---
title: ThirdPartyTrust Blog | Lily Hwang
description: VRM, Vendor Risk Managerment, Vendor Intelligence
---

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

[![ThirdPartyTrust](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/3ptlogonav-1%20(1).png)](https://www.thirdpartytrust.com/) [![ThirdPartyTrust](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/smaller-1.png)](https://www.thirdpartytrust.com/)

- [Product](https://www.thirdpartytrust.com/enterprise-solutions) 
    - [Enterprise Solutions](https://www.thirdpartytrust.com/enterprise-solutions)
    - [Vendors Solutions](https://www.thirdpartytrust.com/vendor-solutions)
- Industries 
    - [Financial Services](http://www.thirdpartytrust.com/financial-services)
    - [Life Sciences](https://www.thirdpartytrust.com/lifesciences)
    - [Healthcare](https://www.thirdpartytrust.com/healthcare)
    - [Energy](https://www.thirdpartytrust.com/energy)
- News & Events 
    - [Blog](https://info.thirdpartytrust.com/blog)
    - [Press Releases](https://info.thirdpartytrust.com/pressreleases)
    - [ThirdPartyTrust Events](https://www.thirdpartytrust.com/thirdpartytrust-events)
- Resources 
    - [Who We Are](https://www.thirdpartytrust.com/about)
    - [Videos](https://www.thirdpartytrust.com/videos)
    - [Become a Partner](https://www.thirdpartytrust.com/become-a-partner)
    - [Current Partners](https://www.thirdpartytrust.com/partners)
    - [API](http://docs.thirdpartytrust.com/)
    - [Product Security](https://www.thirdpartytrust.com/security)
- [Login](https://app.thirdpartytrust.com/)

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

# ThirdPartyTrust Blog

## Lily Hwang

### Recent Posts

## [The key essentials when designing the process around third-party risk management](https://info.thirdpartytrust.com/blog/key-essential-designing-the-process-around-tprm)

 Posted by [Lily Hwang](https://info.thirdpartytrust.com/blog/author/lily-hwang) on 12/13/19 3:43 PM

- [Tweet](https://twitter.com/share)

[![computer+hands2sm](https://info.thirdpartytrust.com/hubfs/computer+hands2sm.png)](https://info.thirdpartytrust.com/blog/key-essential-designing-the-process-around-tprm)

When you are deciding to create a framework for your third-party risk program you need to take the following into consideration:

- How are you going to categorize your third-parties?
- How would you rank your third-parties?
- What is  the criteria/requirement for each one of those categories?

Other areas to consider involve the people component of the workflow, such as business owners, legal, and procurement.  Especially during the contracting phase, by including legal language that assessments and/or assurance programs must be provided. Also, include stipulations regarding renewals that reassessments are required. 

And of course, there is technology, the enabler. Technology provides the automation and a structured way to capture specific data for business and executives to make key decisions on these relationships. Monitoring these data points will contribute to the success or failure of that third-party. 

[Read More](https://info.thirdpartytrust.com/blog/key-essential-designing-the-process-around-tprm)

 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/key-essential-designing-the-process-around-tprm#comments-listing)

 Topics: [Vendor Risk Management](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management), [third party risk](https://info.thirdpartytrust.com/blog/topic/third-party-risk)

[All posts](https://info.thirdpartytrust.com/blog/all)

ThirdPartyTrust is a vendor risk management platform strengthening cyber risk intelligence and simplifying the management process for enterprises performing vendor risk assessments.

 

By analyzing both third and fourth party vendor cyber risk using a network-based solution, like 3PT, trust is built and mapped within your vendor eco-system.

### Subscribe to Email Updates

### Recent Posts

### Posts by Topic

- [Vendor Risk Management (13)](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management)
- [third party risk (7)](https://info.thirdpartytrust.com/blog/topic/third-party-risk)
- [Regulation (6)](https://info.thirdpartytrust.com/blog/topic/regulation)
- [Data Breaches (3)](https://info.thirdpartytrust.com/blog/topic/data-breaches)
- [Panel Discussions (3)](https://info.thirdpartytrust.com/blog/topic/panel-discussions)
- [Partnerships (3)](https://info.thirdpartytrust.com/blog/topic/partnerships)
- [Best Practices (2)](https://info.thirdpartytrust.com/blog/topic/best-practices)
- [Cyber Tools (2)](https://info.thirdpartytrust.com/blog/topic/cyber-tools)
- [GDPR (2)](https://info.thirdpartytrust.com/blog/topic/gdpr)
- [IoT Security (2)](https://info.thirdpartytrust.com/blog/topic/iot-security)

see all

[![facebook](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/f1.png)](https://www.facebook.com/thirdpartytrust) [![twitter](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/13.png)](https://twitter.com/thirdpartytrust) [![linkedin](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/11.png)](https://www.linkedin.com/company/thirdpartytrust)

[sign up for our newsletter](https://www.thirdpartytrust.com/sign-up-for-newsletter)