On-Demand Webinar

Managing Vendor Issues and Challenges at Your Credit Union

Basic

It's important for your credit union to have an effective system in place for identifying, managing, and tracking vendor issues. This process is called issue management and it helps you address and solve any problems that may arise. If vendor issues are left unaddressed, it can lead to more significant problems in the future.  By incorporating standardized procedures for issue management into your vendor risk management process, you can ensure that your credit union's reputation and members are protected. Join us for this informative session that will guide you through preparing and handling any vendor issues that may arise and provide valuable tips for resolving these challenges. 

On-Demand Webinar

Using SLAs and KPIs for Effective Vendor Performance Management

Intermediate

Vendor performance is an essential part of third-party risk management, and service level agreements (SLAs) and key performance indicators (KPIs) are valuable tools in the performance management process. So, what is an SLA exactly and how do KPIs substantiate vendor performance? How do you turn performance expectations into SLAs and how do you establish and formalize KPIs? Join us for this session where we’ll provide an overview of the vendor performance management process and provide essential details regarding identifying and establishing SLAs and KPIs, how to monitor and manage performance effectively, and how to spot and address declining vendor performance early on to avoid more significant issues later. 

On-Demand Webinar

Understanding the Elements of Your Vendor's Cybersecurity Program

Basic

Given that cybercriminals are increasingly using third-party vendors as a way to gain access to organizations, it’s essential to understand the cybersecurity program of your vendors. This will help you ensure that they have the necessary plans in place to protect your organization and its customers. In this webinar, we’ll discuss vendor cybersecurity posture and why it's important to your organization. We’ll walk through which vendors should be reviewed, what you should be requesting and reviewing from your vendors, different security testing to perform, and items to be on the lookout for. We’ll also discuss the regulatory requirements around cybersecurity.  

On-Demand Webinar

Staffing Your Third-Party Risk Management Program

Intermediate

Many organizations need help determining appropriate staff levels for effective third-party risk management. However, the lack of regulatory guidance on the matter further complicates this challenge. As a result, third-party risk programs often struggle with understaffing, hindering their ability to function optimally. So, how many people are needed to manage third-party risk management effectively? Join us in this session where we’ll discuss the factors your organization must consider to appropriately staff your third-party risk management function. We’ll cover topics such as the program's scope, the number of vendors and their risk ratings, employee skills and experience, the systems and tools used, and how third-party risk tasks are allocated within your organization. 

On-Demand Webinar

Third-Party Risk Management Bootcamp

Basic

Effective vendor risk management is essential to protecting your organization, customers and all proprietary information. In this three-day virtual bootcamp, industry experts will cover an in-depth look at the third-party risk management lifecycle, vendor management best practices, fourth- and nth-party vendors, vendor financial health, and much more!

On-Demand Webinar

How to Classify Who Is a Critical Vendor

Basic

You can probably identify a few vendors that provide a lot of value, but do you know which ones are critical to your organization? These are the vendors that your organization needs to function properly. It’s essential to have clear criteria to identify them, as it’s not only a best practice, but a regulatory requirement. All your vendors are important and need to be managed, but your critical vendors will require the most attention in your third-party risk management program. So, how do you determine who these critical vendors are? In this session on vendor criticality you’ll learn the basics of how to identify your critical vendors and some tips on how to manage them effectively. 

On-Demand Webinar

The Difference Between Inherent and Residual Vendor Risk

Basic

Vendor risks are always present, and you can never completely eliminate them, but it’s possible to reduce the likelihood, occurrence, severity, and impact of those risks through solid risk management practices and controls. Inherent risk is the level of risk present in any vendor engagement before any controls are put in place, while residual risk is the risk that remains after mitigation efforts are made and controls have been verified. It’s true that you can’t have inherent risk without the residual risk; however, they each serve a distinct purpose. Join us for this session where we’ll discuss what inherent and residual risks are, how to determine them, and how they are applied in third-party risk management. 

On-Demand Webinar

Who Should Be Involved in Third-Party Risk Management

Basic

Third-party risk management (TPRM) is a complex process requiring multiple stakeholders' involvement to ensure it runs smoothly. While it can be challenging to differentiate between the different roles and responsibilities involved, it's essential to acknowledge that each person's contribution is vital to the program's success. In this session, we’ll discuss the different roles and responsibilities involved in TPRM. You’ll learn who owns the risks associated with third parties; identify who is responsible for the TPRM framework; explore the roles of subject matter experts, auditors, and examiners; and see how senior management and the board oversee and govern the TPRM process. 

On-Demand Webinar

Risk-Based Vendor Due Diligence: Identifying the Proper Scope, Scale, and Documents

Basic

To effectively manage third-party risks, it’s recommended to perform risk-based due diligence that is customized to each product or service, their level of risk, and their criticality to your organization’s operations. It's not practical or productive to have a universal due diligence requirement for all vendors as every vendor's product or service represents a unique level of risk to your organization. In this session, learn how to identify the right scope and scale for vendor due diligence, what documents to collect, tips for dealing with missing documentation, and what to do with your due diligence results. 

On-Demand Webinar

How Fourth Parties Impact Your Credit Union

Basic

You have your full inventory list of your third-party vendors, but did you know that you need to understand who your vendors are on a deeper level? Have you considered who your fourth-party vendors are? They could be playing a crucial role in your operations or even have access to sensitive data that belongs to your members. It’s crucial to be aware of the level of risk that fourth-party vendors can bring to your credit union and its members, especially if they are providing support for critical products and services.  In this session, we'll discuss the importance of understanding your fourth-party vendors for your third-party risk management program and how to review them.

On-Demand Webinar

What You Need to Know About Vendor Business Continuity, Disaster Recovery, and Pandemic Plans

Basic

What happens if your critical vendor goes down? Can your organization still operate business as normal? Does your vendor have an effective plan in place to resume normal operations? These are all important questions that need to be addressed in your vendor business continuity management process as part of your third-party risk management program. Ensuring your vendor has business continuity, disaster recovery, and pandemic plans in place is only the first step. You then need to review these plans. Join us for this webinar that will discuss the differences between vendor business continuity plans, disaster recovery plans, and pandemic plans, what to look for in these plans, how business impact analysis comes into play, and what can go wrong if plans aren’t well-tested. 

On-Demand Webinar

Vendor Exit Strategies and Plans: Managing the Offboarding Process Safely and Effectively

Intermediate

Vendor relationships can end for many reasons. Your organization’s needs may have changed, you’re looking for a new vendor who better aligns with your strategic goals, or your current vendor is no longer meeting your service level requirements. Regardless of the reason, it’s essential to have your vendor exit strategies in place before vendor termination. And having your exit strategy in place is only part of the equation. In this session, we'll discuss vendor exit strategies and plans and cover the offboarding activities every organization should consider before exiting a vendor relationship. 

On-Demand Webinar

Vendor Onboarding: Starting Vendor Relationships Right

Intermediate

The onboarding process is the crucial first step in any vendor relationship, as it sets the foundation for managing the vendor and their risks throughout the partnership. What are the key components of an effective onboarding process? How should organizations plan for vendor relationships and assess their risks? When and how should due diligence be conducted, and what information and documents should be gathered from vendors? How can contracts be used to manage risks and ensure optimal vendor performance? Join us for this webinar to learn all about vendor onboarding. 

On-Demand Webinar

Third-Party Risk Management Reports: Right Data, Frequency, & Content

Basic

For many, it’s a regulatory requirement to report third-party risk management to your board and senior leadership. There are other committees and stakeholders that must be provided with reports and data on a regular basis, too. It can be a cumbersome task to gather all the reports that need to be provided to various departments, but don’t let it worry you!  We’ll walk you through the basics of third-party risk management reporting, what should be included in your reports, how often they should be distributed, and why good reporting practices are important. Join us for this session where we’ll discuss reporting techniques, strategies, and more. 

On-Demand Webinar

The Vendor Due Diligence Process: End to End

Basic

For effective third-party risk management, it's essential to conduct appropriate vendor due diligence during the onboarding and ongoing stages of the relationship. And the level of due diligence required should be tailored to the level of risk involved, with higher-risk third-party relationships necessitating more in-depth due diligence. But what does a successful vendor due diligence process entail? What information and documentation should you collect from your vendors? What steps should you take if they won't provide it? Join us for this information-packed session covering the entire due diligence process, what to collect from your vendors, and how to utilize due diligence to mitigate risk. 

On-Demand Webinar

Assessing Vendor Risk: A Deeper Dive

Intermediate

Communication and collaboration are instrumental in implementing a consistent risk assessment process. Assessing the risk in a collaborative manner and leveraging internal resources will allow for a risk-based and documented approach, which will help guide your ongoing oversight function. In this webinar, we’ll walk through how to complete a vendor risk assessment review from start to finish.

On-Demand Webinar

How to Read and Review a Vendor SOC Report: A Report Walkthrough

Intermediate

Vendor SOC reports are essential vendor documents that organizations must review to verify the vendor has strong information security controls in place. This can be a daunting task, but it's crucial to protect your organization’s and customers’ sensitive data. However, knowing how to review and analyze these massive reports can be a challenge. There is a lot to consider when it comes to vendor SOC reports. Join us for this webinar where we'll do a complete and thorough walkthrough of a vendor SOC report from start to finish. 

On-Demand Webinar

Vendor Complementary User Entity Controls (CUECs): What They Are and How to Use Them to Protect Your Organization

Basic

Complementary user entity controls (CUECs) are crucial components of a vendor's SOC report. It's important to note that both your organization and the vendor share the responsibility to achieve control objectives and prevent any material weaknesses. CUECs help your organization understand its obligations for meeting control objectives and identify the specific roles, responsibilities, and duties of your organization to ensure that these objectives are successfully achieved. In this webinar, we'll walk you through all aspects of CUECs, what they are, why they're important, how to review them, and more. 

On-Demand Webinar

Strategies to Mature Your Vendor Risk Management Program

Intermediate

You have already established the foundation for your vendor risk management program, but what should be your next steps? How can you attain program maturity? When you need to move beyond the basics, where should you focus your time and effort to enhance and optimize your vendor risk management program? Join us for this comprehensive webinar to learn more about achieving vendor risk management program maturity and the best ways to get there. Learn about tools and techniques to guide you in improving your vendor risk management program, from governance documents to program maturity roadmaps. 

On-Demand Webinar

Performing a Complete Vendor Contract Review

Intermediate

The contract management process is not only about negotiating the best financial and legal terms for your organization, but also a key component of managing risk and vendor relationships. Structuring your legal agreements to ensure maximum protection for your organization and its customers is an essential practice. But what is the best way to review vendor contracts? This session covers a walkthrough of how to review a vendor contract and the key terms and conditions to include.

On-Demand Webinar

Vendor Contract Management for Beginners

Basic

A well-written vendor contract is one of your most valuable tools for managing third-party risks, and it is essential for protecting your organization and its customers. Although contracts and contracting can seem intimidating to those who are not legal professionals, it does not have to be. Learning core concepts and basic guidelines for vendor contracts can help demystify the process.  This webinar is designed to help beginners understand vendor contracts and the contracting process.

On-Demand Webinar

Protecting Your Credit Union With Vendor Risk Assessments

Basic

Vendor risk assessments are important for credit unions as they offer detailed information about how vendors handle risk. These assessments are necessary before signing a contract and throughout the relationship. Join us for this session where we cover the basics of vendor risk assessments. We'll discuss what you need to know and do to ensure that your assessments are effective, timely, and meet regulatory requirements. 

On-Demand Webinar

The Third-Party Risk Management Lifecycle: Managing Vendor Risk From Start to Finish

Basic

The third-party/vendor risk management lifecycle is the foundation for effective third-party risk management programs across industries and organizations of all sizes. In this webinar learn about the third-party/vendor risk management lifecycle. We’ll cover the basics of each lifecycle stage: onboarding, ongoing, and offboarding. We’ll also provide details about the risk identification and management steps in each stage.

On-Demand Webinar

How to Review Your Vendor's Financial Health: A Walkthrough of Financial Documents

Intermediate

To help your organization manage vendor risks successfully, it’s important to implement a thorough vendor financial health review process. This process helps you identify potential financial gaps at your vendor, before they disrupt your business. Remember, poor financial health can negatively impact your organization, having a ripple effect on your customers. In this session, where our Chief Financial Officer will walk you through the different types of financial documents and how to review these documents. 

On-Demand Webinar

Fourth and Nth Parties: What You Need to Know to Effectively Manage Your Extended Third-Party Ecosystem

Basic

It’s important to understand that risks associated with third parties go beyond your immediate relationships and may also include your vendors’, suppliers’, or service providers' subcontractors (known as fourth and nth parties). In this session, we’ll provide helpful information to assist you in identifying, assessing, and managing fourth- and nth-party risks. We’ll also focus on strategies and tools that any organization can use to enhance visibility to their extended third-party ecosystem, mitigate fourth- and nth-party risks, and explore ways to determine if your third-party vendors are managing their subcontractors appropriately. 

On-Demand Webinar

How to Continuously Monitor Vendors

Basic

Continuous monitoring of your vendors is a best practice to keep your organization informed of risks posed throughout the vendor relationship – just because there’s not a vendor issue today, doesn’t mean there won’t be tomorrow. Your organization can be subject to many third-party risks, such as operational, financial, reputation, and more, and these risks change over time. So, continuously monitoring your vendors is crucial to help your organization identify issues and mitigate those before they become too big to handle. Join us for this session where we will discuss how continuous monitoring improves and benefits your organization.  

On-Demand Webinar

Identifying the Key Players for Third-Party Risk Management at Your Credit Union

Basic

Third-party risk management is a complex system that requires a careful combination of processes, procedures, people, documentation, and more to work effectively. There are many key players involved in these activities, ranging from vendor owners, subject matter experts (SMEs), a dedicated third-party risk management team, and more. It's necessary to identify these key players within your credit union and define their responsibilities. In this session, we'll clarify some of these roles and responsibilities for your third-party risk management program.

On-Demand Webinar

State of Third-Party Risk Management 2024

Basic

Third-party risk management practices and programs are implemented differently across various organizations, sizes, and industries. To gain a better understanding of the current state of third-party risk management, Venminder conducts a survey every year that includes a wide range of organizations. This enables everyone to benchmark against the differences in organizational priorities and challenges. Join us for this session where we'll be presenting the latest results from the annual State of Third-Party Risk Management Survey.

On-Demand Webinar

How to Develop and Write an Effective Third-Party Risk Management Policy Document

Intermediate

Your third-party risk management (TPRM) policy serves as the foundation of your program, and it’s meant to clearly identify the rules, requirements, roles and responsibilities, and governance and oversight structures for TPRM in your organization. TRPM policies are more than a suggested best practice, for many industries they’re a regulatory requirement. In this session we'll walk you through the fundamentals of TPRM policy creation and share some best practices.

On-Demand Webinar

Third-Party Risk Management Governance Documents: What You Need to Know

Basic

Robust governance documents are essential for any effective third-party risk management program. These documents consist of policies, programs, and procedures that provide guidance to your organization. Although each document is important, these three types serve different purposes and it's crucial to establish a clear understanding of the desired content for each document. It's also important to identify who is responsible for creating and maintaining these documents.  In this session we'll cover what you need to know about effective TPRM governance documents, why they're necessary to have, and walk you through how to develop and maintain each of the documents.

On-Demand Webinar

Vendor Risk Management 101

Basic

Vendor risk management is the process of identifying, assessing, managing, and monitoring the risks associated with your vendor relationships and a fundamental process for every organization. There are many components involved to have a successful program and processes, including following the vendor risk management lifecycle which can guide you through the three stages of a vendor relationship and necessary steps to take. It’s clear; vendor risk management is more important than ever! Join us for this session where we’ll cover the basics. 

On-Demand Webinar

Third-Party Risk Management Best Practices for 2024

Basic

The success of a third-party risk management program depends on a carefully integrated combination of rules, tools, processes, and people. To meet regulatory guidelines and follow best practices, your organization must have an effective third-party risk management program. Let's finish off the year with a review of the third-party risk management challenges and lessons learned in 2023. We’ll also explore what might be on the third-party risk horizon for 2024 and beyond. 

On-Demand Webinar

Regulatory Riddle or Common Sense: Decoding Third-Party Risk Regulatory Perspectives, Themes, and Expectations

Basic

We know that regulatory requirements should inform our third-party risk management programs and practices. But what exactly do regulators really expect? If you are in a regulated industry, a large part of your third-party risk program's success depends on how well your program meets regulatory requirements. In this webinar, we’ll talk through interpreting regulatory requirements and identifying common regulatory themes, thinking like an auditor or regulatory examiner, and self-auditing your third-party risk management program. 

On-Demand Webinar

How to Manage Vendor Issues and Challenges

Basic

Issue management involves identifying, managing, and tracking vendor issues and taking a strategic approach to resolve the problem. A failure to identify and address vendor issues promptly and efficiently will only cause more problems down the line. To help you better prepare and handle issues that arise, join us for this webinar to discuss the challenges you may encounter and walk you through possible solutions.   

On-Demand Webinar

How to Create and Use Key Third-Party Risk Management Metrics

Basic

Many organizations struggle to communicate the true value of third-party risk management beyond just regulatory compliance. In today's business world, data is king. What kind of data can help you communicate and measure the effectiveness and benefits of your third-party risk management program? This webinar provides practical instruction for identifying and refining your third-party risk management program metrics and teaches you how those metrics can demonstrate your program's effectiveness and efficiency.

On-Demand Webinar

How to Identify Your Credit Union’s Critical Vendors

Basic

Identifying your credit union’s critical vendors is not just a best practice, it’s a regulatory requirement. Once you identify your critical vendors, you also need to understand how to manage them, from onboarding to offboarding.  In this session learn how to identify critical vendors, how to manage the risk they post, and important activities you'll need to perform in your third-party risk management program.

On-Demand Webinar

From the Top Down: The Role the Board and Senior Management Play in Third-Party Risk Management

Basic

Involving your board and senior management in third-party risk management is more than just a best practice. It's a regulatory requirement in many industries. In this webinar, we'll clarify how the board and senior management should be involved in third-party risk management across the organizations and the specific roles they play, how setting a "tone from the top" boosts internal compliance and effectiveness of TPRM, and more. 

On-Demand Webinar

Your Vendor's SOC Report: What and How to Review

Intermediate

Ensuring your vendors have the right risk management practices and controls is essential to the due diligence process. This often means requesting and reviewing a vendor SOC report. But knowing just how to review and analyze these complex reports can be a challenge. In this webinar, we'll help you identify which type of SOC report you need and how to review them. We will explore the various sections of a SOC report and guide you on what to look for and how to assess the risks. 

On-Demand Webinar

Differences Between Vendor SOC Reports

Basic

Do you need to verify that your vendor has the right internal controls to protect your data? Reviewing a SOC (System and Organization Controls) document is a good place to start. But how do you know which type of SOC document to request and review? Learning which report to choose is essential. Join us for this session where we’ll cover the basics of vendor SOC reports and what you need to know about each one. 

On-Demand Webinar

Interagency Guidance On Third-Parties: How the Expanded Scope Affects Everyone

Basic

Watch this webinar, in partnership with Compliance Week, where we cover the new guidance in more detail. We’ll provide a brief overview of the Interagency Guidance, as well as share practical advice to ensure your organization is fully prepared for the expanded scope and what this means for your organization’s third-party risk management program. 

On-Demand Webinar

Third-Party Risk Management and the Hidden Factors of Success

Intermediate

You may know how to build a third-party risk management program that meets requirements and follows best practices. But, how do you manage some of the more unique challenges third-party risk management programs and professionals might face? In this unique webinar, we'll explore some of the trickier aspects of third-party risk management and offer practical strategies and advice for improving your program and enhancing your professional skills.

On-Demand Webinar

How to Manage Vendor Risk at Your Credit Union With Due Diligence

Basic

Having a robust vendor due diligence process is a crucial part of a successful third-party risk management program. It helps you remain aware of and manage vendor risk posed. And it’s not only a good business practice for credit unions – it's a regulatory requirement. In this session we'll walk you and your credit union through a high-level due diligence overview, explaining how to manage and mitigate vendor risk with due diligence, where it fits within the third-party risk management lifecycle, and more. 

On-Demand Webinar

ESG Is Coming: Is Your Third-Party Risk Management Program Ready?

Intermediate

Environmental, social, and governance, or ESG, is more than a trending topic. Shareholders, employees, investors, and members of the general public increasingly demand that organizations minimize the negative impacts on people and the environment resulting from their operations. But how do an organization’s vendors fit into the bigger ESG picture? In this informational webinar learn more about ESG, why it’s important, and what your organization needs to consider before implementing ESG disclosure and reporting for your vendors. 

On-Demand Webinar

Interagency Guidance on Third-Party Relationships: Risk Management - What It Means for Your TPRM Program

Basic

The Federal Reserve Board (the Board), Federal Deposit Insurance Corporation (FDIC), and Office of the Comptroller of the Currency (OCC) collectively introduced the Interagency Guidance on Third-Party Relationships: Risk Management a little over two years ago. In June 2023, the guidance officially became effective – you’re expected to comply with this immediately. Join us for this webinar that will walk through the new guidance and what it means for your organization’s third-party risk management program.  

On-Demand Webinar

Vendor Exit Strategies and Plans: Managing the Offboarding Process Safely and Effectively

Intermediate

Vendor relationships can end for many reasons. Regardless of the reason, it's essential to have your vendor exit strategies in place before vendor termination. Join us for this webinar, where we’ll identify the purpose of exit strategies and exit plans and cover the essential offboarding activities every organization should consider before terminating a vendor relationship. 

On-Demand Webinar

Creating an Effective Vendor Document Collection Process

Basic

Collecting vendor information and documentation is essential to the due diligence process. After all, those documents must be reviewed and assessed to determine if the vendor has the right risk management practices and controls. In this webinar, we’ll provide guidance surrounding the information and documents you should gather based on the product/service type and risk level.

On-Demand Webinar

How to Review Your Vendor's Business Continuity, Disaster Recovery, and Pandemic Plans

Intermediate

The importance of vendor business continuity management is well known, but do you know how to review and analyze business continuity, disaster recovery, and pandemic plan documents to ensure that your organization is covered? If you already know what vendor business continuity, disaster recovery, and pandemic plans are, but would like to take it a step further, this webinar is for you. This session will walk you through how to analyze these documents and what to look for to ensure your vendor has the right business continuity and disaster recovery planning to protect your organization. 

On-Demand Webinar

The Basics of Vendor Business Continuity, Disaster Recovery, and Pandemic Plans

Basic

If your third-party vendor goes down, can your organization stay afloat? Business-impacting events can and will happen. Is your vendor prepared to handle them with appropriate measures and a plan? During this webinar, you'll learn what your vendor needs to provide to demonstrate they are prepared for business interruptions and recovery to normal operations as well as how to ensure that your vendors have taken the appropriate precautions and have thoroughly tested their business continuity management and disaster recovery plans. 

On-Demand Webinar

How Vendor Contract Management Benefits Your Credit Union

Basic

Contracting and renewals are essential steps within the third-party risk management lifecycle. Vendor contract management will help your credit union successfully monitor and maintain vendor relationships. Managing your credit union’s vendor contracts is about more than negotiating the best financial and legal terms. Join us for this session that will discuss vendor contract management in more detail, including elements that should be considered and the benefits of vendor contract management.

On-Demand Webinar

How to Review Your Vendor's Financial Health

Intermediate

Is your vendor financially stable? Your vendor’s financial health affects its capacity to provide your organization with safe, secure, and quality products and services. Financial risks associated with vendors are often overlooked, can be detrimental, and may directly affect how you operate your business. Watch this informational webinar, presented by an actual CFO (chief financial officer), who will teach you how to review your vendor’s financial health so you can remain fully aware of their financial status and avoid costly surprises. 

On-Demand Webinar

Third-Party Risk Management Reports: Right Data, Frequency, & Content

Basic

Third-party risk management reporting is not just a best practice; it's a regulatory requirement to report to your board and senior management. But you can’t forget about risk committees and your other stakeholders. Understanding the information needs of each of your stakeholders and how often you provide that data is essential. So, what should you be reporting, to whom, and how often? This webinar will walk you through the basics of third-party risk management reporting. And help you identify the attributes of effective reporting. 

On-Demand Webinar

The Third-Party Risk Management Lifecycle: Managing Vendor Risk From Start to Finish

Basic

The third-party/vendor risk management lifecycle is the foundation for effective third-party risk management programs across industries and organizations of all sizes. Watch this webinar to learn about the third-party/vendor risk management lifecycle. We’ll cover the basics of each lifecycle stage: onboarding, ongoing, and offboarding. We’ll also provide details about the risk identification and management steps in each stage.

On-Demand Webinar

Fourth-Party Risk: What to Know and How to Manage It

Basic

Third-party risk management doesn’t stop with your third parties. Do you know who your fourth parties are and the risks they pose to your organization? Sure, we have direct relationships with our vendors, but what about their vendors (your fourth parties) or their vendor’s vendors (nth parties). In this webinar, learn more about fourth and nth-party relationships and what it takes to identify them and manage their associated risks. 

On-Demand Webinar

The Silicon Valley Bank Collapse: Understanding Your Vendors' Banking Relationships and Operational Resiliency

Basic

The collapse of Silicon Valley Bank ("SVB") ranks second among all bank failures in U.S. history and has had a profound impact. While no one was prepared for an event like this, it’s important that your organization protects itself from the potential ripple effect that will be caused by your vendor relationships and their banking relationships. Join us for this webinar that will discuss what your next steps should be, a proactive approach to talking with your vendors, and help you gain a bigger picture of your vendors' financial health and operational resiliency. 

On-Demand Webinar

Vendor Financial Red Flags Your Credit Union Should Watch For

Basic

As part of third-party risk management, you should periodically review your vendor’s financial statements and monitor financial performance. When a vendor experiences a decline in financial performance, it often leads to the vendor cutting costs and can have an impact on the quality of your relationship, ultimately putting your credit union at risk. To protect your credit union, here are some red flags to watch for related to a vendor’s financial health so you can take appropriate action to reduce that risk.

On-Demand Webinar

Vendor Onboarding: How to Do It Correctly

Intermediate

An organization's vendor onboarding process should allow for identification of the right partner and is critical to the success of this future relationship. Not only does the onboarding process need to be effective and efficient, but it also must lay a solid foundation for managing and monitoring the vendor throughout the relationship. Join us for this informative webinar to learn more about finding new vendors and their subsequent onboarding, including planning, risk assessment, due diligence, contracting, and more.

On-Demand Webinar

Third-Party Risk Management Fundamentals for Healthcare

Basic

Third-party risk management is more than a regulatory requirement. It's also a best practice that can provide your healthcare organization with a strategic advantage. And more importantly, effective third-party risk management protects your organization and patients by protecting patient privacy and health. Third-party risk management is a necessary practice for every healthcare organization. Watch this webinar, in partnership with HIMSS, to learn the fundamentals.

On-Demand Webinar

Managing Your Vendor's Performance: Why It Matters and How to Do It

Basic

Vendor performance management is necessary not only to ensure the benefits of the relationship are realized, but is also an essential risk management tool. After all, the key to vendor value is vendor performance. Join us for this information-packed webinar to learn more about vendor performance management basics, SLA and KPI development, creating scorecards, and more.  

On-Demand Webinar

State of Third-Party Risk Management 2023

Basic

TPRM programs and practice maturity vary, as do organizational priorities and challenges. As a result, we include a wide range of organizations, sizes, and industries in our annual survey to better reflect the state of third-party risk management. In this session, we will share the results of our annual State of Third-Party Risk Management Survey. Join us as we dive into key insights and findings of the annual survey and discuss third-party risk management changes, challenges, and recommended best practices for 2023.

On-Demand Webinar

Developing and Maintaining Effective Third-Party Risk Management Governance Documentation

Basic

Third-party risk management (TPRM) governance documents, including policies, programs, and procedures, are the foundation for any effective TPRM program. After all, TPRM rules, requirements, and standards need to be formalized and documented. So, what is the purpose, content, and audience for each type of governance document? In this webinar, we'll cover the basics of TPRM governance documents, including policies, programs, and procedures.

On-Demand Webinar

Vendor Management 101

Basic

One of the most important vendor management practices for any organization is to follow the vendor risk management lifecycle which can guide you through the three stages of a vendor relationship and the necessary steps and activities to complete along the way. Join us for this informative session to learn the essentials of vendor management.

On-Demand Webinar

Third-Party Risk Management Best Practices for 2023

Basic

A well-run third-party risk management program is important to meet regulatory guidelines and is a critical process in any organization. Managing your third-party vendors successfully will help you avoid real risks to your operations and reputation. Let's finish off the year with a review on vendor risk management best practices and a look towards the future.

On-Demand Webinar

Tips and Tricks of Vendor Document Collection: A Key Aspect of Vendor Due Diligence

Basic

Collecting vendor due diligence is a challenge for many organizations. It’s often difficult to get the right documents from your vendors and can be even more frustrating to receive them in a timely manner. In this webinar, learn where document collection fits into the vendor due diligence process and what you need to know to create efficiencies.

On-Demand Webinar

Third-Party Risk Management Regulatory Expectations to Know

Basic

Between regulatory pressures and an environment full of new and increasing risks, third-party risk management (TPRM) has never been more important. While many of us read the guidance and research best practices, when it comes time for an audit or exam, we still aren't sure if our TPRM program is up to snuff. Join us for this webinar, where we’ll share sensible strategies and advice for reviewing your program like the professionals do and teach you how to take the stress out of audits and exams, which are normal, and expected occurrences for every TPRM program.

On-Demand Webinar

Incorporating Vendor Issue Management Into Your Third-Party Risk Management Process

Basic

Vendor issue management is an extremely important part of third-party risk management. Failing to identify and address issues throughout the third-party risk management lifecycle will only cause you and your organization more problems. By incorporating standardized issue management procedures into your vendor management process, you can protect your organization’s reputation, customers, and more.

On-Demand Webinar

How to Create and Use Key Third-Party Risk Management Metrics

Basic

Most organizations understand the need for a third-party risk management (TPRM) program, but beyond regulatory compliance, few organizations can articulate their program's value using data. Despite the lack of standards in this area, there is no reason to be discouraged. Establishing solid and objective program metrics is easier than you might imagine. In this session, we'll provide practical instruction for identifying and refining reportable TPRM program metrics and teach you how those metrics can be used to demonstrate your program's effectiveness, efficiency, capacity, and value. 

On-Demand Webinar

Risk Assessing Your Credit Union's Vendors

Basic

Risk assessments are a vital part of the third-party risk management lifecycle as proper risk assessments will help your credit union identify the risk associated with outsourcing product and services to each vendor. Assessing vendor risk not only a regulatory requirement, but also a best practice to keep your credit union and its members safe. In this session, you'll learn about inherent and residual risks, what your credit union needs to be collecting on your vendors to manage risks, and the who, what, why, when, and how of vendor risk assessments. 

On-Demand Webinar

Vetting Your Vendor's Cybersecurity Preparedness

Basic

Cybersecurity is a regulatory hot button issue. By taking the necessary precautions and understanding your vendors' cybersecurity posture, you can reduce the risk of them becoming your weakest link. In this session, we'll cover how to review your vendor's cybersecurity to uncover if they are prepared to prevent, detect, and respond to a cybersecurity issue.

On-Demand Webinar

How to Review a Vendor's Cybersecurity Program

Intermediate

With the increase in data breaches, cybersecurity continues to be a hot issue. It's critical that you understand your vendor's cybersecurity posture to protect your organization in the incident of a cybersecurity threat or attack. The time to prepare is now! This session will discuss what to ask for from your vendors, how to review a vendor's cybersecurity, and more!

On-Demand Webinar

Differences Between Vendor SOC Reports

Basic

Reviewing a vendor's SOC report is an important part of your due diligence process as it provides insight into an organization's centric environment. Do you need a SOC 1, SOC 2, SOC 3, or one of the many other SOC options? It can certainly be confusing to determine the right report. In this webinar, we'll cover the basics of SOC reporting and what you need to know about each. 

On-Demand Webinar

How to Review a Vendor's SOC Report

Intermediate

Collecting, analyzing, and understanding your vendor’s SOC reports is crucial to ensure the vendor is a safe partner. It’s expected that you have your third party’s actual SOC reports on file as well as a qualified review of the audit reports acknowledging your understanding of strengths and weaknesses. In this session, we'll cover valuable information on SOC reports and reviewing them that will help your third-party risk management program.

On-Demand Webinar

What the Board and Senior Leadership Need to Know About Third-Party Risk Management

Basic

Third-party risk management (TPRM) is a substantial component of your organization's risk portfolio. Due to this, auditors and regulators share the expectation that your board and senior leadership play an active role in the effective execution of third-party risk management at your organization. We'll discuss senior leadership and the board's responsibilities during this webinar, including policy review and approval. We'll also cover standard report types and the timeframes for providing them. 

On-Demand Webinar

How to Determine Which Vendors Are Critical to Your Credit Union

Basic

As a credit union, you have vendors who are critical to your operations such as your core processor. Do you know which other vendors in you inventory are critical to your institution? Identifying your credit union's critical vendors is not only a best practice, but also a regulatory requirement considering they can bring a great deal of risk. Watch this session to learn more about determining criticality and next steps.

On-Demand Webinar

Understanding Vendor Business Continuity, Disaster Recovery, and Pandemic Plans

Basic

No organization is immune to business impacting events. It's critical both you and your vendors are prepared. You need to thoroughly evaluate your vendor's business continuity management program, business resiliency, disaster recovery and pandemic plans. In this webinar, you'll learn what your vendor needs to have in place to handle any incident that may impact your organization as well as how to ensure that your vendors have taken the appropriate precautions and have thoroughly tested their business continuity management plans. 

On-Demand Webinar

Deep Dive Into Vendor Business Continuity, Disaster Recovery, and Pandemic Plans

Intermediate

We're all aware how important a vendor's business continuity, disaster recovery, and pandemic plans are to third-party risk management programs, especially in lieu of the COVID-19 pandemic. There are very complex and important elements that should be reviewed and managed so you can handle any incident that may impact your organization. In this webinar, take a deep dive into what they are, what to review, when and how to review, and all things in between. 

On-Demand Webinar

How to Effectively Evaluate a Vendor's Performance

Basic

Vetting and onboarding vendors takes time, but the work doesn't stop once the contract is signed. Performance monitoring is an essential component of any successful vendor relationship. Join us for this session to learn about the essential components of vendor performance management, including understanding the differences between a service level agreement (SLA) and a key performance indicator (KPI). 

On-Demand Webinar

The Basics of Vendor Risk Assessments

Basic

Your internal inherent vendor risk assessment identifies the risk types and sizes present in a vendor relationship. However, how do you know if your vendor has the right stuff to manage those risks? Enter the vendor risk assessment which is an integral part of due diligence and ongoing risk monitoring. In this session, we’ll cover the ins and outs of vendor risk assessments, including vendor questionnaires, document collection, identified issues, and more.

On-Demand Webinar

How to Complete a Vendor Risk Assessment

Intermediate

You may understand the basics of what a vendor risk assessment is, but do you know how to complete one? Completing a risk assessment may seem daunting, but it’s a worthwhile time investment and foundation to third-party risk management in order to help protect your organization from vendor risk posed. This webinar will cover the steps you must take to complete a thorough vendor risk assessment and manage third-party risk effectively.

On-Demand Webinar

Third-Party Risk Management Reporting: Who, What, When, Where and Why

Basic

There are many variations to third-party risk management (TPRM) reporting. From board reporting, senior leadership reporting, vendor performance reporting, risk reporting, and more, there are many instances when reporting comes into play in third-party risk management. During this session, we'll break down TPRM reporting as a whole and also take a look at who, what, when, where, and why. 

On-Demand Webinar

Managing Risk Throughout the Vendor & Supplier Risk Lifecycle

Basic

Often represented as a rotating wheel, the vendor risk management lifecycle is the repeated process of identifying and managing the risks associated with your vendor, as well as the products or services they provide, for as long as you have a relationship. Join us for this session, where we’ll help you get off the wheel and onto a simpler and more straightforward path. By breaking the vendor lifecycle into three distinct stages – onboarding, ongoing monitoring, and offboarding – and giving you the necessary steps to move between each stage, you’ll be able to stop spinning and move straight towards your vendor risk management objectives.

On-Demand Webinar

Establishing an Effective Third-Party Risk Management Program at Your Credit Union

Basic

As a credit union, you likely utilize third-party vendors to improve your operation. There's a lot of value that comes from these relationships, but also a lot of risk. Third-party risk management has increasingly become important for regulatory compliance and protecting your credit union. However, it's not always clear what a mature program looks like and what proper third-party risk management entails. This session will cover some third-party risk management program basics and how to effectively manage the risk.

On-Demand Webinar

Vendor Vetting via Due Diligence and Onboarding

Basic

Before you sign the contract with a vendor, due diligence is needed to ensure they're the right fit and can live up to contractual obligations. The success of your business and its customer reputation are too important to bypass evaluating if a vendor could negatively impact operations, risk customer relationships, and put you at risk of regulatory fines. Watch this webinar to learn how to properly vet and onboard new vendors.

On-Demand Webinar

How to Manage Fourth-Party Vendors

Basic

Monitoring your fourth parties is becoming more important every day. It should be a component of your vendor risk management practices. While you may only be under contract with your third party, your third party probably has multiple vendors of their own that assist in the delivery of the product or service they are contractually bound to provide your organization. In this webinar, you'll learn why it's essential to understand your vendor's vendors (your fourth parties). 

On-Demand Webinar

What to Know About Vendor Contract Management

Basic

Contract management is an important part of your overall third-party risk management lifecycle. Done well, it can create a strategic advantage and protect your organization, customers, data, and shareholders. In this webinar, we will cover what you need to know about vendor contract management. 

On-Demand Webinar

How to Review a Vendor's Contract

Intermediate

Vendor contracts are the foundation of your vendor relationship and contain all the core information. There are specific items that you need to ensure are in your vendor contracts to not only protect your organization, but also your clients. It's important to understand all aspects of your vendor contract, but some of these items can be difficult to comprehend. Join us for this in-depth session where we will walk through how to review a vendor's contract, when and how to implement an exit strategy, and look at example language and clauses. 

On-Demand Webinar

State of Third-Party Risk Management 2022

Basic

It's very likely that your organization will need to continue to rely on third parties to remain competitive and alleviate internal processing burden. However, the state of vendor risk management is clear: regulatory expectations are increasing and companies across industries are scrambling to keep up with the changing landscape. In this session, we will walk you through the results of our annual survey giving you insight on how your peers in a variety of organizations across multiple industries are managing third-party risk.

On-Demand Webinar

Vendor ESG Oversight

Intermediate

Environmental, social and governance (ESG) is a very hot topic. With climate change, poverty, modern slavery, and more in the headlines, it’s important to understand these key issues and concerns. The important questions in our industry become, “how do these matters relate to third-party risk management? And, “how do we prepare to integrate ESG into our third-party risk management program?” Now is the time to get educated.

On-Demand Webinar

Third-Party Risk Management Best Practices for 2022

Basic

A well-run third-party risk management program is important to meet regulatory guidelines and is a critical process in any organization. Managing your third-party vendors successfully will help you avoid real risks to your operations. Watch this webinar for a review on vendor risk management best practices and a look towards the future.

On-Demand Webinar

Third-Party Risk Management Regulatory Expectations to Know

Basic

Auditors and examiners are going to expect to see a third-party risk management program that includes processes and procedures for managing the risk products, services and vendors pose to your organization. Watch this webinar and learn what auditory and regulatory ropes you should know, and which ropes to skip.

On-Demand Webinar

Improving Your Community Bank's Third-Party Risk Management Program

Basic

Between regulatory pressures and the consistently increasingly risky environment, third-party risk management has never been more important. We'll walk you through key areas to know within the vendor risk lifecycle (from risk assessments to due diligence to ongoing monitoring), so you can ensure your program is aligned to industry best practices and regulations.

On-Demand Webinar

Vendor Risk Assessment Workshop

Basic

Watch this workshop where we will walk you through an inherent and residual vendor risk assessment exercise where you can assess your own vendors. It's a great opportunity to roll up your sleeves and get your hands dirty with this online risk assessment tool.

On-Demand Webinar

Understanding and Analyzing Vendor SOC Reports

Intermediate

It's expected that you have your third party’s actual SOC reports on file, as well as a qualified review of the audit reports acknowledging your understanding of strengths and weaknesses. Register for this webinar and hear as we cover valuable information on SOC reports and reviewing them that should help your third-party risk management program.

On-Demand Webinar

Vetting Your Vendor's Cybersecurity Preparedness

Basic

By taking the necessary precautions and understanding your vendors' cybersecurity posture, you can reduce the risk of them becoming your weakest link. Register for this session and hear as the presenters cover how to review your vendor's cybersecurity to uncover if they are prepared to prevent, detect, and respond to a cybersecurity issue.

On-Demand Webinar

Ins and Outs of Vendor Due Diligence

Basic

Due diligence is fundamental to every vendor management program to effectively manage risk and meet regulatory expectations. Register for this webinar and we will walk you through the ins and outs of due diligence on your third parties. Improve your understanding of the process and how to manage it successfully.

On-Demand Webinar

Vetting and Onboarding Your Vendors

Basic

Your reputation is far too important to allow any third party in the door that can embarrass you, risk customer relationships and put you at risk of regulatory fines. Register for this webinar and you’ll learn how to vet and onboard a vendor successfully and efficiently to not bottleneck operations as well as tips and techniques for handling the process.

On-Demand Webinar

Reviewing Your Vendor's Financial Health

Intermediate

On-Demand Webinar

Assessing Vendor Complaints for Oversight

Basic

On-Demand Webinar

The Basics of Vendor Risk Assessments

Basic

On-Demand Webinar

State of Third-Party Risk Management 2021

Basic

On-Demand Webinar

Third-Party Risk Management Best Practices for 2021

Basic

A well-run third-party risk management program is important to meet regulatory guidelines and is a critical process your organization should be aware of. Watch this on-demand webinar to finish off the year with a review on vendor risk management best practices and a look towards the future.

On-Demand Webinar

Virtual Vendor Due Diligence Site Visits

Basic

On-site visits may be on hold, but the industry has found alternatives. There are ways to still verify that your vendors are meeting your organization’s expectations and are regulatory compliant. View for this webinar, featuring experts from Wipfli, to learn how to manage the process.

On-Demand Webinar

Vendor Due Diligence and Contract Management Best Practices

Basic

On-Demand Webinar

Third-Party Cyber Risks Are Increasing – Better Bring Your A-Game

Basic

Your organization owns the responsibility of protecting customer data and must assess the risks posed. While outsourcing to third parties has great benefits, it can lead to consequences if data isn’t properly managed. Watch this expert webinar to hear how to bring your A game to cybersecurity.

On-Demand Webinar

Vetting Your Vendor's Cybersecurity Preparedness

Basic

In this session, the presenters will cover how to review your vendor's cybersecurity to uncover if they are prepared to prevent, detect, and respond to a cybersecurity issue.

On-Demand Webinar

Defining Proper Vendor Due Diligence Requirements

Basic

Due diligence is fundamental to every vendor management program. Watch this session and we will walk you through what you should be doing for due diligence on your third parties.

On-Demand Webinar

Vendor Risk Management - The Basics

Basic

In order to lower the level of risk a vendor poses, you should implement strong vendor risk management practices, including an oversight and ongoing monitoring program. In this webinar that was hosted by PRMIA and Venminder gave attendees an understanding of a sound program, with useful tips and ideas you can use to improve your own. 

On-Demand Webinar

Creating or Maturing Your Vendor Risk Management Program

Basic

Between regulatory pressures and the latest increasingly risky environment from the pandemic, vendor management has never been more important. The stakes are high, so now is the time to get a grasp on this topic. This on-demand session covers a tried-and-true approach to creating a strong program.

On-Demand Webinar

Vendor Complaints: A Cause for Enforcement Actions

Basic

While you have outsourced a process, when it comes to handling something such as consumer complaint data, the buck stops with you. Watch this webinar to hear the importance of vendor customer complaints and how to handle them.

On-Demand Webinar

Vendor Cybersecurity Preparedness in a Pandemic World

Basic

Now, more than ever, you need to ensure your organization is properly protected. In this session, we cover what you need to know to secure a completely remote workforce, how that affects an organization’s third-party risk management, and vendor pandemic planning for cybersecurity.

On-Demand Webinar

New Data Reveals How Organizations Are Managing Third-Party Risk

Basic

Gain insight and learn best practices as industry experts review in this on-demand webinar session how financial services and financial technology companies are managing third-party risk management in today’s increasing regulatory and risky climate.

On-Demand Webinar

Third-Party Risk Management Best Practices for 2020

Basic

Managing your vendors well can help you avoid real risks to your reputation and operations. Finish off the year with a review on vendor risk management best practices and look towards the future.

On-Demand Webinar

What the Board Needs to Know About Third Party Risk Management

Basic

This session provides an overview of the components of a comprehensive third-party risk management program. You’ll learn what board members need to understand about third-party risk and what should be expected regarding regular reporting. 

On-Demand Webinar

Vendor Management Best Practices from 2018 and What to Expect in 2019

Basic

Third-party risk management was a high priority for the financial services industry this year – and rightly so. Managing your vendors well can help you avoid real risks to your reputation and operations. Watch to review vendor management best practices from 2018 and look towards the future. 

On-Demand Webinar

Writing Effective Vendor Management Policy and Program Documents Webinar

Basic

Watch where we cover the first essential step in building an exam proof vendor management operation: your vendor risk management policy and program documents. Learn what to know when writing a policy, tips on writing a program, fundamentals of the documents, and creation logistics.

On-Demand Webinar

Vendor Due Diligence and Contract Management: What You Should Know Webinar

Basic

View to learn important points about vendor due diligence and contract management. We cover the importance of vendor due diligence, vendor contract management, major elements and best practices, common mistakes, and more.

On-Demand Webinar

CBWN Webinar: Vendor Outsourcing: Due Diligence, Contracts, Risks & Oversight

Basic

This webinar session featured Venminder and Community Bankers Webinar Network. The topics were designed for attendees to learn to identify, manage, and mitigate outsourcing risk through due diligence, contract management, risk assessments, and oversight management.

On-Demand Webinar

AB Webinar: Bringing your “A” game to third party risk management

Basic

In this session, presenters take you through what you should be doing regarding third-party risk management, requirements, what regulators expect, industry information, gaps, and actionable steps you should be taking for third-party risk management.

On-Demand Webinar

CBANC Webinar: Defining Your Third Party Due Diligence Requirements

Basic

This CBANC and Venminder webinar featured industry experts that covered vendor due diligence. We covered the hazards of incomplete or ineffective due diligence, items to gather and analyze, fourth party due diligence challenges, and other important topics.

On-Demand Webinar

CUWN Webinar: FFIEC Third-Party Risk Guidance: Appendix J for Vendor Business Continuity Issues & More

Basic

Watch this on-demand continuing education webinar featuring Venminder and Credit Union Webinar Network. Leading industry experts discuss various third-party risk management topics and give best practices tips for organizations to be more successful with vendor risk management.

On-Demand Webinar

CBWN Webinar: FFIEC Third-Party Risk Guidance: Appendix J for Vendor Business Continuity Issues & More

Basic

Watch this on-demand continuing education webinar featuring Venminder and Community Bankers Webinar Network. Leading industry experts discuss various third-party risk management topics and give best practices tips for organizations to be more successful with vendor risk management.

On-Demand Webinar

The Importance of Third Party Risk Management in Consumer Finance Webinar

Basic

View this on-demand session now. We discussed the risks of not performing effective due diligence and oversight are too high to ignore, how third-party risk management can help protect your brand, deliver strategic advantages, and protect your most valuable asset - the relationship with your consumer.

On-Demand Webinar

Best Practices And Emerging Trends In Third Party Risk Management Webinar

Basic

This complimentary webinar session with Venminder and American Banker covers current regulatory expectations from CFPB and OCC guidance, best practices to address challenges, board and senior management responsibilities, and legal insight on emerging trends.

On-Demand Webinar

Risk Management of Third Party/Service Provider Relationships

Basic

Download this on-demand webinar presented by Ballard Spahr to learn about the latest regulatory focus and evolving expectations of third-party risk. Speakers also cover best practices and tips for how organizations can comply with the latest regulatory requirements.

On-Demand Webinar

What the Board Needs to Know About Vendor Management Webinar

Basic

This webinar strategically covered what credit union board members need to understand about third-party risk. The presentation included several valuable takeaway resources for attendees, such as a board member specific third-party risk cheat sheet. 

On-Demand Webinar

Growing Pressures of Third Party Risk Management Webinar

Basic

From the frequency of data breaches to unfair practices, enforcement actions from regulators are on the rise. Experts from Venminder, American Banker, and RCB Bank strategically discussed where to start and what gaps to avoid in vendor risk management.