Three TPRM myths worth busting
By 
Aaron Nicodemus2025-06-10T15:26:00
There are stories we tell ourselves in third-party risk management (TPRM) to make ourselves feel better about the corners we cut.
One of those stories is that the longer the questionnaire, the better. We’ve got everything covered this way. Except… Who has time to properly review all those answers? And are all those answers really addressing the risks we want addressed by this vendor?
Related articles
-
ArticleRansomware gang BlackSuit hit with major takedown after targeting 450 U.S. victims
The BlackSuit ransomware organization has taken a major hit under a U.S.-led, global law enforcement operation that seized the criminal group’s servers and assets, the Department of Justice said Monday.
-
Resourcee-Book: Tackling Third Party Risk In A Global World
TPRM has always been a tough subject, requiring regular monitoring and audits to be done right. But until recently, it was something companies chose to do.
-
WebcastCPE Webcast: Third party due diligence: A practical deep dive
A corporate code of conduct can be internally enforced, but how do you ensure third parties measure up to your values and requirements?