Infocredit Group
Playbook · RISQO

Third-Party Risk Assessment Playbook

Third-party risk assessment is now one of the largest sources of operational, financial and reputational exposure for banks, insurers, payment firms and corporates. This playbook sets out a repeatable vendor risk assessment framework across ten dimensions — financial health, credit exposure, cyber posture, ESG, sanctions, litigation, country risk, concentration, data protection and business continuity — and shows how to move from an annual questionnaire to continuous third-party monitoring. Use it with RISQO, our third-party risk assessment and credit intelligence platform, to score and re-score every supplier from one workspace.

All resources

What you will learn

  • How to build a 10-dimension third-party risk scorecard and weight it for your sector
  • When automated scoring is enough and when to commission an expert-led due diligence report
  • How to replace annual vendor reviews with continuous third-party monitoring and alerts
  • How to present supplier risk exposure to boards, auditors and regulators

Who this is for

Procurement and vendor management teams
Third-party risk and compliance officers
Credit and underwriting functions

Topics covered

Third-party risk assessmentSupplier due diligenceVendor scoringESG riskCountry risk

Frequently asked questions

What is a third-party risk assessment?
A third-party risk assessment is a structured review of the financial, operational, cyber, compliance and country risk a supplier, vendor or counterparty introduces to your organisation. This playbook scores each of those areas and converts them into a single risk band.
How often should suppliers be re-assessed?
Critical and high-risk suppliers should be monitored continuously with event-driven alerts, while medium and low-risk suppliers are typically re-scored every 6 to 12 months. The playbook includes a review calendar by risk band.
Is the third-party risk playbook free?
Yes. Enter your work email and the playbook is sent to you immediately, along with an optional introduction to RISQO if you want the same scoring automated.

More resources

Keep exploring

Each resource is designed to help you make a specific risk or compliance decision faster.