I'm often asked what sort of things a third party risk or compliance manager might be asked to have ready for an examination that's going to touch on third party risk management. Well, there's good news and there's bad news.
The good news is unless...
Having an established internal audit program at an organization is a great way to identify and discover gaps or items that may have been missed before, such as a disconnect between your vendor management policies and procedures and the final work...
Check out this week's recommended vendor management related news articles. They include updates on PCI issues, more maneuverings at the CFPB, California and New York both weighing in on regulatory expectations and other fun stuff.
