PlaybookADTP-GDE-021
The Third-Party Risk Playbook
Running a programme that scales with the vendor list
Tiering, questionnaires that earn their length, contract terms, monitoring and offboarding, at three organization sizes.
Contents
- §Tiering that survives contact
- §Questionnaires people answer
- §Reading a SOC 2 report properly
- §Contract terms that matter
- §Continuous monitoring
- §Offboarding and data recovery