Shared Assessments is providing this updated onsite assessment guide in response to the call from CISOs and other practitioners to remedy the lack of standardization across assessments within sectors, as well as cross-industry (RSAC-ESAF, 2023; Shared Assessments, 2023). Assessors and...
This blogpost is a celebration of the risk management moments that have defined our year. Shared Assessments’ community participation contributes significantly to being the trusted source in Third Party Risk Management. We are thankful that you have been here with us to...
Introduction: “What if today, we were just grateful for everything?” Happy week of Thanksgiving! Charlie Brown, beloved comic strip poet and philosopher, probably said it best: "What if today, we were just grateful for everything?" With a theme of gratitude,...
Monster mashes, zombie jamborees, and ghostly galas: Happy Halloween! While we know you will be dancing to Thriller in a graveyard tonight, do not forget the calculated dance of risk management. Organizations are tasked with a monumental mission in the...
Introduction Shared Assessments is very pleased to launch our first-ever “Trust Network” pilot project this week with our partner Whistic. This project is intended to connect the efficiencies of Whistic’s Trust Center with the diversity of Shared Assessments’ third-party risk management...
An organization that actively builds and maintains a positive reputation gains a competitive advantage and improves its credibility if an event occurs that impacts that reputation. Effective reputational risk management is crucial for organizations of all sizes and industries to...
Since the introduction of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), data privacy has become an essential aspect of Third Party Risk Management (TPRM). With constant changes in data privacy regulations, staying up-to-date with...
Regulators have developed “principles-based guidance that provides a flexible, risk-based approach to third-party risk management that can be adjusted to the unique circumstances of each third-party relationship.” On June 6th, less than 20 months after comments closed, the Federal Reserve,...
While excellent ransomware guides and tools exist from various sources, our new guide (Third Party Focused Ransomware Strategy: An Enterprise-Wide Collaborative Strategy Guide for TPRM Professionals) and the related resources referenced throughout provide a Third Party Risk Management focused approach. The...
“Put yourself in their shoes…” is a commonplace reminder to practice empathy. You must put on someone else’s shoes (and then walk a mile) to understand how someone thinks and to gain a sense of the landscape in which this...
and...Third Party Risk Managers Everywhere Should Pay Attention! Third-party risk managers should be paying attention to important ESG regulatory developments in the European Union, where two pieces of regulation became effective within the last month and one more may be...
Have you discovered who you truly are? Did you take the Myers-Briggs? Do you know your sign? Abilities, attributes, and astrology be darned - to an identity thief, you just represent a unique set of numbers and the opportunity to...
