The Shared Assessments Program’s VRMMM serves as the “benchmark” component for evaluating third party risk assessment programs using a scale that defines comprehensive practice characteristics ranging from best practice levels to programs that are just starting out. The VRMMM allows for assessment of the current program practice effectiveness against the desired state of an organization’s third party risk management program.
