What is the Shared Assessments Framework?
The Shared Assessments Program’s Third-Party Risk Management (TPRM) Framework is designed to provide guidance for organizations seeking to develop, optimize and/or manage Third-Party Risk by incorporating a wide range of best practices into their risk management program. The Framework also provides guidance about how to implement meaningful incremental improvements in TPRM practice maturity in organizations where resources may be constrained.

How to Use the Framework
This Framework can help your organization identify the right resources in pre-requisites and process factors to be considered when building an organization’s TPRM program. The SA TPRM Framework is organized into two main areas, Fundamentals and Processes. Each module contains a table of contents, executive summary, a deep dive for practitioners, an index and links to the Shared Assessments TPRM Glossary to help the reader zero in on areas of interest.
Feedback or Questions
The Shared Assessments Program welcomes feedback on the Framework. If you have questions or comments, please Contact Us.
TPRM Fundamentals
Framework Introduction | Explore Membership |
TPRM Risk Basics | Explore Membership |
Additional chapters coming soon including Achieving Management Buy-in, Program Governance. |
TPRM PROCESSES
Due Diligence | Explore Membership |
Contracts | Explore Membership |
Periodic and Continuous Monitoring | Explore Membership |
Additional chapters coming soon including Outsourcing Risk Analysis, Strategy and Vendor Selection, VRM and Contract Compliance, Renewal, Termination or Closing. |