Enterprise Third Party Risk Management

Conducted third party risk management program current states assessment against regulatory requirements and developed a transformational roadmap to achieve the intended maturity level. The scope of the engagement covered third-party types landscape (beyond vendors) and risk categories (beyond cyber and data privacy risks).

Assisted in designing, implementing and operationalizing and third party risk management program globally to ensure compliance with Central Bank of UAE regulations. The scope of the engagement covered of risk domains such as ESG, Litigation, Regulatory, Compliance etc.

Assessed “As-is” state of the TRPM program across APAC, Americas, and EMEA and developed a transformation roadmap including recommendations for harmonization of global processes. Also, designed, implemented and operationalized the Enterprise TRPM Target Operating Model (TOM) globally. Further supported in conducting service risk assessment, and remediation management exercise to review and address regulatory requirements. Risk Domain Coverage: Financial, CSR, Compliance, People/HR, Process, and Operational Resiliency, Data Privacy, ICT, Reputational, Legal, and Fourth Party.

Assisted in uplifting the existing TPRM framework components and provided support in implementing and integrating technology platforms. Further, designed a dashboard, scorecard and visualization report. The scope of the engagement covered risk domains such as Information Security, Legal, Reputational, Contract etc.

Assisted in designing Enterprise TPRM framework including TPRM Policy, Standard, and Procedures. The scope of the engagement covered risk domains such as Information Security, Privacy, Anti-bribery and Corruption, Sanctions, Complementary Workers, EHS, Labor Rights, Financial Risk, Operations and BCM, Fourth Party Risk, etc.

Assessed "As-Is" state of the TPRM program across APAC, Americas and EMEA and developed a transformation roadmap including recommendations for harmonization of global processes. Also, designed, implemented, and operationalized the Enterprise TPRM Target Operating Model (TOM) globally. Further, supported in conducting service risk assessment, and remediation management exercise to review and address regulatory requirements. Risk Domain Coverage: Financial, CSR, Compliance, People/HR, Process and Operational Resiliency, Data Privacy, ICT, Reputational, Legal, and Fourth Party.

Reviewed and uplifted existing Enterprise TPRM program based on identified areas of improvements aligned with industry- leading practices and peers. Also, supported in the enhancing current One Trust module to cover risk areas beyond cyber and data privacy, and integrating the OneTrust VRM module with SAP Ariba. Additionally, conducting a third party risk assessment for new and existing third parties covering risk areas such as Cyber, ESG, Financial Viability Check, Operational and BCM, and Trust.

Assisted in conducting maturity assessment against industry leading industrial practices and peer organization. The scope of the engagement covered assessing the maturity level of existing people, process and technology covering risk domains such as Information Security, Privacy, Anti-bribery and Corruption, Financial viability, and Reputational risk.