TPRM Home page

  • Release version: Xanadu
  • Updated July 31, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of TPRM Home page

    The TPRM Home page provides TPR managers and assessors with essential risk information and quick access to various actions related to third-party risk management. Users can easily navigate to this page through the Vendor Management Workspace.

    Show full answer Show less

    Key Features

    • Third-Party Risk Overview: Users can click numbers in boxes to view associated lists of third parties or engagements and have options to export data or initiate new engagement requests.
    • Quick Actions:
      • Create a third-party record, including key data and contact information.
      • Define an engagement to assess associated risks with third-party services or products.
      • Conduct a tiering assessment to classify third parties by potential risk using predefined tiers (None, Low, Minor, Moderate, High, Critical).
      • Initiate the third-party risk assessment life cycle.
      • Create issues and tasks to address concerns during the due diligence process.
    • Third-Party Population Overview:
      • Risk ratings by tiers, showing the number of engagements per risk rating.
      • Top risk areas, displaying average risk scores across defined risk domains.
      • Issues by priority, highlighting the count and priority of high-priority open issues.
      • Fourth-nth party overview, providing counts of associated fourth parties and their sub-parties.

    Key Outcomes

    By utilizing the TPRM Home page, customers can efficiently manage third-party risks, ensuring that all engagements are properly assessed and monitored. This streamlined access to risk information and actions enhances the organization's ability to mitigate potential risks associated with third parties and maintain compliance throughout the risk management process.

    The home page displays reports of important risk information and provides quick access to actions for TPR managers and TPR assessors.

    Accessing the page

    To open the Home page in the Vendor Management Workspace, select Workspaces > Vendor Management Workspace and on the Risk tab select the home page icon .

    Reports on the TPRM home page.

    Third-party risk overview

    Select any number in a box to open the associated list of third parties or engagements.

    Reports on the TPRM home page.

    After you open a list, you can select Export to export the data or select New to create a new engagement request.

    Quick actions
    • Create a third party record. Set up the key data and contact information for a third party that your organization will possibly engage. See Create a VRM third party record.
    • Define an engagement. Define an engagement so that you can assess the risks that are associated with the services or products offered by a third party. Engagements can also represent the products or services that are provided to the parent third party, either directly or from departments, partners, or subsidiaries that you can also assess for risk. Define a VRM engagement.
    • Create a tiering assessment. Organizations use risk tiering to classify their third parties into categories of potential risk posed at the time of onboarding. The standard predefined risk tiers are None, Low, Minor, Moderate, High, and Critical. Each risk tier has associated assessment questions and document requests. See VRM third-party risk tiering assessments.
    • Create an assessment and initiate the third-party risk assessment life cycle. See Create an external assessment — Legacy process.
    • Create an issue to help ensure that your concerns about a third party or engagement are remediated. See Create an issue for a third party or engagement.
    • Create a task to help ensure that a user at your organization or the third-party contact responds to your concerns about questionnaire responses or requested documents during the due diligence process. See Create a task for a third party or engagement.
    Third-party population overview
    • Risk rating by risk tiers: The number of engagements at each risk rating for each third-party risk tier. See Set up risk rating scales for scoring.
    • Top risk areas:

      The average risk score for engagements that are associated with each risk domain that you’ve defined.

      Note:
      Risk domains are called "risk areas" in some platform applications.

      A risk domain defines the type of risk to assess for a third party. For example, you might want to assess a data-management third party in terms of security risk and a bank in terms of financial risk. Security risk and financial risk are risk domains. Some platform applications refer to risk domains as "risk areas." See Define a third-party risk domain.

    Issues by priority
    Count and priority of the highest priority open issues. Select an issue name to view the Risk overview tab of the issue page. See Manage issues.
    Fourth-nth party overview
    Counts of fourth parties and their sub-parties that are associated with third parties or engagements and unknown fourth parties. Select a segment of the corresponding graph to view a list of known or unknown fourth-parties.
    Note:
    Known fourth parties are organizations that have already been utilized as third parties in your risk management program and unknown fourth parties are only categorized as fourth parties and haven’t been utilized or identified as third parties.