As corporate boards, auditors and regulators increase their scrutiny of vulnerabilities associated with third-parties, vendor risk management (VRM)—and particularly the danger of lost or compromised data through third-party service providers—remains cause for concern at most organizations. This is what Protiviti’s most recent VRM benchmarking survey
In our 2015 survey report, we grouped responses according to the respondent’s level of responsibility: chief executive, vice president and manager. For 2015, average responses by category ranged from 2.4 at the C-level to 2.8 for managers. In 2014, the range was 2.3 to 2.8. The average response for vice presidents fell in the middle of this range. Clearly, not a lot of change here. In this article, Protiviti Managing Director Rocco Grillo further examines the survey results.