Papers and Studies

Audit readiness starts long before an audit begins. Preparing for Audits & Examinations provides practical guidance to help TPRM teams prepare for and navigate the pre-audit, fieldwork, and post-audit phases with greater confidence and consistency. From maintaining reliable data and documentation to managing auditor interactions and acting on findings, the paper shows how organizations can […]

This executive summary highlights the most significant findings from Shared Assessments’ 2026 Mid-Year Risk Report, drawn from interviews with risk management and TPRM leaders across industries. It examines how risks once considered “emerging”—AI adoption, quantum computing timelines, geopolitical instability, and regulatory fragmentation—have become operational and interconnected, reshaping priorities across six risk categories. The summary outlines […]

The Shared Assessments Mid-Year Risk Report explores how once-emerging risks are becoming immediate, interconnected priorities for Third-Party Risk Management (TPRM) programs in 2026. Drawing on insights from risk management and TPRM leaders across industries, this report examines the shifting risk landscape and the practical actions organizations can take to strengthen resilience and connect third-party risk […]

Third-party risk leaders are being asked to communicate more than program activity–they are being asked to communicate business impact. During Shared Assessments’ June All Committees Call, Inside Third-Party Risk Board Reporting: Best Practices and Lessons Learned, practitioners, executives, and board advisors came together for an open community discussion on how organizations can elevate board reporting […]

Shared Assessments’ End-of-Year Risk Report highlights the challenges TPRM leaders are facing, as well as the programmatic changes they have planned for 2026 or have already implemented in response.  Our discussions with TPRM leaders surfaced six interconnected themes: – Resource constraints are real – TPRM teams are reimagining and transforming processes – Automation represents a […]

As third-party risks grow, evaluating vendor insurance coverage is a critical part of effective TPRM oversight. This paper highlights best practices for assessing, validating, and monitoring insurance protections, emphasizing collaboration, clear contractual expectations, and alignment with actual risk exposure.  Key areas of focus include:  – Partnering with internal insurance leaders to understand required coverage types […]

As AI becomes more deeply embedded in third-party products and services, Planning and Due Diligence have become critical stages for identifying risks before they are locked into contracts or operations. This paper highlights leading practices for organizations seeking to strengthen early-stage oversight of AI-enabled suppliers. It emphasizes the need for cross-functional collaboration, clear alignment with […]

As third-party risk continues to grow across industries, resourcing challenges are emerging from all directions. With increasing reliance on third parties, rising regulatory pressure, and rapid advances in AI and automation, Third-Party Risk Management (TPRM) programs are being stretched in new ways. This briefing paper explores why traditional staffing models for TPRM are struggling to […]

The Shared Assessments Mid-Year Risk Report explores how recent global disruptions are reshaping the top risk domains impacting Third-Party Risk Management (TPRM) programs in 2025. Drawing on industry-leading research and insights from our member community, this paper examines the shifting landscape and provides practical guidance for risk leaders navigating an increasingly complex environment. Key topics […]

As artificial intelligence becomes increasingly integrated into third-party products and services, traditional contract terms may no longer be sufficient to manage emerging risks. This paper highlights key contractual and governance considerations for organizations seeking to strengthen oversight of AI-enabled suppliers. It outlines important issues to be aware of when evaluating AI-related engagements and preparing contracts […]

As third-party ecosystems grow more complex, continuous risk monitoring has become a vital component of mature TPRM programs. This paper explores how organizations are maximizing the value of their monitoring tools to improve supply chain visibility, strengthen compliance, and drive smarter risk decisions. The purpose of this paper is to: – Explore how leading TPRM […]

As organizations increasingly rely on third-party vendors, having a well-defined approach to vendor terminations becomes essential for maintaining operational continuity and mitigating risks. This paper outlines how organizations can implement pre-determined, vendor-specific plans that facilitate smooth transitions and protect business continuity. By proactively managing termination risks, companies can minimize disruptions and safeguard critical operations. Key […]