Best practice vendor risk management in today’s interconnected world

Abstract

This paper explains why vendor/third-party risk is so important to all organisations, as well as the principal risks that organisations must consider. It describes the responsibility of management to manage these risks with support from risk experts at the selection phase and through the ongoing relationship. Different sources of information about the management of the key risks and alternative ways of collecting the data are evaluated. The paper concludes by discussing how both customer and supplier organisations benefit from a balanced approach to risk management. The approach described in the paper applies to organisations of all types and sizes and can be applied to varied supply chains. The data and insights are based on research conducted by CEB.