Blog

What 'Virtual' Means When Conducting Assessments

by Sabine Zimmer | September 10, 2019 | Third Party Risk Management, Virtual Assessment

The word virtual’s various meanings include “near enough” and “not physically existing.” When it comes to performing virtual assessments, outsourcers and third parties should keep both definitions top of mind. For all practical purposes, virtual assessments are the same as onsite assess ....

Are We Heading Back to School for Privacy Changes?

by Sabine Zimmer | September 10, 2019 | California Consumer Privacy Act (CCPA), Data Protection, Public Policy

Seasons change and priorities change as we exit the dog days of summer and head into back to school timelines and waning days remaining of legislative sessions. This past month Shared Assessments Program Advisory Board Members and Steering Committee Members facilitated three separate educational eve ....

Shared Assessments' TPRM Framework - Member Forum Observations

by Sabine Zimmer | August 9, 2019 | Framework, Tools & Templates

The July 2019 Shared Assessments Member Forum introduced the first sections of the Program’s Third Party Risk Management (TPRM) Framework. The Framework is a new member resource designed to provide TPRM guidance to risk professionals across the experience spectrum. The first module of the Framewor ....

Good Responses to Bad Contracts

by Brad Keller | July 10, 2019 | Contracts, Third Party Risk Management

Most third party risk managers eventually deal with bad vendor contracts. In most cases, these  contracts – which lack important provisions or no longer conform to regulatory requirements or organizational guidelines – pose significant risks to the organization. Many of  these risks can be mit ....

6 Ways the CTPRP Designation Benefits Organizations

by Laura Waller | May 21, 2019 | Certified Third Party Risk Professional (CTPRP), Risk Professionals

The Certified Third Party Risk Professional (CTPRP) designation from the Shared Assessments Program validates expertise while providing professional credibility, recognition and marketability in third party risk. Two years after the initial program launch, we created the Associate CTPRP designation ....

Happy One Year GDPR Enforcement Day

by Sabine Zimmer | May 21, 2019 | General Data Protection Regulation (GDPR), Public Policy

It’s hard to believe it’s been one year since the GDPR enforcement took effect (May 25, 2018). For many, the honeymoon (or “honeydo”) hasn’t quite worn off yet, as organizations are  still trying to ensure they meet some level of conformity to the most encompassing privacy regulation to d ....

The Realities of Raising Fraud Awareness

April 29, 2019 | Data & Cybersecurity, Fraud

Authored by: Emily Irving, VP Third Party Risk, BlackRock and Shared Assessments Steering Committee Vice Chair and Bob Jones, Senior Advisor, The Santa Fe Group If you could print $200 million on your home printer each year, how would it affect the world economy? If all humans could avoid physica ....

A Shared (Assessments) Success

by Sabine Zimmer | April 23, 2019 | News And Events, Shared Assessments Summit

The 12th Annual Shared Assessments Third Party Risk Summit featured the latest thought leadership and best practices in cybersecurity, risk management, vendor management, privacy and assessments featuring provocative topics and engaging keynotes and panelists. Attendees visited with exhibitors and s ....

If Left to Our Own Devices... What the New CCPA Regulations Mean to Risk Management

by Sabine Zimmer | March 14, 2019 | California Consumer Privacy Act (CCPA), Public Policy

These days everything’s connected through the Internet, that constantly growing and evolving massive communications network. More and more devices are being connected (75 billion or so by 2025), forming a complex interrelated platform or ecosystem commonly referred to as the Internet of Things (Io ....

Predicting the Privacy Weather Report for Third Party Risk

by Sabine Zimmer | March 4, 2019 | Data & Cybersecurity, Privacy, Public Policy

Trying to predict the privacy weather report for third party risk? The dialog on online privacy is heating up in Washington D.C. this week as hearings and industry discussion on the merits of federal privacy legislation were prompted in the wake of the passage of the California Consumer Privacy Act ....

« Previous PageNext Page »