BPO buyer organizations talk the talk when it comes to governance and include it in their contracts, but many are not walking the walk. Thorough BPO vendor management is inconsistent at best, and this ...

As the entire industry is facing the shift to a more formalized reporting system for environmental, social, and governance (ESG) programs, the most important components of the programs can no longer ...

This content is provided by an external author without editing by Finextra. It expresses the views and opinions of the author. ITM VRM 3.6 was developed through extensive work with some of the world's ...

Many articles and conference presentations focus on how to choose IT vendors, what to include in contracts and the need for oversight of these vendors after the contract is signed. Because of the ...

The SolarWinds hack highlights the critical need for organizations of all sizes to include cyber supply chain risk management as part of their information security program. It is also a reminder that ...

Questionnaires are a vital part of understanding how your vendors manage cybersecurity risk; they'll help you understand the investments your vendors have made for positive risk outcomes across people ...