Answer 10 quick questions and you’ll get a personalized maturity score along with practical next steps for strengthening your program.
Take the Assessment
Get Your TPRM Maturity Score in Minutes
In about five minutes, you’ll answer 10 targeted questions that show where your program is strong and where gaps exist across all five dimensions of TPRM maturity, then receive a personalized score with recommendations you can use to plan your next steps.
How does your organization maintain its inventory of third-party relationships?
Answers
How does your organization conduct due diligence on third parties before onboarding them?
Answers
How does your organization handle sanctions, watchlist, and adverse media screening?
Answers
How does your organization monitor third-party risk after a vendor has been onboarded?
Answers
How does your organization prioritize which third parties require the most attention?
Answers
How connected is your TPRM program to other internal compliance and risk processes?
Answers
How much visibility does your organization have into fourth-party and sub-tier supplier relationships?
Answers
How long does it typically take to onboard a new third party from initiation to approval?
Answers
Which best describes the role of AI and technology in your third-party risk management program today?
Answers
How does your organization's leadership view the TPRM program?
Answers
One step left
Tell us where to send the full breakdown and your result appears straight away.
0Your score
Stage 1 - Informal
Phase 1 - Informal
Third-party risk management exists on paper but lacks the infrastructure to be effective. Vendor information lives in department spreadsheets and email threads — there is no consistent onboarding mechanism, no structured assessment workflow, and no central record of who your vendors are or what risks they carry.
Your organization has a documented TPRM policy and some basic automation — typically a questionnaire tool or a GRC module. But the program remains fundamentally reactive: assessments happen primarily at onboarding, ongoing monitoring is minimal, and the team spends most of its time chasing completions rather than analyzing risk.
You've implemented dedicated TPRM software and documented processes across the vendor lifecycle. Risk triage is more consistent and the team has visibility into assessment status across the portfolio. But the data doesn't yet connect — TPRM sits in its own system, separate from COI, gifts and entertainment, and incident management.
TPRM is a continuous, connected, and increasingly intelligent function. Onboarding is faster (under two weeks) as automated screening, AI-powered risk scoring, and configurable workflows eliminate manual bottlenecks. Monitoring covers your full vendor portfolio in real time, and a risk signal is immediately visible in the context of that vendor's full profile.
TPRM is fully embedded in your organization's broader risk, ethics, and business strategy. Due diligence is frictionless, vendor assessments are personalized using GenAI, and risk signals are surfaced the moment they emerge. Your compliance function uses third-party data alongside regulatory signals, HR data, and investigation outcomes to build a forward-looking picture of organizational risk.