Software

Gain a 360-degree view of third-party risk by using our SaaS software to centralize, track, automate, assess and report on your vendors. 

Managed Services

Let us handle the manual labor of third-party risk management by collaborating with our experts to reduce the workload and mature your program. 

Overview
Document Collection
Policy/Program Template/Consulting
Virtual Vendor Management Office
Vendor Site Audit

Ongoing Monitoring

Let us handle the manual labor of third-party risk management by collaborating with our experts.

VX LP Sequence USE FOR CORPORATE SITE-thumb
Venminder Exchange

As Venminder completes assessments for clients on new vendors, they are then made available inside the Venminder Exchange for you to preview scores and purchase as you need.

CREATE FREE ACCOUNT

Use Cases

Learn more on how customers are using Venminder to transform their third-party risk management programs. 

Industries

Venminder is used by organizations of all sizes in all industries to mitigate vendor risk and streamline processes

Why Venminder

We focus on the needs of our customers by working closely and creating a collaborative partnership

1.7.2020-what-is-a-third-party-risk-assessment-FEATURED
Sample Vendor Risk Assessments

Venminder experts complete 30,000 vendor risk assessments annually. Download samples to see how outsourcing to Venminder can reduce your workload.

DOWNLOAD SAMPLES

Resources

Trends, best practices and insights to keep you current in your knowledge of third-party risk.

Webinars

Earn CPE credit and stay current on the latest best practices and trends in third-party risk management.  

See Upcoming Webinars

On-Demand Webinars

 

Community

Join a free community dedicated to third-party risk professionals where you can network with your peers. 

Weekly Newsletter

Receive the popular Third Party Thursday newsletter into your inbox every Thursday with the latest and greatest updates.

Subscribe

 

Venminder Samples

Download samples of Venminder's vendor risk assessments and see how we can help reduce the workload. 

resources-whitepaper-state-of-third-party-risk-management-2023
State of Third-Party Risk Management 2023!

Venminder's seventh annual whitepaper provides insight from a variety of surveyed individuals into how organizations manage third-party risk today.

DOWNLOAD NOW

Varying Levels of Expertise in Vendor Oversight

7 min read
Featured Image

If an organization isn’t truly onboard with vendor management, they allocate team members that lack vendor management experience. Unfortunately, this is not surprising. So, there are a variety of vendor manager types and levels of expertise in the industry to be aware of. 

Let’s go through them in more detail.

Types of Vendor Managers

  1. Vendor Manager Type 1: Home Grown. They’ve worked up the ranks within the organization and understand the core business processes, including the vendor products used, however, the actual process of vendor management is an entirely new discipline. 
  2. Vendor Manager Type 2: The Part-Timer. The vendor management role is an additional responsibility to the employees existing list of responsibilities and duties. 
  3. Vendor Manager Type 3: The Pricing Guru. This is not a vendor manager. This is a pricing/negotiation manager. Risk, Product, Service – these factors fall on the lower level of their priority list. They live for the best price. Driving down cost is an admirable goal of any business, but it should be weighed against all the other variables. A shrewd board understands risk and reward, and this type of manager can cause serious havoc on an operation unless there are checks and balances in place. 
  4. Vendor Manager Type 4: The Outsider. This type really could vary, but for the point of this exercise, I am going to assume that the outsider may have some vendor management or contract management experience. That’s a good start. However, if this is the first time working in a financial institution and they have limited experience with the particular vendors you use...then they’ll have a lot of work to do to learn the regulations which govern your industry and that of those vendors. The learning curve could be steep, not impossible, but worthy of your attention. 

Being aware of these types of vendor managers can help understand how other departments are handling vendor management and the different perspectives.  

Example Issues With Each of the 4 Vendor Manager Types 

  1. The Home Grown: Experienced in the existing vendor panel that the company used in the core business, the Home Grown was too close to prior relationships and lacks the vendor management knowledge to look past the relationship aspect of the vendor partnership. 

    While they understood the products and 
    services offered and knew the regional vendor account manager, lacking the regulatory framework and failing to develop an internal risk assessment, it hinders them from fully developing a vendor management program. They are the first line of defense for the business and the point of contact when something goes wrong with a product or SLA. The vendor management program doesn’t mature past the first line of defense. 
  2. The Part-Timer: Already holding a very demanding position, the added pressure of managing hundreds of vendors is simply too much. Contracts with auto-renews are not caught in time to manage an exit strategy and result in company resources being drained for additional terms with monthly minimums, despite the lack of product usage. The part-time vendor manager doesn’t have the resources to succeed despite being capable of the actual requirements. 
  3. The Pricing Guru: Blinded by price, the Pricing Guru successfully negotiates pricing on a product which was charged to the consumer on the Loan Estimate (formerly known as the good faith estimate or GFE). All would be okay, but they neglect to inform Systems and Compliance that this change in pricing had to be updated, otherwise the consumer will be overcharged. This results in a compliance headache and refunds to thousands of consumers. Regulatory compliance knowledge can go a long way in a robust third party risk oversight program.
  4. The Outsider: The Outsider finds it difficult initially to know enough to be relevant in vendor management discussions based on lack of regulatory compliance knowledge. Unless the Outsider has a working knowledge of the vendor and is aware of the risks presented using them, then it may prove difficult to apply the correct levels of oversight. Oftentimes, it isn’t enough to simply manage the contract approval process. Transactional level knowledge of the vendor product will help determine oversight requirements. This level of expertise will quickly bring the Outsider up to speed.

The four examples really show several aspects of a vendor management department. Vendor Performance Management, Vendor Contract Management, Procurement and Vendor Administration...the list could quite easily go on since third party risk management has many layers and requires many different processes to perform the day to day vendor management operation. Therefore, it is so important to develop a team that is well rounded and can handle the many different facets of third party risk.

To learn more about vendor oversight, download our free infographic.

Download Now

Subscribe to Venminder

Get expert insights straight to your inbox.

Ready to Get Started?

Schedule a personalized solution demonstration to see if Venminder is a fit for you.

Request a Demo