TPRM 101: Risk Identification

Risk Identification is the fourth section of the Pre-Contract Due Diligence phase in the TPRM lifecycle. This video explores how to identify and categorize risks associated with third-party engagements—before contracts are signed and services begin.

Key features include:

• Techniques for gathering data and documentation from vendors

• Risk domains to evaluate (e.g., information security, financial viability, compliance)

• How to align findings with business expectations and regulatory exposure

• Common red flags and how to investigate them further