Third-Party Risk Management
What’s in this report from Rethink Compliance:
Third-party relationships are essential to modern business, but they can also introduce significant ethics and compliance risks. Rethink Compliance’s 2026 benchmarking study examines how organizations are identifying, screening and managing those risks, drawing on responses from nearly 130 E&C practitioners across more than 20 industries. The detailed findings focus on 83 organizations with existing TPRM programs and explore the practices, controls and technologies they use.
The study examines:
- Which E&C risks organizations address through their TPRM programs and where emerging risks like AI, data privacy and cybersecurity remain less commonly covered.
- Which types of third parties are screened, from service providers and suppliers to agents, distributors, M&A targets and fourth parties.
- How organizations use due diligence, third-party codes of conduct, contractual audit rights, training and ongoing monitoring to manage risk.
