العربية

Maturity self-assessment · about 3 minutes

How mature is your third-party programme?

Ten questions, one per stage of the lifecycle. Pick the answer closest to how things work in practice today.

Your answers stay on this page. Nothing is sent or stored, and reloading clears them.

This self-assessment needs JavaScript to work out your result.

1InventoryHow complete is your list of third parties?
2TieringHow do you set each third party's risk tier?
3Due diligenceWhat happens before a contract is signed?
4Critical operationsDo you know which third parties support your critical operations?
5ContractsDo your contracts carry the terms your regulator expects?
6Regulator noticesHow do you handle regulator notices and approvals for outsourcing?
7MonitoringHow do you monitor third parties after onboarding?
8IncidentsIf a vendor has an incident, how quickly can you notify your regulator?
9ExitHow ready are you to leave a critical vendor?
10Board reportingWhat does your Board see on third-party risk?

0 of 10 answered

This self-assessment is for orientation only. It does not replace an audit or regulatory advice.