Blog

Expert Interview: Tom Garrubba on Six Ways Collaboration Can Enhance Your TPRM Program

Collaboration is a term that makes people either cheer or wince. However, today collaboration is essential to be a successful third party risk manager – the discipline has moved well beyond administrative box-ticking. Now, a strong culture of collaboration can help create the right environment to foster TPRM program excellence, and drive real value for organizations.

Read More

Topics: risk and compliance, third party risk management, GDPR, board of directors, governance, tprm, third party risk, risk appetite, board accountability, third party governance, benchmarking, supplier risk, third party supplier, vendor risk, occ compliance, risk assessment, shared assessments, third party risk assessment, standardization programs, gdpr processor, third party risk regulators, regulatory frameworks, internal audit, third party compliance, third party vendor, FFIEC

Expert Interview: Victoria Munoz-Titos on Seven Changes we can Expect to See in TPRM by 2021

Third party risk management (TPRM) could be set to evolve at lightning speed over the next five years, according to Victoria Munoz-Titos, former EMEA, Risk and Control Services at AIG in London. The changes won’t just be accelerated by regulatory demands either. Rather, they will be propelled by a transformation to the way organizations work together, as financial services firms incorporate outsourcing and other types of third party relationships even deeper into their business strategies. Below are the top seven trends that Munoz-Titos sees changing the way firms engage with TPRM and their third-party relationships:

Read More

Topics: third party risk management, board of directors, governance, tprm, risk appetite, board accountability, risk reporting, third party governance, benchmarking, supplier risk, third party supplier, vendor risk, risk assessment

Expert Interview - John Bree on the Top Five TPRM Program Mistakes Firms Often Make

Third party risk management (TPRM) is a relatively new discipline for many financial services firms and so it’s no surprise that organizations are still navigating their way. As firms establish their third party risk programs, there’s many common pitfalls that they can fall into. Knowing about these helps you avoid them, so Aravo recently spent some time with third party management expert, John Bree, to expose some of the more common missteps that he has seen organizations make when it comes to setting up, or enhancing, a TPRM program. 

Read More

Topics: Financial Services, third party risk management, board of directors, governance, tprm, board accountability, third party governance, benchmarking, supplier risk, third party supplier, vendor risk, risk assessment

Whetting the Appetite in Third Party Risk

A snapshot of the results of two new audience surveys suggests that the concept of “risk appetite” within the third-party risk management framework is still finding its feet. Attendees at a pair of June New York and London conferences, aimed at the financial services industry’s third party risk professionals, responded very similarly to three key questions.

Read More

Topics: risk and compliance, Financial Services, third party risk management, compliance programs, risk management, governance, reputational risk, compliance risk, tprm, event, third party risk, EMEA, survey, risk appetite

Evaluating Third Party Risk and Performance

Best practice approaches to risk and performance scoring and automated workflow

As businesses have evolved and matured, so too has their approach to third parties. In the past, companies focused more on transactional ‘supplier’ relationships, typically for raw materials or ‘parts’. However, today third party relationships form a much deeper and far-reaching part of the strategic and operational ecosystem of any Global 2000 organization.

DOWNLOAD THE WHITE PAPER

Read More

Topics: risk and compliance, third party risk management, Global 2000, compliance risk, tprm, business complexity, scale, business change, business scale, white paper, third parties, risk-scoring, performance scoring, automated workflows, risk dashboard

Board Reporting, Risk Scorecards, Cybersecurity and more – takeaways from CEFPROs Vendor and Third Party Risk USA Conference

Earlier this month, I attended and chaired at the Center for Financial Professional’s conference on Vendor and Third Party Risk USA in New York. The two-day event highlighted the complexity that third party risk managers face, with topics as far ranging as cyber-risk at fourth parties, to applying third party risk frameworks to intra-company organizations. The event also demonstrated that the discipline is having to evolve and mature fast in order to keep pace with the changing digital landscape as well as ongoing regulatory change. Here are my top takeaways from the event, which I hope you will find of interest.

Read More

Topics: Anti-bribery & Anti-corruption, risk and compliance, Financial Services, third party risk management, Responsible Sourcing, compliance programs, business case, High Technology, risk management, governance, reputational risk, compliance risk, tprm, event, third party risk, EMEA

CEFPRO's Vendor & Third Party Risk EMEA conference - Top 10 Key Takeaways for Third Party Risk

This week, I had the pleasure of chairing Day one of the Center for Financial Professional’s conference on Vendor and Third Party Risk EMEA. The conference brought together insights about the evolution of the discipline as well as some key best practices. Here are my top ten takeaways from the event that I would like to share.

Read More

Topics: Anti-bribery & Anti-corruption, risk and compliance, Financial Services, third party risk management, Responsible Sourcing, compliance programs, business case, High Technology, risk management, governance, reputational risk, compliance risk, tprm, event, third party risk, EMEA

Aravo Solutions Recognized as Category Leader in Chartis Research RiskTech Quadrant® for Third Party Risk Management Systems 2017

Solution also offers the industry’s greatest ‘completeness of offering’

We’re very pleased to report that Aravo Solutions has been recognized as a Category Leader in the Chartis Research RiskTech Quadrant® for Third Party Risk Management Systems 2017.

According to Chartis, “Category leaders are considered to be risk technology vendors that have the necessary depth and breadth of functionality, technology, and content, combined with the organizational characteristics to capture significant market share by volume and value.”

 

 DOWNLOAD REPORT

 

Read More

Topics: third party risk management, tprm, chartis risktech, category leader

Third Party Risk Management in the Dynamic of Business Scale, Complexity, and Change

Why TPRM objectives fail – and what Global 2000 companies need to succeed

Even though large organizations have invested time, attention, and resources into third party risk management (TPRM) over the past decade, it’s clear that many programs are failing to deliver on their primary objective - keeping the organization safe.

DOWNLOAD THE WHITE PAPER

Read More

Topics: Anti-bribery & Anti-corruption, risk and compliance, third party risk management, Data Security & Privacy, Responsible Sourcing, Global 2000, compliance risk, tprm, business complexity, scale, business change, business scale, white paper, third parties

What do I need to ask when buying a Third Party Risk Management (TPRM) solution?

Third party risk management is a complex discipline, that combined with the scale, complexity, and change dynamics of any Global 2000 organization, can often lead to false starts with technology implementations.

It’s important to get enterprise software purchase decisions right – they are the fulcrum of successful third party risk programs for the business, they impact on the adoption and performance of many internal users across the enterprise, and they can have an impact on the careers of those selecting them.

DOWNLOAD THE BUYER'S GUIDE

Read More

Topics: FCPA, risk and compliance, Anti-Bribery and Anti-Corruption, OCC, third party risk management, Data Security & Privacy, Registration & Qualification, Conflict Minerals, GDPR, General Data Protection Regulation, aravo, ABAC, risk mitigation, sustainable procurement, regulatory risk, tprm