Professional Services

Prevalent Program Design Services define and document your third-party risk management program. You’ll walk away with a clear plan that accounts for your specific needs while incorporating best practices for end-to-end TPRM.

• Manage Steering & Working Groups: Identify participants and define agendas/structure, presentation formats, and notable metrics; manage minutes.
• Scope Program & Business Requirements: Identify key vested parties and document their requirements, objectives, and expectations.
• Define KRIs & KPIs: Work with stakeholders to define metrics for reporting on program KRIs/KPIs. Conduct reviews to interpret metrics and determine progress.
• Review & Scope TPRM Policy: Analyze and review existing third-party management policy.
• Review or Define the Process: Review or define end-to-end processes to migrate third parties into a single cohesive workflow.
• Review Team Structure & Capacity: Assess internal capabilities, team skill sets, and workload levels to determine optimal resource allocation.
• Educate the Business: Identify training and communication needs for sharing progress and metrics with executive leadership, board members, and other business stakeholders.
• Implement a Program Improvement Plan: Document a project plan for communicating program improvements. Review, track, and resolve issues over the course of the program.

> Learn more: TPRM Program Design Services Data Sheet

Prevalent Implementation Services ensure that the Prevalent TPRM Platform is tuned according to your organization’s unique requirements, that your processes and resources are aligned for success, and that your team is fully trained.

• Define Success Criteria & Manage the Implementation: Coordinate with internal teams to define project success criteria and manage the implementation to a successful conclusion.
• Identify Content: Determine third-party contacts, attributes, and relationships. Select a survey template from the Prevalent library based on assessment goals.
• Prepare the Platform: Build vendor email communications and leverage built-in ActiveRules, workflows, and automated risk recommendations to expedite risk mitigation.
• Configure the System: Establish authentication rules; handle integration with the email system and website; and define system users and roles.
• Prioritize & Tier Vendors: Identify and prioritize vendors for onboarding based on their service to your organization. Utilize key profile attributes and inherent risk scoring to logically tier vendors.
• Create Operations Manual: Support Platform management with a manual customized for internal roles, resources, responsibilities, and processes.
• Assisted Launch & Knowledge Transfer: Support the deployment for the first month, including onboarding users, performing a walkthrough of all features and capabilities, and launching the first assessments.
• Customize: Create customized intake forms, surveys, risks, automations, workflows, and reporting. Onboard agreements and contracts, and define SLAs and performance metrics.