{"id":71234,"date":"2026-10-29T11:05:32","date_gmt":"2026-10-29T10:05:32","guid":{"rendered":"https:\/\/www.usd.de\/?page_id=71234"},"modified":"2026-11-09T09:20:17","modified_gmt":"2026-11-09T08:20:17","slug":"supplier-monitoring","status":"publish","type":"page","link":"https:\/\/www.usd.de\/en\/security-audits\/supplier-monitoring\/","title":{"rendered":"Supplier Monitoring"},"content":{"rendered":"<p>[et_pb_section fb_built=\"1\" _builder_version=\"4.16\" _module_preset=\"default\" custom_padding=\"0px||0px||true|false\" locked=\"off\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_row _builder_version=\"4.16\" _module_preset=\"default\" width=\"100%\" custom_padding=\"0px||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" text_text_color=\"#FFFFFF\" text_font_size=\"30px\" text_line_height=\"1.2em\" header_font=\"Roboto||||||||\" header_text_color=\"#F07F1D\" header_font_size=\"50px\" background_color=\"rgba(99,99,99,0.47)\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-security-audits-header-lieferantenaudit.jpg\" background_blend=\"multiply\" custom_margin=\"-25px||0px||false|false\" custom_padding=\"95px||60px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h1 style=\"text-align: center;line-height: 120%;font-weight: 400\">Supplier Monitoring<\/h1>\n<p style=\"text-align: center;line-height: 130%\">Gain Visibility Into Critical Suppliers to Assess<br \/>\nRisk with Confidence<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"2_5,3_5\" _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"-10px||-10px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"2_5\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-AG-Dienstleisterueberwachung-Kachel.jpg\" title_text=\"usd-AG-Dienstleister\u00fcberwachung-Kachel\" disabled_on=\"on|off|off\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][\/et_pb_column][et_pb_column type=\"3_5\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]Supplier relationships evolve over time. New risks emerge, evidence becomes outdated, and regulatory requirements continue to change. This makes it all the more important to assess critical suppliers regularly and provide internal and external evidence that agreed security and compliance requirements continue to be met.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"0px||0px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<p>Continuous supplier monitoring provides the necessary foundation. It is a key component of effective Third-Party Risk Management\u00a0(<a href=\"https:\/\/www.usd.de\/en\/security-consulting\/third-party-risk-management-tprm\/\">TPRM<\/a>) and helps organizations continuously assess and appropriately manage risks in supplier relationships. At the same time, you can meet requirements arising from laws, regulations, standards, and industry frameworks, including:<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li>Legal and regulatory requirements such as <a href=\"https:\/\/www.usd.de\/en\/security-consulting\/dora\/\">DORA<\/a>, <a href=\"https:\/\/www.usd.de\/en\/bafin-publishes-9th-amendment-to-marisk\/\">MaRisk<\/a>, <a href=\"https:\/\/www.usd.de\/en\/nis-2\/\">NIS-2<\/a>, and <a href=\"https:\/\/www.usd.de\/en\/security-audits\/kritis\/\">KRITIS<\/a><\/li>\n<li>Requirements from standards such as ISO 9001 and<a href=\"https:\/\/www.usd.de\/en\/security-consulting\/isms-iso27001-consulting\/\"> ISO 27001<\/a><\/li>\n<li>Internal requirements<\/li>\n<li>Industry requirements such as TISAX or <a href=\"https:\/\/boostaerospace.com\/aircyber\/\" target=\"_blank\" rel=\"noopener\">AirCyber<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_testimonial portrait_url=\"https:\/\/www.usd.de\/wp-content\/uploads\/Jan-Kemper_rund.png\" quote_icon_color=\"#F07F1D\" quote_icon_background_color=\"#FFFFFF\" font_icon=\"&#xe06a;||divi||400\" portrait_width=\"200px\" portrait_height=\"200px\" use_icon_font_size=\"on\" icon_font_size=\"35px\" _builder_version=\"4.27.9\" _module_preset=\"default\" background_color=\"RGBA(255,255,255,0)\" custom_padding=\"3%||0px||false|false\" animation_style=\"fade\" border_width_all=\"2px\" border_color_all=\"#F07F1D\" border_radii_portrait=\"on|100%|100%|100%|100%\" border_color_all_portrait=\"RGBA(255,255,255,0)\" box_shadow_style_image=\"preset4\" box_shadow_horizontal_image=\"0px\" box_shadow_vertical_image=\"0px\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<p><span style=\"font-size: 18px;font-weight: 300\">In practice, not every supplier is equally important to an organization. Accordingly, monitoring measures should also be risk-based. Assessing all suppliers according to the same approach often primarily creates additional effort. It makes more sense to align the level of effort and depth of review with the importance of the respective supplier.<\/span><br \/><\/br>Jan Kemper, Principal usd Security Audits<\/p>\n<p>[\/et_pb_testimonial][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h2>Why Choose usd AG for Supplier Monitoring?<\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]Whether you need to conduct a single supplier audit or monitor a large number of different suppliers throughout the year, our <a href=\"https:\/\/www.usd.de\/en\/security-audits\/our-auditors\/\">auditors <\/a> support you in planning, conducting, and following up on your supplier audits. You benefit from hands-on experience across a wide range of industries and audit environments.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row disabled_on=\"on|on|off\" _builder_version=\"4.27.9\" _module_preset=\"default\" custom_padding=\"0px||0px|||\" hover_enabled=\"0\" global_colors_info=\"{}\" theme_builder_area=\"post_content\" sticky_enabled=\"0\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_slider show_content_on_mobile=\"off\" disabled_on=\"off|off|off\" _builder_version=\"4.27.9\" _module_preset=\"default\" body_text_align=\"center\" background_color=\"RGBA(0,0,0,0)\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/Slider-PCI-Beratung_BG.jpg\" background_size=\"contain\" custom_padding=\"60px||60px||true|false\" hover_enabled=\"0\" global_colors_info=\"{}\" theme_builder_area=\"post_content\" custom_margin=\"||5%||false|false\" sticky_enabled=\"0\"][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" header_level=\"h2\" body_text_align=\"left\" background_color=\"RGBA(0,0,0,0)\" background_enable_color=\"on\" text_orientation=\"left\" custom_padding=\"10%|||0px|false|false\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"color: white;font-size: 145%;font-weight: 300;line-height: 140%;text-align: left\">You benefit from the expertise, experience, <\/br>and objectivity of our qualified audit experts.<\/h3>\n<p>[\/et_pb_slide][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" header_level=\"h2\" body_text_align=\"left\" background_color=\"RGBA(0,0,0,0)\" background_enable_color=\"on\" text_orientation=\"left\" custom_padding=\"10%|||0px|false|false\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"color: white;font-size: 145%;font-weight: 300;line-height: 140%;text-align: left\">You gain transparency into security and <\/br>compliance requirements, even across<\/br>complex supplier environments.<\/h3>\n<p>[\/et_pb_slide][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" header_level=\"h2\" body_text_align=\"left\" background_color=\"RGBA(0,0,0,0)\" background_enable_color=\"on\" text_orientation=\"left\" custom_padding=\"10%|||0px|false|false\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"color: white;font-size: 145%;font-weight: 300;line-height: 140%;text-align: left\">You focus your resources where they matter <\/br>most through risk-based monitoring measures.<\/h3>\n<p>[\/et_pb_slide][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" header_level=\"h2\" body_text_align=\"left\" background_color=\"RGBA(0,0,0,0)\" background_enable_color=\"on\" text_orientation=\"left\" custom_padding=\"10%|||0px|false|false\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"color: white;font-size: 145%;font-weight: 300;line-height: 140%;text-align: left\">You can provide customers, auditors,<\/br> and regulators with clear, traceable evidence<\/br> that security and compliance requirements <\/br>are being met.<\/h3>\n<p>[\/et_pb_slide][\/et_pb_slider][\/et_pb_column][\/et_pb_row][et_pb_row disabled_on=\"off|off|on\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_slider _builder_version=\"4.27.9\" _module_preset=\"default\" background_color=\"RGBA(255,255,255,0)\" custom_padding=\"82px||82px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]You benefit from the expertise, experience, and objectivity of our qualified audit experts.[\/et_pb_slide][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]You gain transparency into security and compliance requirements, even across complex supplier environments.[\/et_pb_slide][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]You focus your resources where they matter most through risk-based monitoring measures.[\/et_pb_slide][et_pb_slide _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" sticky_transition=\"on\" theme_builder_area=\"post_content\"]You can provide customers, auditors, and regulators with clear, traceable evidence that security and compliance requirements are being met.[\/et_pb_slide][\/et_pb_slider][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.6\" _module_preset=\"default\" custom_margin=\"||0px||false|false\" custom_padding=\"0px||1%||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"0px||||false|false\" custom_padding=\"0px||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h2>What Can You Expect from Supplier Monitoring by usd AG?<\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.24.1\" _module_preset=\"default\" custom_padding=\"0px||0px|||\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.24.1\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_padding=\"||19px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]Together with you, we determine which suppliers to include in the monitoring program and which areas to focus on. Depending on your risk exposure and objectives, we apply different measures. Where risks are higher or additional information is needed, additional supplier audits may be appropriate. This gives you reliable results as a basis for informed decisions and traceable assessments of your suppliers.[\/et_pb_text][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<strong>Our Approach to Supplier Monitoring:<\/strong><\/br><br \/>\nThe scope and depth of supplier monitoring depend on criticality, risk exposure, and regulatory requirements. The key is to determine which evidence is sufficient and when additional audit procedures are necessary. Not every supplier requires the same level of monitoring. What matters are the risks associated with the service and the supplier\u2019s importance to your business processes, systems, or information.<\/br><br \/>\nTypical Measures for Supplier Monitoring:<\/br>&nbsp;<\/p>\n<ul>\n<li>Reviewing self-assessments and questionnaires<\/li>\n<li>Evaluating third-party certificates and attestations, such as ISO 27001 certificates, <\/br>or ISAE 3402 reports, and BSI C5 attestations<\/li>\n<li>Analyzing the records and documentation provided<\/li>\n<li>Conducting supplier audits in cases of elevated risk.<\/li>\n<\/ul>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<strong>Supplier Audits as an In-Depth Measure<\/strong><br \/>\n<\/br>A more in-depth review may be required for selected suppliers. The scope, audit focus, and approach depend on the service provided, the associated risks, and the audit objectives. In practice, a structured process consisting of preparation, audit execution, and follow-up has proven effective:[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.6\" _module_preset=\"default\" custom_margin=\"0px||||false|false\" custom_padding=\"2%||2%||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.17.4\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_accordion open_toggle_background_color=\"#FFFFFF\" closed_toggle_background_color=\"#FFFFFF\" toggle_icon=\"&#x43;||divi||400\" icon_color=\"#F07F1D\" use_icon_font_size=\"on\" icon_font_size=\"23px\" _builder_version=\"4.27.9\" _module_preset=\"default\" body_font=\"|300|||||||\" body_font_size=\"16px\" custom_margin=\"4px|0px|-1px|0px|false|true\" border_radii=\"on|5px|5px|5px|5px\" border_color_all=\"#F6F6F6\" box_shadow_style=\"preset1\" box_shadow_spread=\"-11px\" box_shadow_color=\"rgba(0,0,0,0.22)\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_accordion_item title=\"Ihr Titel\" open=\"on\" _builder_version=\"4.27.9\" _module_preset=\"default\" custom_css_main_element=\"display: none;\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]Your content goes here. Edit or remove this text inline or in the module Content settings. You can also style every aspect of this content in the module Design settings and even apply custom CSS to this text in the module Advanced settings.[\/et_pb_accordion_item][et_pb_accordion_item title=\"Preparation\" closed_toggle_text_color=\"#3C3C3C\" icon_color=\"#F07F1D\" toggle_icon=\"&#x33;||divi||400\" _builder_version=\"4.27.9\" _module_preset=\"default\" border_radii=\"on|5px|5px|5px|5px\" global_colors_info=\"{}\" toggle_level=\"h4\" toggle_font=\"|300|||||||\" closed_toggle_font=\"|300|||||||\" closed_toggle_font_size=\"18px\" toggle_text_color__hover_enabled=\"on|hover\" toggle_text_color__hover=\"#F07F1D\" open_toggle_text_color__hover_enabled=\"on|hover\" open_toggle_text_color__hover=\"#F07F1D\" theme_builder_area=\"post_content\" open=\"off\"]<\/p>\n<ul>\n<li>Aligning on scope and approach<\/li>\n<li>Selecting the topics and evidence to be reviewed<\/li>\n<li>Announcing the audit and coordinating with internal stakeholders and, subsequently, the supplier<\/li>\n<\/ul>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\"Audit Execution\" closed_toggle_text_color=\"#3C3C3C\" icon_color=\"#F07F1D\" toggle_icon=\"&#x33;||divi||400\" _builder_version=\"4.27.9\" _module_preset=\"default\" border_radii=\"on|5px|5px|5px|5px\" global_colors_info=\"{}\" toggle_level=\"h4\" toggle_font=\"|300|||||||\" closed_toggle_font=\"|300|||||||\" closed_toggle_font_size=\"18px\" toggle_text_color__hover_enabled=\"on|hover\" toggle_text_color__hover=\"#F07F1D\" open_toggle_text_color__hover_enabled=\"on|hover\" open_toggle_text_color__hover=\"#F07F1D\" theme_builder_area=\"post_content\" open=\"off\"]<\/p>\n<ul>\n<li><span>Reviewing documentation and evidence<\/span><\/li>\n<li>Interviewing relevant contacts<\/li>\n<li>Conducting an on-site or remote audit<\/li>\n<li>Assessing security requirements and controls<\/li>\n<\/ul>\n<p>[\/et_pb_accordion_item][et_pb_accordion_item title=\"Follow-Up\" closed_toggle_text_color=\"#3C3C3C\" icon_color=\"#F07F1D\" toggle_icon=\"&#x33;||divi||400\" _builder_version=\"4.27.9\" _module_preset=\"default\" border_radii=\"on|5px|5px|5px|5px\" global_colors_info=\"{}\" toggle_level=\"h4\" toggle_font=\"|300|||||||\" closed_toggle_font=\"|300|||||||\" closed_toggle_font_size=\"18px\" toggle_text_color__hover_enabled=\"on|hover\" toggle_text_color__hover=\"#F07F1D\" open_toggle_text_color__hover_enabled=\"on|hover\" open_toggle_text_color__hover=\"#F07F1D\" theme_builder_area=\"post_content\" open=\"off\"]<\/p>\n<ul>\n<li>Evaluating the results<\/li>\n<li>Documenting findings<\/li>\n<li>Presenting the results<\/li>\n<li>Identifying and tracking measures<\/li>\n<\/ul>\n<p>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"3%||3%||true|false\" custom_padding=\"||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<p>To prevent risks from going undetected, supplier monitoring should be reviewed regularly and adapted to changing circumstances. The appropriate measures and review frequency depend in particular on the supplier\u2019s criticality, the outsourced service, and the current risk exposure.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"1_4,3_4\" custom_padding_last_edited=\"on|desktop\" _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"||5%||false|false\" custom_padding=\"||||true|false\" custom_padding_tablet=\"4%||24px||false|false\" custom_padding_phone=\"4%||24px||false|false\" border_width_all=\"2px\" border_color_all=\"#00a2b6\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"1_4\" _builder_version=\"4.27.2\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/www.usd.de\/wp-content\/uploads\/security-analysis-pentest-grafik-tipp.svg\" title_text=\"security-analysis-pentest-grafik-tipp\" align=\"center\" align_tablet=\"center\" align_phone=\"center\" align_last_edited=\"on|phone\" _builder_version=\"4.27.9\" _module_preset=\"default\" width=\"75%\" width_tablet=\"35%\" width_phone=\"40%\" width_last_edited=\"on|phone\" module_alignment=\"center\" custom_margin=\"0px|||20%|false|false\" custom_margin_tablet=\"0px|||0px|false|false\" custom_margin_phone=\"4%|||30%|false|false\" custom_margin_last_edited=\"on|phone\" custom_padding=\"||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][\/et_pb_column][et_pb_column type=\"3_4\" _builder_version=\"4.27.2\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"|3%|3%||false|false\" custom_margin_tablet=\"|3%|3%||false|false\" custom_margin_phone=\"|3%|3%|1%|false|false\" custom_margin_last_edited=\"on|phone\" custom_padding=\"|3%|||false|false\" custom_padding_tablet=\"|3%|||false|false\" custom_padding_phone=\"|8%||8%|false|false\" custom_padding_last_edited=\"on|phone\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h3>Conducting Pooled Audits, for Example Under DORA<\/h3>\n<p>As part of our supplier audit offering, we also conduct pooled audits. In a pooled audit, a supplier is audited in the interest of several organizations. This can offer an efficient, resource-conscious alternative to separate audits. Regulatory requirements such as DORA also provide for pooled audits as a possible form of audit in certain contexts.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.6\" _module_preset=\"default\" custom_margin=\"||||false|false\" custom_padding=\"||0px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.6\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_divider color=\"#d8d8d8\" _builder_version=\"4.27.6\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_divider][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\"4.27.6\" _module_preset=\"default\" custom_padding=\"||0px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.27.6\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"||||false|false\" custom_padding=\"||||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h2>Learn More About Third-Party Risk Management (TPRM)<\/h2>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"1_2,1_2\" _builder_version=\"4.27.9\" _module_preset=\"default\" custom_padding=\"||5.1%||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"1_2\" _builder_version=\"4.27.9\" _module_preset=\"default\" background_color=\"#3C3C3C\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-ag-third-party-risk-management.jpg\" background_blend=\"multiply\" link_option_url=\"https:\/\/www.usd.de\/en\/third-party-risk-management-basics\/\" global_colors_info=\"{}\" background__hover_enabled=\"off|hover\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"28px||0px||false|false\" custom_padding=\"30px||30px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"text-align: center\"><span style=\"color: #ffffff\">Third-Party Risk Management: <\/br>Basics<\/span><\/h3>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\"1_2\" _builder_version=\"4.27.9\" _module_preset=\"default\" background_color=\"#3C3C3C\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-ag-third-party-risk-management.jpg\" background_blend=\"multiply\" link_option_url=\"https:\/\/www.usd.de\/en\/third-party-risk-management-set-up-tprm-program\/\" global_colors_info=\"{}\" background__hover_enabled=\"off|hover\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"28px||0px||false|false\" custom_padding=\"30px||30px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"text-align: center\"><span style=\"color: #ffffff\">Third-Party Risk Management: How to Set Up a TPRM Program<\/span><\/h3>\n<p>&nbsp;<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\"1_2,1_2\" _builder_version=\"4.27.9\" _module_preset=\"default\" custom_padding=\"12px||10%||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"1_2\" _builder_version=\"4.27.9\" _module_preset=\"default\" background_color=\"#3C3C3C\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-ag-third-party-risk-management.jpg\" background_blend=\"multiply\" link_option_url=\"https:\/\/www.usd.de\/en\/third-party-risk-management-monitoring-tprm-program\/\" global_colors_info=\"{}\" background__hover_enabled=\"off|hover\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"28px||0px||false|false\" custom_padding=\"30px||30px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"text-align: center\"><span style=\"color: #ffffff\">Information Security in <\/br>Third-Party Risk Management:<\/br>How to Monitor Your <\/br>TPRM Program<\/span><\/h3>\n<p>&nbsp;[\/et_pb_text][\/et_pb_column][et_pb_column type=\"1_2\" _builder_version=\"4.27.9\" _module_preset=\"default\" background_color=\"#3C3C3C\" background_image=\"https:\/\/www.usd.de\/wp-content\/uploads\/usd-ag-eba-guidelines-tprm.jpg\" background_blend=\"multiply\" link_option_url=\"https:\/\/www.usd.de\/en\/tprm-eba-publishes-guidelines-non-ict-services\/\" global_colors_info=\"{}\" background__hover_enabled=\"off|hover\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.27.9\" _module_preset=\"default\" custom_margin=\"28px||0px||false|false\" custom_padding=\"30px||30px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"]<\/p>\n<h3 style=\"text-align: center\"><span style=\"color: #ffffff\">TPRM: EBA Publishes <\/br>Guidelines on Third-Party Risk Management<\/br>for Non-ICT Services<\/span><\/h3>\n<p>&nbsp;[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Supplier Monitoring Gain Visibility Into Critical Suppliers to Assess Risk with ConfidenceSupplier relationships evolve over time. New risks emerge, evidence becomes outdated, and regulatory requirements continue to change. This makes it all the more important to assess critical suppliers regularly and provide internal and external evidence that agreed security and compliance requirements continue to be [&hellip;]<\/p>\n","protected":false},"author":112,"featured_media":0,"parent":11896,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"class_list":["post-71234","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/pages\/71234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/users\/112"}],"replies":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/comments?post=71234"}],"version-history":[{"count":4,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/pages\/71234\/revisions"}],"predecessor-version":[{"id":71552,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/pages\/71234\/revisions\/71552"}],"up":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/pages\/11896"}],"wp:attachment":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/media?parent=71234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}