ITPRM Institute for Third Party Risk Management
Knowledge

Notes, method papers and commentary

Short, dated and signed. Method papers accompany a toolkit release; notes respond to a regulatory change; commentary is a member’s argument, published because it is worth arguing with.

Filter
Method paperSep 2026

Four classifications for third party KPIs

Why key, supporting, prescriptive and detective is a more useful split than leading and lagging when the audience is a risk committee.

KPI working groupOpen
NoteAug 2026

Register completeness before register accuracy

A programme that cannot list its third parties cannot rate them. A sequence for the first ninety days.

SecretariatOpen
Method paperAug 2026

The residual scoring model, explained

The weighting behind the assessment tool, the objections raised in review, and what was changed.

Assessment working groupMembers
CommentaryJul 2026

Questionnaires have reached their limit

An argument that assurance effort should follow substitutability rather than contract value.

Member contributionOpen
NoteJun 2026

Reading DORA into an existing supplier register

Which fields most European programmes are missing, and the minimum set that closes the gap.

Regulatory working groupMembers
CommentaryMay 2026

Concentration is a portfolio measure, not a contract measure

Why counting critical suppliers tells you very little about your actual exposure.

Member contributionOpen

Write for the institute

Members may propose a note of 800 to 2,000 words. Two reviewers, no fee, published under your name with a standing correction policy.

Propose a noteSubscribe to new publications