Those in accounting who want to understand better the inherent risks, threats and vulnerabilities, and internal control best practices associated with the use of blockchain technology now have a first-of-its-kind framework to follow.
Third Party Risk
Compliance lessons from recent nine-figure FCPA settlements
Walmart, TechnipFMC, Fresenius—just to name a few—have all fallen prey to the Foreign Corrupt Practices Act in a record year of jacked-up enforcement and sky-high penalties.
Survey: Companies believe they’ve underinvested in TPRM
A new survey published by Deloitte highlights the latest trends—both opportunities and challenges—in companies’ journey toward a more mature extended enterprise risk management program, one in which third-party risk management is integrated across the firm and led from the top.
DoorDash data mishap showcases hazards of third-party vendors
DoorDash announced an incident of unauthorized third-party access to user data—a reminder companies need to mind the cyber-security of vendors in addition to their own.
Taming third-party risk with digital
Damaging headlines like this have grown steadily in recent years. Triggered by third parties – such as suppliers, joint-venture partners, and contractors – and exacerbated by longer, more complex supply chains, compliance failures are becoming commonplace. Especially as regulators extend their reach. Building a sustainable framework for third-party risk using emerging technologies and advanced analytics is the way to go.
Shared Assessments Program enhances TPRM framework
The Shared Assessments Program announced a new addition to its TPRM framework covering the subjects of periodic assessments and continuous monitoring.
Mastercard reveals data breaches in third-party loyalty program
Mastercard is investigating two data breaches relating to a loyalty program it ran in Germany following a leak of personal information that saw customers’ names, addresses, and credit card numbers circulating on the internet.
Honeywell discloses Petrobras-related FCPA probe
Honeywell International announced in a regulatory filing that it is being investigated by U.S. and Brazilian authorities as to whether the company’s use of third parties in Brazil violated the Foreign Corrupt Practices Act.
New CyberGRX feature addresses TPRM
CyberGRX, a third-party cyber-risk management platform provider, announced the release of a new feature that provides users with immediate visibility into potential threats in their ecosystem.
ProcessUnity, DVV Solutions partner on third-party risk
ProcessUnity has added third-party risk management specialist DVV Solutions to its Partner Program as a managed-service provider.


