News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Third-Party Risk ManagementScope This guide shows you how to build a third-party risk management program that satisfies SS2/21, PS26/2, DORA, and the EBA Guidelines on ICT and security risk management. It s tailored for financi
Third-Party Risk ManagementThird-party risk teams are testing AI tools right now. Some are seeing real time savings. Others find their AI-powered platform can t answer basic questions about vendor documentation. The issue isn t
Third-Party Risk ManagementMost third-party risk programs can tell you everything about a supplier: its SOC 2 status, financial health, geographic footprint, and cybersecurity posture. But ask what happens when that supplier go
Third-Party Risk ManagementYour vendor questionnaire hasn t changed since 2019, but vendors are now deploying advanced AI models that could alter the speed and economics of cyber risk faster than your defenses can adapt. Financ
Get weekly security insights and compliance updates delivered to your inbox.
Third-Party Risk ManagementIf you re aiming to comply with the EU Corporate Sustainability Due Diligence Directive (CSDD), you might think rigorous supplier audits are the solution. Conduct site visits, review policies, and che
Third-Party Risk ManagementWhen your Third-Party Risk Management (TPRM) program treats every vendor the same, you re either over-investing in low-risk relationships or under-managing critical ones. You need a structured way to
Third-Party Risk ManagementThe Securities and Exchange Commission (SEC) is sending letters to technology companies, probing their relationships with distributors, resellers, and other third parties in high-risk corruption areas
Third-Party Risk ManagementWhen Deputy Attorney General Lisa Monaco referred to sanctions enforcement as the new FCPA in summer 2022, it marked a significant shift in the DOJ s focus on economic crime. Yet, many third-party ris
Third-Party Risk ManagementThe Corporate Sustainability Due Diligence Directive (CSDDD) was formally approved by the European Council on May 24. It s a unique regulation that goes beyond typical supply chain concerns like cyber
Third-Party Risk ManagementThe Challenge In early May, a consumer lending company discovered that a third-party cloud platform storing customer data had been breached. The stolen records included names, Social Security numbers,
Third-Party Risk ManagementYour vendor risk team is constantly pitched AI features that promise to transform your third-party assessments or eliminate manual reviews entirely. While these claims sound impressive in demos, they
Third-Party Risk ManagementThe Conduent breach exposed sensitive information of about 25 million individuals and cost the vendor roughly $25 million in response expenses. More importantly for your program, every organization re
Third-Party Risk ManagementWhat Happened In 2023, 61% of organizations reported breaches involving third-party vendors. This isn t an isolated incident; it s a pattern showing systemic failures in assessing and monitoring vendo
Third-Party Risk ManagementWhen Klue s OAuth integration was compromised in June 2026, attackers used a dormant credential to harvest tokens and access data from connected Salesforce environments. The breach didn t just affect
