Third parties and resilience
Third-party risk management
This pack runs a vendor risk program for a bank, fintech, payment or crypto firm. It follows the US interagency third-party guidance of June 2023, PRA SS2/21 in the UK and the EBA outsourcing guidelines in the EU.
What's in the pack
00 Start hereThe order to work in and how the documents are marked up.
01 Vendor tiering workbookEvery vendor, its tier, review dates and due diligence findings
02 Due diligence questionnaireQuestions the vendor answers before you sign
03 Onboarding checklistEvery step from business case to go-live, with sign-offs
04 Annual review templateThe yearly review of each critical and high-risk vendor
Who it's for
Vendor risk and procurement teams that tier, assess and review third parties.
How you get it
Pay by card, Apple Pay or Google Pay. You download a zip straight away, and we email you the link too. The link works for 30 days.
See all 45 compliance template packs.All templates →
