TPRM Capabilities and Maturity Assessment

PRIMARY CONTACTS:
Eric M. Wright CPA, CITP
William M. Deller CISA, CTPRP, CTPRA, CCSFP

A capability is anything an organization does well that drives meaningful business results. Capabilities drive up resilience, and drive down risk.

We perform capabilities and maturity assessments to understand how an organization’s Third Party Risk Management program stacks up next to comparable organizations in against leading practices as well as help to identify bottlenecks and target areas of improvement. The assessment process evaluates an organization’s level of maturity for critical components of a TPRM program, and quantitatively scores that level of maturity. Ultimately, this assessment helps organizations develop and/or mature a centralized governance model and provides the tools to maintain it and continuously improve. The following are examples of areas to benchmark and assess maturity:

Program governance
Policies, standards and procedures
Contract management
Vendor risk identification and analysis
Skills and expertise
Communication and information sharing
Tools, measurement and analysis
Monitoring and reviewing

Additional TPRM Services

Schneider Downs TPRM Resources

Built by our tenured team of security, risk and compliance practitioners. We have leveraged decades of diverse subject-matter expertise and experience to be able to provide the following resources and tools:

How Can Schneider Downs Help?

The Schneider Downs Risk Advisory Services team has the expertise, credentials and tools to help you build, implement, recalibrate, and manage a world-class third party risk management program. We understand that outsourcing business functions to third parties is essential in today’s business environment. While outsourcing provides benefits such as increased efficiency and cost savings, it also increases an organization’s risk exposure to a myriad of threats presented by outsourcing. Understanding how to identify and manage the risks presented by third party providers is vital for any business.

For more information visit www.schneiderdowns.com/tprm or contact us to get started.

our thoughts on

What’s the Difference Between SOC 1 and SOC 2 Reports?

Learn about the differences and similarities between SOC 1 and SOC 2 reports.

What Are The Top Ten Cybersecurity Strategy Mistakes of 2021?

Learn about the top ten cybersecurity strategy mistakes organizations are making in 2021 and best practices to avoid these common pitfalls.

Ransomware Attack Shuts Down Major U.S. Pipeline Operator

Learn about the Colonial Pipeline cyber-attack, one of the largest ransomware attacks in American infrastructure history.

The American Families Plan – Proposed $1.8 Trillion Spending and Tax Plan

Learn more about the American Families Plan, a $1.8 trillion spending proposal envisioned to further boost the economy proposed to congress on April 28, 2021.

Special Alert: Microsoft Releases Critical Update for Exchange Server

Learn about the critical HAFNIUM Microsoft Security Exchange Patch.

Top 5 Implementation Lessons Learned Under ASC 842

Learn more about the Top 5 Implementation Lessons Learned while implementing ASC 842 for your organization and how you can get ahead of the game.

Top Risks to Consider in 2021

Read more about an IIA report which provides perspective from key members of risk management functions and offers insight on potential areas of focus over the next year.

Building a Strong Phishing Defense

Learn how to strengthen your phishing resilience and cybersecurity posture.

Pennsylvania PPP Loan Forgiveness and Deductibility of Expenses

Learn more about the PPP Loan Forgiveness and Deductibility of Expenses and what is included in taxable income for Pennsylvania.

Warning Signs of a Business Email Compromise Attack

Learn about common warning signs of a business email compromise attacks.

Have a question? Ask us!

We'd love to hear from you. Drop us a note, and we'll respond to you as quickly as possible.