Tagged Third Party Risk.
Every article we've tagged with "Third Party Risk".
From the team.
Risk ManagementNew vendor risk assessment with SIG questionnaire in 2022
The 2022 SIG questionnaire offers updated tools to streamline third-party risk assessments. Developed by Shared Assessments, the SIG Lite and Core versions provide flexible, control-focused evaluations mapped to major regulations and security standards. Enhancements include reduced questions, new domain categories like ESG and fourth-party risk, and expanded regulatory mappings. RiskXchange leverages these assessments to provide real-time visibility, passive data insights, and automated risk ratings—enabling businesses to manage third-party risk efficiently and proactively.
Read more
Risk ManagementThe Cyber Security and Resilience Bill: What It Means for Your Suppliers
The UK's Cyber Security and Resilience Bill has reached committee stage in the Lords — and for the first time, it brings your suppliers and managed service providers directly into scope. Here's what security and procurement leaders need to do now.
Read more
Risk ManagementVendor Risk Management Audit Checklist
This guide explores the essentials of a Vendor Risk Management (VRM) audit checklist, helping organisations identify, assess, and mitigate third-party risks. It outlines the key components of a successful VRM program—such as an operating model with three lines of defence, vendor risk policies, lifecycle management, and due diligence protocols—ensuring vendors do not become security liabilities. It also highlights how RiskXchange supports organisations with an automated, AI-powered platform to continuously monitor vendors and enforce cybersecurity best practices.
Read more
CybersecurityThe Secure Vendor Offboarding Process: A Strategic Framework for 2026
A secure vendor offboarding process is no longer just an administrative task — it’s a critical defence against ghost access, dormant API keys, and hidden supply chain vulnerabilities. This guide explores how organisations can move beyond manual checklists to implement an AI-driven de-integration framework that eliminates zombie vendors, verifies data destruction, and strengthens operational resilience in 2026.
Read more
Risk ManagementBenchmarking Your Vendor Risk Management Program Maturity: A 2026 Strategic Guide
Most vendor risk programmes in 2026 are still run by just one or two people managing hundreds of suppliers—while 60% of breaches now originate in the supply chain. This guide breaks down how to benchmark your vendor risk management maturity, move beyond manual spreadsheets, and transition to an AI-driven, continuous monitoring model. Learn the five maturity levels, identify where your programme stands, and build a clear roadmap toward proactive, real-time resilience that satisfies regulators like DORA and upcoming FCA requirements.
Read more
Risk ManagementData Protection Risk Assessment Guide: Securing the 2026 Data Supply Chain
Modern data protection risk assessment is no longer a static compliance exercise—it is a continuous, AI-driven process for securing the entire data supply chain. This 2026 guide explains how to identify third-party risks, eliminate blind spots, and transition from manual audits to real-time Cybersecurity Ratings that provide full visibility into how personal data moves across your ecosystem.
Read more