Sold by: ASSERTIVA
Assertiva’s TPRM consulting service helps organizations identify, assess, and manage risks associated with suppliers, contractors, and other third parties. Using a risk-based approach, it assesses the current state, classifies third parties by criticality, designs the target operating model, and strengthens policies, processes, controls, and assessment instruments.
Overview
About the service
The service provides a practical path to evolve from an initial or fragmented third-party management approach toward a structured and sustainable TPRM model. It addresses discovery, assessment, risk analysis, mitigation, negotiation, reporting, continuous improvement, and contract termination. The approach integrates governance, methodology, processes, and documentation. Depending on the agreed scope, it may include gap assessment, document and contract review, classification criteria, policies and procedures, questionnaires, supplier assessments, training, and a prioritized roadmap.
Scope and deliverables
• Initial assessment and analysis of the supplier inventory.
• Classification of third parties based on criticality, along with a gap analysis against best practices.
• Design of the target operating model, its governance framework, acceptable risk levels, and the Third-Party Risk Management (TPRM) procedure.
• Development of questionnaires, forms, or checklists for evaluating suppliers and services.
• Supplier evaluation, consolidation of results, and mitigation recommendations (where included in the agreed scope).
• Training and rollout of the model to key personnel.
• Executive wrap-up and a prioritized roadmap for future development.
Potential deliverables
• Diagnostic report and opportunities for improvement.
• Third-party inventory.
• Current process map and target model.
• TPRM policy.
• Assessment form or questionnaire.
• Consolidated risk and assessment results matrix.
• Awareness and training material.
• Report on findings, recommendations, and roadmap.
Why Assertiva S.A.
Assertiva combines experience in information security, cybersecurity, risk management, and management systems to deliver a results-oriented TPRM consulting service. The approach prioritizes methodological clarity, risk-based classification, traceability of findings, knowledge transfer, and actionable recommendations.
Highlights
- Strengthen risk management throughout the third-party lifecycle.
- Classify suppliers by criticality and apply risk-proportionate assessments.
- Define governance, policies, processes, and instruments for a sustainable TPRM model.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. To get a custom quote for your needs, request a private offer.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Support
Vendor support
Software associated with this service
By Bitsight
Drive accountability and transparency across the organization based on a uniform security performance target. With this governance framework in place, measure the effectiveness of security controls, analyze the attack surface, prioritize findings and track remediation activities. Annual subscription.
By Archer
For more than 20 years, Archer has pioneered holistic integrated risk management solutions that empower enterprise organizations to more effectively manage risk, ensure compliance, and address emerging challenges. Leveraging advanced technology like artificial intelligence (AI) and risk quantification, Archer's broad range of solutions and services provide our clients with a clear understanding of risk that drives strategic decision-making and operational resilience.