Risk Management Association of India
Global body dedicated to education, research and development on Risk Management
Organisations are facing increasing exposure to third-party and supply-chain risks as they rely on external vendors for technology, cloud services, logistics, manufacturing, data processing and other critical operations. Third-party failures can create risks well beyond the immediate supplier relationship. A Read More …
Global professional services firm PricewaterhouseCoopers (PwC) has confirmed a cybersecurity incident involving an external service provider responsible for hosting its employee learning records. The disclosure follows allegations by the cyber extortion group Everest that it had stolen approximately 590 gigabytes Read More …
Four US financial regulators have proposed new third-party risk management guidance aimed at helping banks and credit unions tailor vendor oversight to the actual risks posed by individual third-party relationships. The proposal was issued by the Office of the Comptroller Read More …
Security risk management in the mining sector is evolving beyond the traditional focus on illegal mining, encompassing a broader spectrum of operational, environmental, and strategic risks. The article highlights the need for a more comprehensive and integrated approach to managing Read More …
US federal banking regulators have proposed revised guidance for third-party risk management, seeking to replace existing guidance with a more risk-based framework for banks and credit unions. The proposal was issued jointly by the Office of the Comptroller of the Read More …
The European Union’s Digital Operational Resilience Act (DORA) is making third-party and ICT vendor risk management a formal regulatory responsibility for financial institutions, increasing the importance of documented controls, contractual safeguards and continuous oversight. DORA strengthens requirements around how financial Read More …
Struggling to keep third party vendor risk in check? Smart Online Course, in association with Risk Management Association of India (RMAI) offers the Online Certificate Course in Third Party and Vendor Risk Management. This 6-hour online course empowers you with Read More …
Google, Air France/KLM, Workday and TransUnion – When Third-Party SaaS Becomes the Weakest Link leading to Salesforce CRM Breach Why Salesforce CRM Breach case matters In mid–2025, a coordinated cyber campaign hit dozens of major enterprises by targeting their Salesforce Read More …
The concept of fourth-party risk is increasingly relevant for organisations that rely on extended supply chains and multi-layer subcontracting. In the article by Russell McVeagh, a prominent New Zealand law firm, the authors argue that firms must look beyond their Read More …
Vendor Risk Management (VRM) or Third-Party Risk Management (TPRM) is emerging as a key focus area for the Enterprise Risk Management team in the recent years. Mitigation of Third-party Risk is becoming increasingly challenging given the interconnected Business environment. Also, Read More …