Vendor Centric Blog
Our blog provides practical advice for optimizing relationships with vendors and other third parties. Learn about best practices in procurement, contract management, third-party risk and much more.
If you’re finding it difficult to find a clear and succinct definition of vendor management, you’re not alone. With so much written about vendor management technology, there hasn’t been enough focus on the discipline itself. This blog provides a succinct, modern definition of vendor management, along with an overview of the practices and infrastructure necessary to support a well-run vendor management function...
If you’re finding it difficult to find a clear and succinct definition of vendor management, you’re not alone. With so much written about vendor management technology, there hasn’t been enough focus on the discipline itself. This blog provides a succinct, modern definition of vendor management, along with an overview of the practices and infrastructure necessary to support a well-run vendor management function...
- All
- Contract Management
- Procurement Management
- Technologies & Tools
- Third-Party Risk
- Vendor Lifecycle Management
- All
- Contract Management
- Procurement Management
- Technologies & Tools
- Third-Party Risk
- Vendor Lifecycle Management
Third-Party Risk
How Internal Audit Will Assess Third-Party Governance
The IIA’s Third-Party Topical Requirement sets the baseline internal auditors must follow when they audit how an organization manages its ...
Read More 
Third-Party Risk
Impact of the IIA’s Cybersecurity Topical Requirement on Third-Party Management
The IIA’s Cybersecurity Topical Requirement took effect on February 5, 2026. It sets the baseline internal auditors must follow when ...
Read More 
Third-Party Risk
IIA Third-Party Topical Requirement Gives You the Business Case You’ve Been Trying to Make
The thing that changes on September 15 is not that internal audit starts paying attention to third-party management. Audit has ...
Read More 
Third-Party Risk
IIA Third-Party Topical Requirement: What Vendor Management and TPRM Leaders Need to Know
The IIA’s Third-Party Topical Requirement takes effect September 15, 2026, and it will change how your vendor and TPRM program ...
Read More Third-Party Risk
Third-Party Management Is Evolving. Are You Keeping Pace?
Ask five people what third-party management means and you’ll likely get five different answers. Not because the profession lacks definition, ...
Read More 
Third-Party Risk
Why AI Vendor Risk Exposes Deeper Problems in TPRM Programs
According to the Ncontracts 2026 State of Third-Party Risk Management Survey, AI vendor risk has tied cybersecurity as the top ...
Read More Vendor Lifecycle Management
You Manage Your Employees Better Than Your Vendors. Here’s Why That’s a Problem.
Think about what it takes to onboard a new employee. Before they sit down at their desk, your organization has ...
Read More Third-Party Risk
9 Design Questions Every Vendor Management Program Needs to Answer
I get asked this more than almost anything: how do you shape and right-size a third-party risk management program to ...
Read More Vendor Lifecycle Management
Five Friction Points That Signal Your Vendor Management Program Needs a Refresh
Most vendor management programs have friction. The question isn’t whether it exists, it’s whether anyone is paying attention to what ...
Read More