Resources
Practical guides for
third-party risk teams
Templates, checklists and guides that help you build a defensible third-party risk programme, from policy and due diligence through to fourth-party concentration risk.
Third-Party Risk Management in South Africa
POPIA, the Joint Standards and Conduct Standard 2 of 2025, turned into an eight-step programme.
Read the guideVendor Risk Management Policy Template
A ready-to-adapt policy structure covering scope, roles, tiering, due diligence and ongoing monitoring.
Read the guideThird Party Risk Management Policy Guide
The eight components a defensible third-party risk policy needs, and how to evidence each one.
Read the guideVendor Due Diligence Checklist
Stage-by-stage evidence to collect before onboarding a vendor, including dependencies and fourth parties.
Read the guideFourth Party Risk Management Guide
How to surface shared infrastructure, concentration risk and the suppliers behind your suppliers.
Read the guideVendor Dependency Mapping Guide
Step-by-step: map critical business services to the vendors and fourth parties behind them.
Read the guidePut this guidance to work
We run third-party risk for you, so your policy, due diligence and monitoring hold up when it matters.