How ITV Efficiently Manages Supplier Risk Across Its Enterprise

Launched in 1955, ITV is a free-to-air television network in the United Kingdom. ITV is supported by its supply chain to secure content pre-distribution and to secure its broadcast chain. Therefore, it is essential that any entity interacting with the network have the proper security controls in place. However, the process for the ITV cyber security team to assess entities against requirements was manual and time-consuming, leaving potentially risky gaps.

The Challenge: Complex and Time-Consuming Supplier Risk Assessments

With more than 400 entities to assess – from large global organizations to small post-production shops – ITV’s manual, spreadsheet-based risk assessment process could no longer keep up, taking weeks of effort per entity to determine their risk visibility.

Other departments within ITV also struggled with using clunky spreadsheets to manage suppliers and risk which led to inconsistencies, inefficiencies and no single view on supplier risk. Finally, third parties and business unit owners alike wanted a simpler data driven way to engage in conversations around risk.

ITV searched the market and found that potential solutions typically fell into one of two categories: tools to simply automate questionnaires, and overly complex GRC tools. The problem with questionnaire automation tools was that they couldn’t provide useful insights. On the other hand, GRC tools typically require significant effort (and therefore cost) to address unique company needs.

It was clear that ITV had to provide their entities and internal departments with a simple, meaningful single view of risks, so stakeholders felt there was value in the process rather than just seeing it as a compliance exercise.

The Solution: The Prevalent Third-Party Risk Management Platform

ITV needed a solution that not only automated the process of sending out and analyzing questionnaire responses, but also offered workflow and risk management capabilities that simplified third-party risk management for everyone involved – inside and outside the enterprise. To achieve this, ITV turned to Prevalent.

Prevalent takes the pain out of third-party risk management (TPRM). Companies use Prevalent software and services to eliminate the cyber risk and compliance exposures that come from working with third party suppliers. Prevalent’s customers benefit from a flexible, hybrid approach to TPRM, where they not only gain solutions tailored to their needs, but also realize a rapid return on investment.