Blog

Third Party Risk Management Benchmarking Survey Results

Earlier this week we published the results of a survey that we conducted with the Center for Financial Professionals. With over 200 respondents from around the globe, the survey was designed to take a snapshot of the state of third party risk management, and to help firms develop their road-map to maturity, and support with planning, resourcing and direction.

The survey provided a great deal of insight, and we’ll be taking a deep dive into some of the results together with the implications for TPRM programs over the coming weeks.

We will also share the results of some polls that we conducted at the CEFPRO Vendor & Third Party Risk Conferences in New York and London where we launched the results. These provide an interesting cross-Atlantic comparison between peers.

But first to the survey results – which revealed gaps between regulatory expectation and the reality associated with third party risk programs. What looks good in theory, is often a lot harder in practice.

Read More

Topics: third party risk management, benchmarking, governance, third party governance, tprm, Financial Services, supplier risk, vendor risk, concentration risk, fourth party risk, survey, OCC, cyber risk

Expert Interview: Tom Garrubba on Six Ways Collaboration Can Enhance Your TPRM Program

Collaboration is a term that makes people either cheer or wince. However, today collaboration is essential to be a successful third party risk manager – the discipline has moved well beyond administrative box-ticking. Now, a strong culture of collaboration can help create the right environment to foster TPRM program excellence, and drive real value for organizations.

Read More

Topics: third party risk management, board of directors, board accountability, benchmarking, governance, third party governance, tprm, risk assessment, third party supplier, supplier risk, vendor risk, risk appetite, shared assessments, occ compliance, GDPR, third party risk assessment, standardization programs, gdpr processor, FFIEC, third party risk regulators, regulatory frameworks, internal audit, risk and compliance, third party risk, third party compliance, third party vendor

Expert Interview: Victoria Munoz-Titos on Seven Changes we can Expect to See in TPRM by 2021

Third party risk management (TPRM) could be set to evolve at lightning speed over the next five years, according to Victoria Munoz-Titos, former EMEA, Risk and Control Services at AIG in London. The changes won’t just be accelerated by regulatory demands either. Rather, they will be propelled by a transformation to the way organizations work together, as financial services firms incorporate outsourcing and other types of third party relationships even deeper into their business strategies. Below are the top seven trends that Munoz-Titos sees changing the way firms engage with TPRM and their third-party relationships:

Read More

Topics: third party risk management, board of directors, board accountability, benchmarking, governance, third party governance, tprm, risk assessment, third party supplier, supplier risk, vendor risk, risk reporting, risk appetite

Expert Interview: John Bree on the Top Five TPRM Program Mistakes Firms Often Make

Third party risk management (TPRM) is a relatively new discipline for many financial services firms and so it’s no surprise that organizations are still navigating their way. As firms establish their third party risk programs, there’s many common pitfalls that they can fall into. Knowing about these helps you avoid them, so Aravo recently spent some time with third party management expert, John Bree, to expose some of the more common missteps that he has seen organizations make when it comes to setting up, or enhancing, a TPRM program. 

Read More

Topics: third party risk management, board of directors, board accountability, benchmarking, governance, third party governance, tprm, Financial Services, risk assessment, third party supplier, supplier risk, vendor risk

Cyber resilience and supplier risk: moving beyond compliance

In a speech last week at the Cyber Security Summit and Expo 2017, Nausicaa Delfas, Chief Operating Officer at the FCA, called out cyber risk as one of the FCA’s top priorities and noted its close intersection with supplier risk, and third, fourth and fifth party risk.

Read More

Topics: third party risk management, board of directors, board accountability, governance, third party governance, FCA, supplier risk, cyber risk, cyber resiliance

Third Party Risk Management - Meeting the Expectations of the Board

With the strategic importance of engaging third parties in today's business landscape, coupled with the level of risk that they can bring to the enterprise, it should not be surprising that third party risk management is attracting greater focus from the C-suite and the Board of Directors.

According to the Institute of Collaborative Working, up to 80% of direct and indirect operating costs of a business can come from third parties, while up to 100% of revenue can come from alliance partners, franchisees and sales agents.

Download e-Book

Read More

Topics: third party risk management, board of directors, board accountability, benchmarking, governance, third party governance

Whetting the Appetite in Third Party Risk

A snapshot of the results of two new audience surveys suggests that the concept of “risk appetite” within the third-party risk management framework is still finding its feet. Attendees at a pair of June New York and London conferences, aimed at the financial services industry’s third party risk professionals, responded very similarly to three key questions.

Read More

Topics: third party risk management, risk and compliance, Financial Services, compliance risk, reputational risk, risk management, tprm, event, EMEA, governance, compliance programs, third party risk, risk appetite, survey

Board Reporting, Risk Scorecards, Cybersecurity and more – takeaways from CEFPROs Vendor and Third Party Risk USA Conference

Earlier this month, I attended and chaired at the Center for Financial Professional’s conference on Vendor and Third Party Risk USA in New York. The two-day event highlighted the complexity that third party risk managers face, with topics as far ranging as cyber-risk at fourth parties, to applying third party risk frameworks to intra-company organizations. The event also demonstrated that the discipline is having to evolve and mature fast in order to keep pace with the changing digital landscape as well as ongoing regulatory change. Here are my top takeaways from the event, which I hope you will find of interest.

Read More

Topics: third party risk management, risk and compliance, Anti-bribery & Anti-corruption, Financial Services, High Technology, business case, Responsible Sourcing, compliance risk, reputational risk, risk management, tprm, event, EMEA, governance, compliance programs, third party risk

CEFPRO's Vendor & Third Party Risk EMEA conference - Top 10 Key Takeaways for Third Party Risk

This week, I had the pleasure of chairing Day one of the Center for Financial Professional’s conference on Vendor and Third Party Risk EMEA. The conference brought together insights about the evolution of the discipline as well as some key best practices. Here are my top ten takeaways from the event that I would like to share.

Read More

Topics: third party risk management, risk and compliance, Anti-bribery & Anti-corruption, Financial Services, High Technology, business case, Responsible Sourcing, compliance risk, reputational risk, risk management, tprm, event, EMEA, governance, compliance programs, third party risk

Empowered Third Party Due Diligence: Aravo and Dow Jones Risk & Compliance

With continued bribery and corruption enforcement actions high on the agenda of the regulators, companies should be looking to raise the bar on the due diligence of their third parties, both at onboarding and as part of a continuous monitoring process.

Read More

Topics: third party risk management, Dow Jones, due diligence, risk and compliance, Anti-Bribery and Anti-Corruption, regulatory risk, governance, ABAC, audit, workflows, risk-scoring, reporting