ITPRM Institute for Third Party Risk Management
Non-profit membership institute · Founded 2026

A common discipline for third party risk.

ITPRM is a member-governed institute for practitioners, academics and organisations working with contract management and third party risk. We publish open method, maintain shared toolkits, and convene the people who run these programmes.

See membership tiers Browse the toolkits
3
Membership tiers
27
KPIs in the library
4
KPI classifications
12
Sessions a year
Purpose

To raise the standard of third party risk and contract management practice through shared method rather than proprietary product. Everything the institute develops is published to its members.

Method

Working groups draft, members review, and the institute publishes. Definitions are versioned so a KPI means the same thing in two different organisations.

Scope

Supplier and vendor risk, contract governance, outsourcing and concentration exposure, with reference to DORA, NIS2 and ISO 37301 where relevant.

Membership

One institute, three ways in. All tiers carry full access to the published toolkits; the difference is seats, support and participation in governance.

Tier 01

Individual

Practitioners who own or work in a third party risk or contract management programme.

€180
per year, one named person
  • Full KPI library and definitions
  • TPRM assessment tool
  • All webinars, live and recorded
  • Network meetings at member rate
Apply as individual
Tier 02

Academic

Researchers, faculty and students at recognised institutions, plus teaching use of the material.

€60
per year, verified affiliation
  • Everything in Individual
  • Licence to use toolkits in teaching
  • Access to anonymised survey data
  • Call for papers and research notes
Apply as academic
Tier 03

Corporate

Organisations running a programme across procurement, risk, legal and IT.

€2,400
per year, up to 10 named seats
  • Everything in Individual, for 10 seats
  • Toolkits licensed for internal rollout
  • Seat on a working group
  • Annual benchmarking against peers
Apply as organisation

Toolkits

Practical instruments a member can put to work the same week. Published as documents and spreadsheets, versioned, with the reasoning written down.

Toolkit 01

KPI framework

A library of contract management and third party risk KPIs, each with a definition, a formula, a data source and an owner. Every KPI carries one of four classifications.

Key Supporting Prescriptive Detective
Open the KPI library
Toolkit 02

Third party risk assessment tool

A deliberately simple instrument: criticality tiering, an inherent risk score across eight domains, control evidence, and a residual rating that decides the depth of due diligence. Ships as a spreadsheet; a browser version is in development.

Excel Members only
Run an assessment
Toolkit 03

Contract governance pack

Clause checklists, exit and step-in planning, obligation registers and a review calendar. Written to be adapted, not adopted whole.

In draft
Notify me on release

Sessions and events

Webinars, network meetings and working sessions. Members attend at no cost unless stated. Full programme
Date Format Title Access
08 Oct 2026 Webinar Defining a KPI that survives an audit Open to all
05 Nov 2026 Network meeting Concentration risk in cloud and payment providers Members
26 Nov 2026 Working group Assessment tool v2 — scoring model review Members
14 Jan 2027 Webinar Exit planning: what regulators actually ask for Members

Stay informed

Choose what you want to hear about. No membership required, and each type is a separate list you can leave on its own.

One email per topic, no more than monthly. Unsubscribe from any list at any time.

Membership opens the institute, not a paywall.

Applications are reviewed weekly. Tell us which tier fits and we will confirm within five working days.

We only use these details to process your application.