-party or fourth-party.

Infographics

Customer complaints are a fact of life in the social media world we live in today. See why you need to monitor your vendor's complaints as a critical part of third party risk management.

Infographics

7 vendor management nightmares and ensure you take the necessary steps to avoid.

vendor management risk, vendor management nightmares, vendor management next steps

Infographics

Learn what they are, important points in each of these 5 areas, how to utilize these key provisions to help mitigate vendor contract risk.

Infographics

Items to collect on all vendors, what to collect for higher risk or more critical vendors, and suggestions when you need to fill due diligence gaps.

product documentation formula, vendor risk formula

Infographics

4 key elements in every disaster recovery plan and why you should care about your third parties' disaster recovery preparedness.

disaster recovery, vendor disaster recovery, disaster recovery planning, vendor management, DR, TPRM

Infographics

Considerations when you outsource to a contract underwriter, 3 tips in vendor oversight, Q's to consider when assessing contract underwriter risk.

mortgage underwriter, contract mortgage underwriter, contract management

Infographics

How to mitigate reputation risk, the impact a vendor can have on your reputation, which vendors pose a reputational risk and 5 tactics to manage third party reputational risk.

Infographics

What you need to know about SSAE 18, the difference between SSAE 16 and SSAE 18 and some key updates to SOC 1's.

Infographics

Do you know if they have appropriate measures in place and a plan of how to handle business impacting events with you?

Infographics

7 signs to look for when reviewing your vendor list to see if any of them are under-performing and steps to protect you if you spot one.

Infographics

Step by step, you will want to check every box to ensure items such as risk, expected outcomes and regulatory requirements have all been properly addressed.

Infographics

The Procedures must be very detailed, often right down to the prescriptive steps of what screen to look at, what field to examine, what step to take next, etc.

Infographics

When you’re examined, the Program will absolutely positively be essential. Examiners will look for consistency in form and in content.

Infographics

Your vendor management Policy is the playbook that auditors and examiners will expect you to follow. Get the Policy right and it will provide your financial institution all the right protection in weathering the storm.

Infographics

Here's your starting point of our 4-part series that covers the 3 primary components essential to building an exam proof vendor management operation at your financial institution.

Infographics

To help you and your team avoid any misunderstandings, we've put together a list of 10 most common assumptions we've seen in the vendor management process.

Infographics

To help you and your team, we've put together a simple infographic on 7 of the most common dangerous potholes that we have seen.

Infographics

To join in the fun of St. Patricks Day every year, we've put together a simple infographic on the basic principles of a successful vendor management program.

Infographics

Does your due diligence process include assessing your vendor's cybersecurity posture? Have you identified the risks and applied controls to mitigate the risk? And if something goes wrong, what happens next?

Infographics

Love is in the air this Valentine's Day. But "love" may not be the word you would pick to describe the relationship you have with all of your vendors.

Infographics

We firmly believe that if you follow a few basic steps before you enter a contract, you're unlikely to ever need to pull that contract out again during the term of the relationship.

contract management, contract negotiation