Loading...
THIRD-PARTY RISK (TPRM)
Diligence that does not age.
Assess, monitor and govern third parties across their full lifecycle, in one register, continuously rather than once at onboarding.
Built For
Data Protection Officer
Chief Risk Officer
Head of Procurement
"Third-Party Risk Management (TPRM) is the lifecycle assessment, continuous monitoring and governance of an organisation's third parties, held in a single register."
THE EXPOSURE
Onboarding diligence ages the moment it is signed. Risk is continuous. Most third-party programmes are not.
Framework coverage
DORA
NCA ECC-2:2024
ISO/IEC 27036
NCA ECC-2:2024
What It Does
1
Lifecycle assessment
Onboarding through offboarding, one thread.
2
Continuous monitoring
Posture watched and re-scored, not snapshotted.
3
Concentration and fourth-party
Exposure beyond the direct vendor.
4
One register
Every third party, one governed view.
HOW IT CONNECTS
Reads suppliers from Supply Chain Mapping and pushes third-party risk to the Governance Twin.
See the Governance Twin