Manage the Complete Vendor Lifecycle
Easily manage your third-party risk management activities across the vendor lifecycle – onboarding, ongoing management, offboarding.
Take a Product Tour to See Venminder in ActionNew
Outsource Vendor Control Assessments
Order due diligence assessments on your vendors that include qualified risk ratings and reviews from Venminder experts.
Continuously Monitor with Risk Intelligence
Seamlessly combine risk intelligence data to monitor for risks within cybersecurity, business health, financial viability, privacy, ESG and more.
Venminder experts deliver over 30,000 risk-rated assessments annually. Download samples to see how outsourcing to Venminder can reduce your workload.
Download free samples →
Quickly get a program in place to manage vendor risks.
Centralize to ensure program requirements are met.
Identify risk then reduce and manage it.
Hand off your document collection, control assessments and tasks.
Meet regulatory agency issued guidance.
Empower vendor owners to mitigate vendor risks.
Learn how our customers have managed their vendors and risk with Venminder.
Check out independent research that validates Venminder's market leader position.
See why Venminder is uniquely positioned to help you manage vendors and risk.
Our team is committed to a single goal: a customer experience second to none.
We offer quick and customer-focused implementation for fast ramping.
Learn practical steps to create and present a business case for third-party risk management to stakeholders.
Learn how Venminder helps companies of all sizes and within all industries.
Download complimentary resources to guide you through all the various components of a successful third-party risk management program.
Resources Library →
TPRM Regulations Library →
Read Venminder's blog of expert articles covering everything you need to know about third-party risk management.
Stay current on the latest best practices and trends in third-party risk management
Register for upcoming webinars →
Watch on-demand webinars →
Join a free community dedicated to third-party risk professionals where you can network with your peers.
Download samples of Venminder’s vendor risk assessments and see how we can help reduce the workload.
Receive the popular Third Party Thursday newsletter into your inbox every Thursday with the latest and greatest updates.
Venminder's State of Third-Party Risk Management 2025 whitepaper provides third-party risk management insight and industry statistics to help you make informed programs decisions. Learn how others are managing third-party risk.
Venminder is the industry's leading third-party risk management solution provider.
Leadership →
Newsroom →
We're hiring! Explore career opportunities and learn more about Venminder culture.
Check out the select partners we aligned with to provide additional solutions and services.
Learn how to become a Venminder integration or referral partner.
See how Venminder can enable you to run an efficient third-party risk program.
Get in touch with a member of your team to discuss a question you may have.
Already a Venminder customer? Connect with the Customer Support Team.
Read More →
December 9, 2025 Online | Basic
Regression analysis is a powerful way to understand whether your lending data tells a story of fairness, consistency, and sound decision-making. Even if your institution doesn’t perform the analysis in-house, knowing what regression results mean — and how to interpret them in context — is essential for building a strong, data-informed fair lending program. Join Ncontracts’ fair lending expert Cassandra Wayman as she breaks down the role of regression analysis in evaluating lending patterns and uncovering risk. You’ll explore how this analysis fits into a broader fair lending strategy, what common findings indicate, and how technology (including AI) is helping institutions understand their data with greater clarity and confidence.
December 18, 2025 Online | Basic
Financial institutions hold some of the most sensitive data in the world — and regulators, customers, and cybercriminals know it. That’s why risk-assessing your information security program isn’t just an IT exercise; it’s a business imperative. This session breaks down the essential steps of risk assessments and shows how to apply them to your data security program. You’ll learn how to evaluate cybersecurity maturity, align with regulatory expectations, and build practical safeguards that protect sensitive information while supporting operational resilience.
Basic
Customer acquisition costs hundreds of dollars. Losing one costs thousands. Yet most financial institutions treat complaints as regulatory paperwork instead of what they really are: early warning signals that a relationship is at risk. In this webinar, we'll move beyond checkbox compliance and show you how to build a complaint management program that doesn't just meet regulatory expectations — it actively protects customer relationships, reduces attrition, and gives you actionable intelligence your competitors are missing. Whether you're refining a mature program or building one from scratch with limited resources, you'll walk away with practical strategies to turn complaint data into measurable improvements.
Complaints are the canary in the coal mine for the mortgage industry and when they’re mishandled, the fallout can be big, bad, and ugly. Beyond the risk of lawsuits and reputational damage, every missed complaint is a missed opportunity to protect borrower trust and uncover systemic issues before they spiral. But here’s the reality: complaint management in the mortgage space is messy. Data is siloed across systems, patterns are hard to spot, and manual tracking often leaves lenders blind to the bigger picture. The result? Small problems snowball into customer attrition, legal exposure, and long-term damage to your brand. In this session, we’ll connect the dots between mortgage complaint trends, operational realities, and practical strategies to make complaint management more effective and less painful.
How are compliance teams keeping up with mounting regulations, shifting exam expectations, and the rise of AI? We asked and financial institutions across the country answered. In this webinar, we'll unpack finds from the Future of Compliance survey. See how your peers are navigating the future of compliance.
You’ve invested heavily in cybersecurity. Your perimeter is fortified, endpoints are secured, and monitoring is always on. Yet research shows 60% of breaches originate from third-party vendors — the one attack surface your tools don’t fully control. For wealth management firms, that’s more than a technical challenge. A vendor compromise can expose client portfolios, damage hard-earned trust, and put your firm’s reputation on the line. This session is designed for CISOs and security leaders who are ready to move beyond compliance checklists and tackle the real risks hiding in vendor relationships.
When it comes to vendor management, no two organizations face the exact same challenges — but many share the same questions. Join us as we answer the most common (and complex) vendor management FAQs at financial companies and institutions, including how to address fourth-party risk, evaluate AI tools, oversee cloud vendors, and more. You’ll walk away with practical insights you can apply right away to strengthen your vendor management program. Register now to submit your questions or ask live during the webinar!
Your high-risk vendors don’t just support operations — they are your operations. When a critical vendor falters due to financial instability, cybersecurity breaches, or service disruptions, your institution bears the consequences. That’s why continuous vendor monitoring isn’t optional, it’s essential. In this practical, insight-packed session learn how to build a vendor monitoring program that’s scalable, actionable, and aligned with today’s risk landscape.
Vendor contracts are the foundation of your third-party risk management program — but too often, they’re vague, outdated, or missing critical protections. From performance expectations to data security obligations, what’s in (or missing from) your contracts can create real risk. In this practical session, we’ll break down what makes a vendor contract effective and how to avoid the most common mistakes organizations make.
Join our bootcamp to discuss the latest trends and show you just “how” to accomplish some of the most challenging vendor risk management tasks.
This session breaks down what to ask for, why it matters, and what to actually do with the documents once they’re in hand. We’ll walk through how to tailor requests based on risk, identify red flags, and translate paperwork into confident, risk-aware decisions.
This webinar will walk you through the first two phases of the vendor risk management lifecycle: Planning and Due Diligence & Selection. We’ll break down these foundational steps in simple, practical terms, so you can confidently approach vendor onboarding with a risk-aware mindset.
The results are in! The State of Third-Party Risk Management 2025 Survey has revealed the latest trends, challenges, and best practices shaping how organizations manage third-party relationships. This annual survey provides a valuable benchmark for organizations to assess their third-party risk management (TPRM) programs and prioritize what matters most in today’s evolving risk landscape. In this session, we’ll unpack the survey findings, share expert analysis, and provide actionable strategies to help your organization stay ahead of the curve in 2025 and beyond.
Is your vendor risk management program doing everything it should to protect against third-party risks? From cybersecurity threats to operational disruptions, effective vendor risk management is critical to safeguarding your business. This webinar breaks down the basics of vendor risk management – giving you a strong foundation in the essentials you need to build or improve your vendor management program. Join us to sharpen your vendor risk skills and strengthen your organization's ability to navigate third-party risk.
Artificial intelligence is slowly transforming banking —everything from the customer experience and competition to the back office. This session examines AI from a risk and governance perspective, highlighting policies supported by risk assessments and your institution’s risk appetite. Prepare for an AI-enabled future with this practical webinar on one of the industry's hottest topics.
*This session is not CPE Credit eligible
Regulatory guidance and best practices continue to evolve and change. It’s clear that regulators are paying more attention to third-party risk management in recent years. However, it can be challenging to know which regulations your organization should follow and how to comply. So, what exactly do regulators expect? How do we synthesize regulatory requirements into practical and actionable third-party risk processes? We'll talk through interpreting regulatory requirements and identifying common regulatory themes, thinking like an auditor or regulatory examiner, self-auditing your third-party risk management program, and more in this session.
Intermediate
A successful third-party risk management program should be capable of demonstrating its effectiveness and value to the organization. Program metrics are the tools that can assist you in achieving this aim. But, once you have identified your third-party risk management program metrics, what comes next? Join us for this intermediate level session where we will address how to effectively analyze, utilize, recalibrate, and evolve third-party risk management program metrics.
Communicating the value of third-party risk management is important, yet many organizations struggle. The key to success is reviewing and understanding the data. So, what kind of data can help you communicate and measure the effectiveness and benefits of your third-party risk management program? Establishing your program metrics is easier than you might imagine. In this webinar, we’ll cover identifying and refining third-party risk management program metrics. You’ll learn how to use those metrics to showcase program effectiveness and efficiency. Join us to get a good grasp on third-party risk management program importance.
It's important for your credit union to have an effective system in place for identifying, managing, and tracking vendor issues. This process is called issue management and it helps you address and solve any problems that may arise. If vendor issues are left unaddressed, it can lead to more significant problems in the future. By incorporating standardized procedures for issue management into your vendor risk management process, you can ensure that your credit union's reputation and members are protected. Join us for this informative session that will guide you through preparing and handling any vendor issues that may arise and provide valuable tips for resolving these challenges.
Vendor performance is an essential part of third-party risk management, and service level agreements (SLAs) and key performance indicators (KPIs) are valuable tools in the performance management process. So, what is an SLA exactly and how do KPIs substantiate vendor performance? How do you turn performance expectations into SLAs and how do you establish and formalize KPIs? Join us for this session where we’ll provide an overview of the vendor performance management process and provide essential details regarding identifying and establishing SLAs and KPIs, how to monitor and manage performance effectively, and how to spot and address declining vendor performance early on to avoid more significant issues later.
Given that cybercriminals are increasingly using third-party vendors as a way to gain access to organizations, it’s essential to understand the cybersecurity program of your vendors. This will help you ensure that they have the necessary plans in place to protect your organization and its customers. In this webinar, we’ll discuss vendor cybersecurity posture and why it's important to your organization. We’ll walk through which vendors should be reviewed, what you should be requesting and reviewing from your vendors, different security testing to perform, and items to be on the lookout for. We’ll also discuss the regulatory requirements around cybersecurity.
Many organizations need help determining appropriate staff levels for effective third-party risk management. However, the lack of regulatory guidance on the matter further complicates this challenge. As a result, third-party risk programs often struggle with understaffing, hindering their ability to function optimally. So, how many people are needed to manage third-party risk management effectively? Join us in this session where we’ll discuss the factors your organization must consider to appropriately staff your third-party risk management function. We’ll cover topics such as the program's scope, the number of vendors and their risk ratings, employee skills and experience, the systems and tools used, and how third-party risk tasks are allocated within your organization.
You can probably identify a few vendors that provide a lot of value, but do you know which ones are critical to your organization? These are the vendors that your organization needs to function properly. It’s essential to have clear criteria to identify them, as it’s not only a best practice, but a regulatory requirement. All your vendors are important and need to be managed, but your critical vendors will require the most attention in your third-party risk management program. So, how do you determine who these critical vendors are? In this session on vendor criticality you’ll learn the basics of how to identify your critical vendors and some tips on how to manage them effectively.
Vendor risks are always present, and you can never completely eliminate them, but it’s possible to reduce the likelihood, occurrence, severity, and impact of those risks through solid risk management practices and controls. Inherent risk is the level of risk present in any vendor engagement before any controls are put in place, while residual risk is the risk that remains after mitigation efforts are made and controls have been verified. It’s true that you can’t have inherent risk without the residual risk; however, they each serve a distinct purpose. Join us for this session where we’ll discuss what inherent and residual risks are, how to determine them, and how they are applied in third-party risk management.
Third-party risk management (TPRM) is a complex process requiring multiple stakeholders' involvement to ensure it runs smoothly. While it can be challenging to differentiate between the different roles and responsibilities involved, it's essential to acknowledge that each person's contribution is vital to the program's success. In this session, we’ll discuss the different roles and responsibilities involved in TPRM. You’ll learn who owns the risks associated with third parties; identify who is responsible for the TPRM framework; explore the roles of subject matter experts, auditors, and examiners; and see how senior management and the board oversee and govern the TPRM process.
To effectively manage third-party risks, it’s recommended to perform risk-based due diligence that is customized to each product or service, their level of risk, and their criticality to your organization’s operations. It's not practical or productive to have a universal due diligence requirement for all vendors as every vendor's product or service represents a unique level of risk to your organization. In this session, learn how to identify the right scope and scale for vendor due diligence, what documents to collect, tips for dealing with missing documentation, and what to do with your due diligence results.
You have your full inventory list of your third-party vendors, but did you know that you need to understand who your vendors are on a deeper level? Have you considered who your fourth-party vendors are? They could be playing a crucial role in your operations or even have access to sensitive data that belongs to your members. It’s crucial to be aware of the level of risk that fourth-party vendors can bring to your credit union and its members, especially if they are providing support for critical products and services. In this session, we'll discuss the importance of understanding your fourth-party vendors for your third-party risk management program and how to review them.
What happens if your critical vendor goes down? Can your organization still operate business as normal? Does your vendor have an effective plan in place to resume normal operations? These are all important questions that need to be addressed in your vendor business continuity management process as part of your third-party risk management program. Ensuring your vendor has business continuity, disaster recovery, and pandemic plans in place is only the first step. You then need to review these plans. Join us for this webinar that will discuss the differences between vendor business continuity plans, disaster recovery plans, and pandemic plans, what to look for in these plans, how business impact analysis comes into play, and what can go wrong if plans aren’t well-tested.
Vendor relationships can end for many reasons. Your organization’s needs may have changed, you’re looking for a new vendor who better aligns with your strategic goals, or your current vendor is no longer meeting your service level requirements. Regardless of the reason, it’s essential to have your vendor exit strategies in place before vendor termination. And having your exit strategy in place is only part of the equation. In this session, we'll discuss vendor exit strategies and plans and cover the offboarding activities every organization should consider before exiting a vendor relationship.
The onboarding process is the crucial first step in any vendor relationship, as it sets the foundation for managing the vendor and their risks throughout the partnership. What are the key components of an effective onboarding process? How should organizations plan for vendor relationships and assess their risks? When and how should due diligence be conducted, and what information and documents should be gathered from vendors? How can contracts be used to manage risks and ensure optimal vendor performance? Join us for this webinar to learn all about vendor onboarding.
For many, it’s a regulatory requirement to report third-party risk management to your board and senior leadership. There are other committees and stakeholders that must be provided with reports and data on a regular basis, too. It can be a cumbersome task to gather all the reports that need to be provided to various departments, but don’t let it worry you! We’ll walk you through the basics of third-party risk management reporting, what should be included in your reports, how often they should be distributed, and why good reporting practices are important. Join us for this session where we’ll discuss reporting techniques, strategies, and more.
For effective third-party risk management, it's essential to conduct appropriate vendor due diligence during the onboarding and ongoing stages of the relationship. And the level of due diligence required should be tailored to the level of risk involved, with higher-risk third-party relationships necessitating more in-depth due diligence. But what does a successful vendor due diligence process entail? What information and documentation should you collect from your vendors? What steps should you take if they won't provide it? Join us for this information-packed session covering the entire due diligence process, what to collect from your vendors, and how to utilize due diligence to mitigate risk.
Communication and collaboration are instrumental in implementing a consistent risk assessment process. Assessing the risk in a collaborative manner and leveraging internal resources will allow for a risk-based and documented approach, which will help guide your ongoing oversight function. In this webinar, we’ll walk through how to complete a vendor risk assessment review from start to finish.
Vendor SOC reports are essential vendor documents that organizations must review to verify the vendor has strong information security controls in place. This can be a daunting task, but it's crucial to protect your organization’s and customers’ sensitive data. However, knowing how to review and analyze these massive reports can be a challenge. There is a lot to consider when it comes to vendor SOC reports. Join us for this webinar where we'll do a complete and thorough walkthrough of a vendor SOC report from start to finish.
Complementary user entity controls (CUECs) are crucial components of a vendor's SOC report. It's important to note that both your organization and the vendor share the responsibility to achieve control objectives and prevent any material weaknesses. CUECs help your organization understand its obligations for meeting control objectives and identify the specific roles, responsibilities, and duties of your organization to ensure that these objectives are successfully achieved. In this webinar, we'll walk you through all aspects of CUECs, what they are, why they're important, how to review them, and more.
You have already established the foundation for your vendor risk management program, but what should be your next steps? How can you attain program maturity? When you need to move beyond the basics, where should you focus your time and effort to enhance and optimize your vendor risk management program? Join us for this comprehensive webinar to learn more about achieving vendor risk management program maturity and the best ways to get there. Learn about tools and techniques to guide you in improving your vendor risk management program, from governance documents to program maturity roadmaps.
The contract management process is not only about negotiating the best financial and legal terms for your organization, but also a key component of managing risk and vendor relationships. Structuring your legal agreements to ensure maximum protection for your organization and its customers is an essential practice. But what is the best way to review vendor contracts? This session covers a walkthrough of how to review a vendor contract and the key terms and conditions to include.
A well-written vendor contract is one of your most valuable tools for managing third-party risks, and it is essential for protecting your organization and its customers. Although contracts and contracting can seem intimidating to those who are not legal professionals, it does not have to be. Learning core concepts and basic guidelines for vendor contracts can help demystify the process. This webinar is designed to help beginners understand vendor contracts and the contracting process.
Vendor risk assessments are important for credit unions as they offer detailed information about how vendors handle risk. These assessments are necessary before signing a contract and throughout the relationship. Join us for this session where we cover the basics of vendor risk assessments. We'll discuss what you need to know and do to ensure that your assessments are effective, timely, and meet regulatory requirements.
The third-party/vendor risk management lifecycle is the foundation for effective third-party risk management programs across industries and organizations of all sizes. In this webinar learn about the third-party/vendor risk management lifecycle. We’ll cover the basics of each lifecycle stage: onboarding, ongoing, and offboarding. We’ll also provide details about the risk identification and management steps in each stage.
To help your organization manage vendor risks successfully, it’s important to implement a thorough vendor financial health review process. This process helps you identify potential financial gaps at your vendor, before they disrupt your business. Remember, poor financial health can negatively impact your organization, having a ripple effect on your customers. In this session, where our Chief Financial Officer will walk you through the different types of financial documents and how to review these documents.
It’s important to understand that risks associated with third parties go beyond your immediate relationships and may also include your vendors’, suppliers’, or service providers' subcontractors (known as fourth and nth parties). In this session, we’ll provide helpful information to assist you in identifying, assessing, and managing fourth- and nth-party risks. We’ll also focus on strategies and tools that any organization can use to enhance visibility to their extended third-party ecosystem, mitigate fourth- and nth-party risks, and explore ways to determine if your third-party vendors are managing their subcontractors appropriately.
Continuous monitoring of your vendors is a best practice to keep your organization informed of risks posed throughout the vendor relationship – just because there’s not a vendor issue today, doesn’t mean there won’t be tomorrow. Your organization can be subject to many third-party risks, such as operational, financial, reputation, and more, and these risks change over time. So, continuously monitoring your vendors is crucial to help your organization identify issues and mitigate those before they become too big to handle. Join us for this session where we will discuss how continuous monitoring improves and benefits your organization.
Third-party risk management is a complex system that requires a careful combination of processes, procedures, people, documentation, and more to work effectively. There are many key players involved in these activities, ranging from vendor owners, subject matter experts (SMEs), a dedicated third-party risk management team, and more. It's necessary to identify these key players within your credit union and define their responsibilities. In this session, we'll clarify some of these roles and responsibilities for your third-party risk management program.
Third-party risk management practices and programs are implemented differently across various organizations, sizes, and industries. To gain a better understanding of the current state of third-party risk management, Venminder conducts a survey every year that includes a wide range of organizations. This enables everyone to benchmark against the differences in organizational priorities and challenges. Join us for this session where we'll be presenting the latest results from the annual State of Third-Party Risk Management Survey.
Your third-party risk management (TPRM) policy serves as the foundation of your program, and it’s meant to clearly identify the rules, requirements, roles and responsibilities, and governance and oversight structures for TPRM in your organization. TRPM policies are more than a suggested best practice, for many industries they’re a regulatory requirement. In this session we'll walk you through the fundamentals of TPRM policy creation and share some best practices.
Robust governance documents are essential for any effective third-party risk management program. These documents consist of policies, programs, and procedures that provide guidance to your organization. Although each document is important, these three types serve different purposes and it's crucial to establish a clear understanding of the desired content for each document. It's also important to identify who is responsible for creating and maintaining these documents. In this session we'll cover what you need to know about effective TPRM governance documents, why they're necessary to have, and walk you through how to develop and maintain each of the documents.
Vendor risk management is the process of identifying, assessing, managing, and monitoring the risks associated with your vendor relationships and a fundamental process for every organization. There are many components involved to have a successful program and processes, including following the vendor risk management lifecycle which can guide you through the three stages of a vendor relationship and necessary steps to take. It’s clear; vendor risk management is more important than ever! Join us for this session where we’ll cover the basics.
The success of a third-party risk management program depends on a carefully integrated combination of rules, tools, processes, and people. To meet regulatory guidelines and follow best practices, your organization must have an effective third-party risk management program. Let's finish off the year with a review of the third-party risk management challenges and lessons learned in 2023. We’ll also explore what might be on the third-party risk horizon for 2024 and beyond.
We know that regulatory requirements should inform our third-party risk management programs and practices. But what exactly do regulators really expect? If you are in a regulated industry, a large part of your third-party risk program's success depends on how well your program meets regulatory requirements. In this webinar, we’ll talk through interpreting regulatory requirements and identifying common regulatory themes, thinking like an auditor or regulatory examiner, and self-auditing your third-party risk management program.
Issue management involves identifying, managing, and tracking vendor issues and taking a strategic approach to resolve the problem. A failure to identify and address vendor issues promptly and efficiently will only cause more problems down the line. To help you better prepare and handle issues that arise, join us for this webinar to discuss the challenges you may encounter and walk you through possible solutions.
Many organizations struggle to communicate the true value of third-party risk management beyond just regulatory compliance. In today's business world, data is king. What kind of data can help you communicate and measure the effectiveness and benefits of your third-party risk management program? This webinar provides practical instruction for identifying and refining your third-party risk management program metrics and teaches you how those metrics can demonstrate your program's effectiveness and efficiency.
Identifying your credit union’s critical vendors is not just a best practice, it’s a regulatory requirement. Once you identify your critical vendors, you also need to understand how to manage them, from onboarding to offboarding. In this session learn how to identify critical vendors, how to manage the risk they post, and important activities you'll need to perform in your third-party risk management program.
Involving your board and senior management in third-party risk management is more than just a best practice. It's a regulatory requirement in many industries. In this webinar, we'll clarify how the board and senior management should be involved in third-party risk management across the organizations and the specific roles they play, how setting a "tone from the top" boosts internal compliance and effectiveness of TPRM, and more.
Ensuring your vendors have the right risk management practices and controls is essential to the due diligence process. This often means requesting and reviewing a vendor SOC report. But knowing just how to review and analyze these complex reports can be a challenge. In this webinar, we'll help you identify which type of SOC report you need and how to review them. We will explore the various sections of a SOC report and guide you on what to look for and how to assess the risks.
Do you need to verify that your vendor has the right internal controls to protect your data? Reviewing a SOC (System and Organization Controls) document is a good place to start. But how do you know which type of SOC document to request and review? Learning which report to choose is essential. Join us for this session where we’ll cover the basics of vendor SOC reports and what you need to know about each one.
Watch this webinar, in partnership with Compliance Week, where we cover the new guidance in more detail. We’ll provide a brief overview of the Interagency Guidance, as well as share practical advice to ensure your organization is fully prepared for the expanded scope and what this means for your organization’s third-party risk management program.
You may know how to build a third-party risk management program that meets requirements and follows best practices. But, how do you manage some of the more unique challenges third-party risk management programs and professionals might face? In this unique webinar, we'll explore some of the trickier aspects of third-party risk management and offer practical strategies and advice for improving your program and enhancing your professional skills.
Having a robust vendor due diligence process is a crucial part of a successful third-party risk management program. It helps you remain aware of and manage vendor risk posed. And it’s not only a good business practice for credit unions – it's a regulatory requirement. In this session we'll walk you and your credit union through a high-level due diligence overview, explaining how to manage and mitigate vendor risk with due diligence, where it fits within the third-party risk management lifecycle, and more.
Environmental, social, and governance, or ESG, is more than a trending topic. Shareholders, employees, investors, and members of the general public increasingly demand that organizations minimize the negative impacts on people and the environment resulting from their operations. But how do an organization’s vendors fit into the bigger ESG picture? In this informational webinar learn more about ESG, why it’s important, and what your organization needs to consider before implementing ESG disclosure and reporting for your vendors.
The Federal Reserve Board (the Board), Federal Deposit Insurance Corporation (FDIC), and Office of the Comptroller of the Currency (OCC) collectively introduced the Interagency Guidance on Third-Party Relationships: Risk Management a little over two years ago. In June 2023, the guidance officially became effective – you’re expected to comply with this immediately. Join us for this webinar that will walk through the new guidance and what it means for your organization’s third-party risk management program.
Vendor relationships can end for many reasons. Regardless of the reason, it's essential to have your vendor exit strategies in place before vendor termination. Join us for this webinar, where we’ll identify the purpose of exit strategies and exit plans and cover the essential offboarding activities every organization should consider before terminating a vendor relationship.
Collecting vendor information and documentation is essential to the due diligence process. After all, those documents must be reviewed and assessed to determine if the vendor has the right risk management practices and controls. In this webinar, we’ll provide guidance surrounding the information and documents you should gather based on the product/service type and risk level.
The importance of vendor business continuity management is well known, but do you know how to review and analyze business continuity, disaster recovery, and pandemic plan documents to ensure that your organization is covered? If you already know what vendor business continuity, disaster recovery, and pandemic plans are, but would like to take it a step further, this webinar is for you. This session will walk you through how to analyze these documents and what to look for to ensure your vendor has the right business continuity and disaster recovery planning to protect your organization.
If your third-party vendor goes down, can your organization stay afloat? Business-impacting events can and will happen. Is your vendor prepared to handle them with appropriate measures and a plan? During this webinar, you'll learn what your vendor needs to provide to demonstrate they are prepared for business interruptions and recovery to normal operations as well as how to ensure that your vendors have taken the appropriate precautions and have thoroughly tested their business continuity management and disaster recovery plans.
Contracting and renewals are essential steps within the third-party risk management lifecycle. Vendor contract management will help your credit union successfully monitor and maintain vendor relationships. Managing your credit union’s vendor contracts is about more than negotiating the best financial and legal terms. Join us for this session that will discuss vendor contract management in more detail, including elements that should be considered and the benefits of vendor contract management.
Is your vendor financially stable? Your vendor’s financial health affects its capacity to provide your organization with safe, secure, and quality products and services. Financial risks associated with vendors are often overlooked, can be detrimental, and may directly affect how you operate your business. Watch this informational webinar, presented by an actual CFO (chief financial officer), who will teach you how to review your vendor’s financial health so you can remain fully aware of their financial status and avoid costly surprises.
Third-party risk management reporting is not just a best practice; it's a regulatory requirement to report to your board and senior management. But you can’t forget about risk committees and your other stakeholders. Understanding the information needs of each of your stakeholders and how often you provide that data is essential. So, what should you be reporting, to whom, and how often? This webinar will walk you through the basics of third-party risk management reporting. And help you identify the attributes of effective reporting.
The third-party/vendor risk management lifecycle is the foundation for effective third-party risk management programs across industries and organizations of all sizes. Watch this webinar to learn about the third-party/vendor risk management lifecycle. We’ll cover the basics of each lifecycle stage: onboarding, ongoing, and offboarding. We’ll also provide details about the risk identification and management steps in each stage.
Third-party risk management doesn’t stop with your third parties. Do you know who your fourth parties are and the risks they pose to your organization? Sure, we have direct relationships with our vendors, but what about their vendors (your fourth parties) or their vendor’s vendors (nth parties). In this webinar, learn more about fourth and nth-party relationships and what it takes to identify them and manage their associated risks.
As part of third-party risk management, you should periodically review your vendor’s financial statements and monitor financial performance. When a vendor experiences a decline in financial performance, it often leads to the vendor cutting costs and can have an impact on the quality of your relationship, ultimately putting your credit union at risk. To protect your credit union, here are some red flags to watch for related to a vendor’s financial health so you can take appropriate action to reduce that risk.
The collapse of Silicon Valley Bank ("SVB") ranks second among all bank failures in U.S. history and has had a profound impact. While no one was prepared for an event like this, it’s important that your organization protects itself from the potential ripple effect that will be caused by your vendor relationships and their banking relationships. Join us for this webinar that will discuss what your next steps should be, a proactive approach to talking with your vendors, and help you gain a bigger picture of your vendors' financial health and operational resiliency.
An organization's vendor onboarding process should allow for identification of the right partner and is critical to the success of this future relationship. Not only does the onboarding process need to be effective and efficient, but it also must lay a solid foundation for managing and monitoring the vendor throughout the relationship. Join us for this informative webinar to learn more about finding new vendors and their subsequent onboarding, including planning, risk assessment, due diligence, contracting, and more.
Vendor performance management is necessary not only to ensure the benefits of the relationship are realized, but is also an essential risk management tool. After all, the key to vendor value is vendor performance. Join us for this information-packed webinar to learn more about vendor performance management basics, SLA and KPI development, creating scorecards, and more.
TPRM programs and practice maturity vary, as do organizational priorities and challenges. As a result, we include a wide range of organizations, sizes, and industries in our annual survey to better reflect the state of third-party risk management. In this session, we will share the results of our annual State of Third-Party Risk Management Survey. Join us as we dive into key insights and findings of the annual survey and discuss third-party risk management changes, challenges, and recommended best practices for 2023.
Third-party risk management (TPRM) governance documents, including policies, programs, and procedures, are the foundation for any effective TPRM program. After all, TPRM rules, requirements, and standards need to be formalized and documented. So, what is the purpose, content, and audience for each type of governance document? In this webinar, we'll cover the basics of TPRM governance documents, including policies, programs, and procedures.
A well-run third-party risk management program is important to meet regulatory guidelines and is a critical process in any organization. Managing your third-party vendors successfully will help you avoid real risks to your operations and reputation. Let's finish off the year with a review on vendor risk management best practices and a look towards the future.
Collecting vendor due diligence is a challenge for many organizations. It’s often difficult to get the right documents from your vendors and can be even more frustrating to receive them in a timely manner. In this webinar, learn where document collection fits into the vendor due diligence process and what you need to know to create efficiencies.
Between regulatory pressures and an environment full of new and increasing risks, third-party risk management (TPRM) has never been more important. While many of us read the guidance and research best practices, when it comes time for an audit or exam, we still aren't sure if our TPRM program is up to snuff. Join us for this webinar, where we’ll share sensible strategies and advice for reviewing your program like the professionals do and teach you how to take the stress out of audits and exams, which are normal, and expected occurrences for every TPRM program.
Vendor issue management is an extremely important part of third-party risk management. Failing to identify and address issues throughout the third-party risk management lifecycle will only cause you and your organization more problems. By incorporating standardized issue management procedures into your vendor management process, you can protect your organization’s reputation, customers, and more.
Most organizations understand the need for a third-party risk management (TPRM) program, but beyond regulatory compliance, few organizations can articulate their program's value using data. Despite the lack of standards in this area, there is no reason to be discouraged. Establishing solid and objective program metrics is easier than you might imagine. In this session, we'll provide practical instruction for identifying and refining reportable TPRM program metrics and teach you how those metrics can be used to demonstrate your program's effectiveness, efficiency, capacity, and value.
Risk assessments are a vital part of the third-party risk management lifecycle as proper risk assessments will help your credit union identify the risk associated with outsourcing product and services to each vendor. Assessing vendor risk not only a regulatory requirement, but also a best practice to keep your credit union and its members safe. In this session, you'll learn about inherent and residual risks, what your credit union needs to be collecting on your vendors to manage risks, and the who, what, why, when, and how of vendor risk assessments.
With the increase in data breaches, cybersecurity continues to be a hot issue. It's critical that you understand your vendor's cybersecurity posture to protect your organization in the incident of a cybersecurity threat or attack. The time to prepare is now! This session will discuss what to ask for from your vendors, how to review a vendor's cybersecurity, and more!
Cybersecurity is a regulatory hot button issue. By taking the necessary precautions and understanding your vendors' cybersecurity posture, you can reduce the risk of them becoming your weakest link. In this session, we'll cover how to review your vendor's cybersecurity to uncover if they are prepared to prevent, detect, and respond to a cybersecurity issue.
Collecting, analyzing, and understanding your vendor’s SOC reports is crucial to ensure the vendor is a safe partner. It’s expected that you have your third party’s actual SOC reports on file as well as a qualified review of the audit reports acknowledging your understanding of strengths and weaknesses. In this session, we'll cover valuable information on SOC reports and reviewing them that will help your third-party risk management program.
Reviewing a vendor's SOC report is an important part of your due diligence process as it provides insight into an organization's centric environment. Do you need a SOC 1, SOC 2, SOC 3, or one of the many other SOC options? It can certainly be confusing to determine the right report. In this webinar, we'll cover the basics of SOC reporting and what you need to know about each.
Third-party risk management (TPRM) is a substantial component of your organization's risk portfolio. Due to this, auditors and regulators share the expectation that your board and senior leadership play an active role in the effective execution of third-party risk management at your organization. We'll discuss senior leadership and the board's responsibilities during this webinar, including policy review and approval. We'll also cover standard report types and the timeframes for providing them.
As a credit union, you have vendors who are critical to your operations such as your core processor. Do you know which other vendors in you inventory are critical to your institution? Identifying your credit union's critical vendors is not only a best practice, but also a regulatory requirement considering they can bring a great deal of risk. Watch this session to learn more about determining criticality and next steps.
We're all aware how important a vendor's business continuity, disaster recovery, and pandemic plans are to third-party risk management programs, especially in lieu of the COVID-19 pandemic. There are very complex and important elements that should be reviewed and managed so you can handle any incident that may impact your organization. In this webinar, take a deep dive into what they are, what to review, when and how to review, and all things in between.
No organization is immune to business impacting events. It's critical both you and your vendors are prepared. You need to thoroughly evaluate your vendor's business continuity management program, business resiliency, disaster recovery and pandemic plans. In this webinar, you'll learn what your vendor needs to have in place to handle any incident that may impact your organization as well as how to ensure that your vendors have taken the appropriate precautions and have thoroughly tested their business continuity management plans.
Vetting and onboarding vendors takes time, but the work doesn't stop once the contract is signed. Performance monitoring is an essential component of any successful vendor relationship. Join us for this session to learn about the essential components of vendor performance management, including understanding the differences between a service level agreement (SLA) and a key performance indicator (KPI).
You may understand the basics of what a vendor risk assessment is, but do you know how to complete one? Completing a risk assessment may seem daunting, but it’s a worthwhile time investment and foundation to third-party risk management in order to help protect your organization from vendor risk posed. This webinar will cover the steps you must take to complete a thorough vendor risk assessment and manage third-party risk effectively.
Your internal inherent vendor risk assessment identifies the risk types and sizes present in a vendor relationship. However, how do you know if your vendor has the right stuff to manage those risks? Enter the vendor risk assessment which is an integral part of due diligence and ongoing risk monitoring. In this session, we’ll cover the ins and outs of vendor risk assessments, including vendor questionnaires, document collection, identified issues, and more.
There are many variations to third-party risk management (TPRM) reporting. From board reporting, senior leadership reporting, vendor performance reporting, risk reporting, and more, there are many instances when reporting comes into play in third-party risk management. During this session, we'll break down TPRM reporting as a whole and also take a look at who, what, when, where, and why.
Often represented as a rotating wheel, the vendor risk management lifecycle is the repeated process of identifying and managing the risks associated with your vendor, as well as the products or services they provide, for as long as you have a relationship. Join us for this session, where we’ll help you get off the wheel and onto a simpler and more straightforward path. By breaking the vendor lifecycle into three distinct stages – onboarding, ongoing monitoring, and offboarding – and giving you the necessary steps to move between each stage, you’ll be able to stop spinning and move straight towards your vendor risk management objectives.
As a credit union, you likely utilize third-party vendors to improve your operation. There's a lot of value that comes from these relationships, but also a lot of risk. Third-party risk management has increasingly become important for regulatory compliance and protecting your credit union. However, it's not always clear what a mature program looks like and what proper third-party risk management entails. This session will cover some third-party risk management program basics and how to effectively manage the risk.
Before you sign the contract with a vendor, due diligence is needed to ensure they're the right fit and can live up to contractual obligations. The success of your business and its customer reputation are too important to bypass evaluating if a vendor could negatively impact operations, risk customer relationships, and put you at risk of regulatory fines. Watch this webinar to learn how to properly vet and onboard new vendors.
Monitoring your fourth parties is becoming more important every day. It should be a component of your vendor risk management practices. While you may only be under contract with your third party, your third party probably has multiple vendors of their own that assist in the delivery of the product or service they are contractually bound to provide your organization. In this webinar, you'll learn why it's essential to understand your vendor's vendors (your fourth parties).
Contract management is an important part of your overall third-party risk management lifecycle. Done well, it can create a strategic advantage and protect your organization, customers, data, and shareholders. In this webinar, we will cover what you need to know about vendor contract management.
Vendor contracts are the foundation of your vendor relationship and contain all the core information. There are specific items that you need to ensure are in your vendor contracts to not only protect your organization, but also your clients. It's important to understand all aspects of your vendor contract, but some of these items can be difficult to comprehend. Join us for this in-depth session where we will walk through how to review a vendor's contract, when and how to implement an exit strategy, and look at example language and clauses.
It's very likely that your organization will need to continue to rely on third parties to remain competitive and alleviate internal processing burden. However, the state of vendor risk management is clear: regulatory expectations are increasing and companies across industries are scrambling to keep up with the changing landscape. In this session, we will walk you through the results of our annual survey giving you insight on how your peers in a variety of organizations across multiple industries are managing third-party risk.
Environmental, social and governance (ESG) is a very hot topic. With climate change, poverty, modern slavery, and more in the headlines, it’s important to understand these key issues and concerns. The important questions in our industry become, “how do these matters relate to third-party risk management? And, “how do we prepare to integrate ESG into our third-party risk management program?” Now is the time to get educated.
A well-run third-party risk management program is important to meet regulatory guidelines and is a critical process in any organization. Managing your third-party vendors successfully will help you avoid real risks to your operations. Watch this webinar for a review on vendor risk management best practices and a look towards the future.
Auditors and examiners are going to expect to see a third-party risk management program that includes processes and procedures for managing the risk products, services and vendors pose to your organization. Watch this webinar and learn what auditory and regulatory ropes you should know, and which ropes to skip.
Between regulatory pressures and the consistently increasingly risky environment, third-party risk management has never been more important. We'll walk you through key areas to know within the vendor risk lifecycle (from risk assessments to due diligence to ongoing monitoring), so you can ensure your program is aligned to industry best practices and regulations.
Watch this workshop where we will walk you through an inherent and residual vendor risk assessment exercise where you can assess your own vendors. It's a great opportunity to roll up your sleeves and get your hands dirty with this online risk assessment tool.
It's expected that you have your third party’s actual SOC reports on file, as well as a qualified review of the audit reports acknowledging your understanding of strengths and weaknesses. Register for this webinar and hear as we cover valuable information on SOC reports and reviewing them that should help your third-party risk management program.
By taking the necessary precautions and understanding your vendors' cybersecurity posture, you can reduce the risk of them becoming your weakest link. Register for this session and hear as the presenters cover how to review your vendor's cybersecurity to uncover if they are prepared to prevent, detect, and respond to a cybersecurity issue.
Due diligence is fundamental to every vendor management program to effectively manage risk and meet regulatory expectations. Register for this webinar and we will walk you through the ins and outs of due diligence on your third parties. Improve your understanding of the process and how to manage it successfully.
Your reputation is far too important to allow any third party in the door that can embarrass you, risk customer relationships and put you at risk of regulatory fines. Register for this webinar and you’ll learn how to vet and onboard a vendor successfully and efficiently to not bottleneck operations as well as tips and techniques for handling the process.
Monitoring a vendor’s financial viability is a critical component of a thorough due diligence process. Especially given the COVID-19 pandemic, many businesses’ operations are suffering, and in turn, causing services to cease completely and a lot of mergers & acquisition (M&A) activity. In this webinar, learn how to review your vendor’s financial health to remain fully aware of their financial status.
Customers will complain, and some of those complaints may be caused by your vendors. You must have a good methodology for managing those complaints, especially because it has become a focus of regulators. Watch this webinar to learn about specific guidance regarding policies and procedures of managing vendor relationships and potential vendor complaints.
This webinar will cover how to discover and assess the amount of risk a third-party relationship brings to your organization in the face of our ever-changing environment - risk you may not have previously anticipated. We'll also discuss the fastest and easiest methods of creating vendor questionnaires and how to solve the vendor risk management equation.
It’s likely that your organization will need to continue to rely on third parties to remain competitive and alleviate internal processing burden. In this webinar session, gain insight and learn best practices as we review how a variety of different organizations across multiple industries manage third-party risk management in today’s risky climate based off our industry survey.
A well-run third-party risk management program is important to meet regulatory guidelines and is a critical process your organization should be aware of. Watch this on-demand webinar to finish off the year with a review on vendor risk management best practices and a look towards the future.
On-site visits may be on hold, but the industry has found alternatives. There are ways to still verify that your vendors are meeting your organization’s expectations and are regulatory compliant. View for this webinar, featuring experts from Wipfli, to learn how to manage the process.
Due diligence and contract management are an important part of your vendor's lifecycle and overall third-party risk management program. Done well, they can protect your organization, customers, data, and shareholders. Watch this on-demand webinar to find out more tips and best practices for managing the process.
Your organization owns the responsibility of protecting customer data and must assess the risks posed. While outsourcing to third parties has great benefits, it can lead to consequences if data isn’t properly managed. Watch this expert webinar to hear how to bring your A game to cybersecurity.
In this session, the presenters will cover how to review your vendor's cybersecurity to uncover if they are prepared to prevent, detect, and respond to a cybersecurity issue.
Due diligence is fundamental to every vendor management program. Watch this session and we will walk you through what you should be doing for due diligence on your third parties.
In order to lower the level of risk a vendor poses, you should implement strong vendor risk management practices, including an oversight and ongoing monitoring program. In this webinar that was hosted by PRMIA and Venminder gave attendees an understanding of a sound program, with useful tips and ideas you can use to improve your own.
Between regulatory pressures and the latest increasingly risky environment from the pandemic, vendor management has never been more important. The stakes are high, so now is the time to get a grasp on this topic. This on-demand session covers a tried-and-true approach to creating a strong program.
While you have outsourced a process, when it comes to handling something such as consumer complaint data, the buck stops with you. Watch this webinar to hear the importance of vendor customer complaints and how to handle them.
Now, more than ever, you need to ensure your organization is properly protected. In this session, we cover what you need to know to secure a completely remote workforce, how that affects an organization’s third-party risk management, and vendor pandemic planning for cybersecurity.
Gain insight and learn best practices as industry experts review in this on-demand webinar session how financial services and financial technology companies are managing third-party risk management in today’s increasing regulatory and risky climate.
Managing your vendors well can help you avoid real risks to your reputation and operations. Finish off the year with a review on vendor risk management best practices and look towards the future.
This session provides an overview of the components of a comprehensive third-party risk management program. You’ll learn what board members need to understand about third-party risk and what should be expected regarding regular reporting.
Third-party risk management was a high priority for the financial services industry this year – and rightly so. Managing your vendors well can help you avoid real risks to your reputation and operations. Watch to review vendor management best practices from 2018 and look towards the future.
Watch where we cover the first essential step in building an exam proof vendor management operation: your vendor risk management policy and program documents. Learn what to know when writing a policy, tips on writing a program, fundamentals of the documents, and creation logistics.
View to learn important points about vendor due diligence and contract management. We cover the importance of vendor due diligence, vendor contract management, major elements and best practices, common mistakes, and more.
This CBANC and Venminder webinar featured industry experts that covered vendor due diligence. We covered the hazards of incomplete or ineffective due diligence, items to gather and analyze, fourth party due diligence challenges, and other important topics.
Watch this on-demand continuing education webinar featuring Venminder and Credit Union Webinar Network. Leading industry experts discuss various third-party risk management topics and give best practices tips for organizations to be more successful with vendor risk management.
Watch this on-demand continuing education webinar featuring Venminder and Community Bankers Webinar Network. Leading industry experts discuss various third-party risk management topics and give best practices tips for organizations to be more successful with vendor risk management.
.gif?width=1920&name=Sample-Graphic-Animation%20(1).gif)
