Skip to content
State of Third-Party Risk Management 2027
1.
Organization and TPRM Program Background
This survey has 24 questions and takes about 10 minutes to complete. We appreciate your responses and your candidness.
*
1.
What industry are you in?
(Required.)
Banking
Credit Union
Mortgage
Fintech
Broker-Dealer/Investment Adviser
Wealth/Asset Management
Insurance
Holding Company
Non-Financial Institution Lending
Other (please specify)
*
2.
What is the size of your organization based on total assets?
(Required.)
Less than $250 million
$250-$499 million
$500-$999 million
$1 billion-$10 billion
Greater than $10 billion
*
3.
How many full-time employees are dedicated to your third-party risk management program?
(Required.)
0: No one fully dedicated but existing employees share tasks
0: We don’t perform TPRM
1
2
3-5
6-10
11-20
20+
*
4.
How many total vendors are included in your third-party risk management program?
(Required.)
<50
51-100
101-300
301-500
501-1,000
1,000+
Unsure
*
5.
What operating model do you use for your TPRM program?
(Required.)
Centralized
– One team handles all vendor risk and performance management.
Decentralized
– No dedicated TPRM team; responsibilities spread across organization.
Hybrid
– A dedicated team owns the framework and oversight; vendor owners handle day-to-day.
Totally outsourced
– All TPRM functions are performed by external vendors.
*
6.
What are your primary tools for managing vendor risk? Select all that apply.
(Required.)
Vendor risk management software platform
Excel/Google Sheets
General AI Tool (CoPilot, ChatGPT, Claude, etc.)
SharePoint
Access Database
Other (please specify)
*
7.
On a scale from 1 to 5, with 5 being most satisfied, how satisfied are you with your current primary tool(s)?
(Required.)
1
2
3
4
5
1 / 3
33%
