The Complete Handbook of Third Party Risk Management

Third-party risk has moved from a back-office concern to a boardroom priority. Yet many organisations still manage their vendor relationships through fragmented processes that leave critical gaps in oversight, resilience, and accountability.

This book offers a clear, practical roadmap for building a robust third-party risk management framework, one that moves organisations from reactive compliance to proactive resilience. It covers the entire vendor lifecycle, from business case and due diligence through onboarding, monitoring, and exit, across regulations spanning multiple global jurisdictions. It introduces proprietary frameworks including the KRIS TPRM Methodology (a 14-stage risk lifecycle), the KRIS PCD Framework (Prevention, Control, Detection) for control design, and the KRIS Risk Maturity Assessment Model for programme evaluation.

With a strong emphasis on governance, cross-functional collaboration, and operational resilience, this book is an essential guide for professionals in risk management, compliance, procurement, audit, and information security, as well as for students, academics, and regulators seeking structured, real-world insights into managing third-party risk.

Serving as the official reference for the Certified Third-Party Risk & Assurance Manager (CTPRAM) programme, it functions both as a practical handbook and a trusted learning resource for those dedicated to strengthening organisational resilience.