Damaging headlines like this have grown steadily in recent years. Triggered by third parties – such as suppliers, joint-venture partners, and contractors – and exacerbated by longer, more complex supply chains, compliance failures are becoming commonplace. Especially as regulators extend their reach. Building a sustainable framework for third-party risk using emerging technologies and advanced analytics is the way to go.
Third Party Risk
Shared Assessments Program enhances TPRM framework
The Shared Assessments Program announced a new addition to its TPRM framework covering the subjects of periodic assessments and continuous monitoring.
Mastercard reveals data breaches in third-party loyalty program
Mastercard is investigating two data breaches relating to a loyalty program it ran in Germany following a leak of personal information that saw customers’ names, addresses, and credit card numbers circulating on the internet.
Honeywell discloses Petrobras-related FCPA probe
Honeywell International announced in a regulatory filing that it is being investigated by U.S. and Brazilian authorities as to whether the company’s use of third parties in Brazil violated the Foreign Corrupt Practices Act.
New CyberGRX feature addresses TPRM
CyberGRX, a third-party cyber-risk management platform provider, announced the release of a new feature that provides users with immediate visibility into potential threats in their ecosystem.
ProcessUnity, DVV Solutions partner on third-party risk
ProcessUnity has added third-party risk management specialist DVV Solutions to its Partner Program as a managed-service provider.
Globanet Designated Third Party (D3P) Guidelines
In the last five years, FINRA, the primary self-regulatory organization for broker-dealers, has focused on prioritizing designated third-party compliance.
Poll shows room for improvement on training third parties
Results from the Compliance Week and Refinitiv survey revealed some surprising facts about companies’ third-party training; based on those results, the following article offers suggestions for how to enhance the process.
Identifying high-risk third parties a nuanced exercise
Determining which business partners to flag for enhanced due diligence all depends on the quality, and sources, of your data.
Third Party Risk: Driving Cross-Functional Alignment Across the Vendor Lifecycle
Outsourcing is nothing new, but recently we’ve seen companies increasingly rely on a network of third-party vendors to help them compete.
