A clear and bold header

Tracking 4th Party Vendors | VendorInsight®

Posted by Rachel McKenzie on Apr 19, 2019 8:21:48 AM

The Importance of Fourth-Party Vendor Tracking

Third-party vendor breaches are on the rise, but what about fourth-party risk? A fourth party is a subcontractor to your vendor, someone your vendor relies on or subcontracts to. The effectiveness of your vendor and the risk to you increasingly depends on fourth parties as your vendors outsource and subcontract critical activities. 

They go by a lot of names, including providers and strategic partners, and can provide bill pay, mobile banking, core processing, legal or other services.

Read More

Topics: fourth party, risk management, vendors, subcontractor

New Watchword: Subservice Organization

Posted by Jay Fitzhugh on Mar 28, 2018 5:15:14 PM

By now, many organizations have begun to receive control audit reports covering 2017 (SOC1/SSAE18 and SOC2). One element of note is the emergence of subservice organizations, or fourth parties, in reports generated after May 1, 2017.

It is interesting to see the reveal of underlying providers (fourth parties) within the updated reporting formats. While these new formats intentionally define what is being performed by contracted fourth parties, the disclosure of who is performing these efforts is often not as revealing as we expected or hoped. At times, there is a fog placed on the identities of fourth parties; phrases like "industry-recognized third party" or "subservice organization" are inserted in place of the names of the companies your vendors have outsourced responsibilities to.

Read More

Topics: Insider, Banking, Banks, Vendor management, subservice, control audit, control audit report, SSAE18, fourth parties, fourth party

VendorInsider Blog

Insight into Vendor Management Best Practices, Challenges, Solutions and Trends from Industry Insiders

As one of the longest running and most advanced vendor management software solutions, the helpful people of VendorInsight® have a unique perspective on third-party risk, compliance and management.  In the VendorInsider Blog, we share our insights on timely and relevant issues facing vendor managers.  You can subscribe using the button below, or contact us with questions.

Subscribe to Our Blog

Recent Posts