2021-08-05-德勤-取得进展_第三方监督的数字化路径_44页_5mb

报告摘要

Deloitte 2021 Third-Party Risk Management (TPRM) Global Survey Summary

Core Content

The Deloitte 2021 Third-Party Risk Management (TPRM) Global Survey highlights the ongoing challenges and evolving priorities in managing third-party risks in the post-pandemic landscape. The survey explores how organizations are adapting to the extended enterprise, the impact of the pandemic, and the role of digital transformation and cost pressures in shaping TPRM strategies.

Main Findings

1. Many Organizations Are Still Responding to the Pandemic

Despite expectations that most organizations would have moved beyond the initial response phase, 45% are still in the respond phase, reacting to the need for business continuity and resilience.
29% are in the recovery phase, focusing on rebuilding TPRM on stronger foundations.
26% have reached the thrive phase, where they have fully recovered and are prepared for future disruptions.
The pandemic has delayed the ability of many organizations to recover and thrive, with some still assessing vulnerabilities related to third parties.

2. Risk Intelligence Is a Key Funding Priority

Organizations are prioritizing investments in risk intelligence to enhance third-party management and monitoring.
Smaller and more agile organizations are using this as an opportunity to accelerate toward real-time, tech-enabled TPRM.
Larger and more complex organizations, or those with existing TPRM investments, are adopting a more measured approach but still seeking improvements in business processes and management information.
The focus on risk intelligence is expected to lead to more integrated and effective TPRM systems.

3. Digital Risks Are a Top Concern

Digital risk has emerged as the most urgent priority for future TPRM efforts.
As organizations and their third parties adopt more digital processes, they are increasingly aware of the potential for undesirable consequences.
This shift has prompted a re-evaluation of how risks are managed and monitored in the digital era.

4. Cost Pressures Are Preventing Insourcing

Organizations are hesitant to bring back outsourced activities due to cost pressures, even when they face risks or loss of control.
Some outsource not only for cost savings but also to access specialized skills and better quality.
This trend is expected to continue as digital transformation increases the complexity of third-party relationships.

Key Insights

TPRM maturity has improved post-pandemic, with 31% of organizations now aiming for integrated or optimized frameworks.
The pandemic has acted as a wake-up call, prompting a re-evaluation of TPRM practices.
Real-time information, risk metrics, and reporting are seen as critical for advancing TPRM maturity.
Business process rethinking is equally important to support the adoption of new technologies.
Tools and technology are also a key focus area for improving TPRM maturity.

Industry Summary

GPS and LSHC industries show the highest interest in improving TPRM business processes, policies and standards, and people and organizational issues.
FS organizations are more likely to invest in tools and technology.
TMT is less likely to prioritize tone at the top and risk culture.
The consumer and LSHC industries experienced a higher proportion of high-impact third-party incidents.
ER&I had the highest number of incidents, but only 8% were high-impact.

Risk Domains Most Impacted

The following risk domains were most frequently affected by third-party incidents during the pandemic:

Risk Domain	Overall	Consumer	ER&I	FS	GPS	LSHC	TMT
Health & safety risk	56%	59%	58%	50%	64%	48%	60%
Cyber risk	53%	45%	58%	54%	45%	68%	50%
Resiliency / business continuity risk	50%	52%	48%	51%	62%	50%	41%
Strategic risk	45%	50%	53%	38%	62%	26%	46%
Contract risk	40%	49%	46%	27%	30%	43%	39%
Geopolitical risk	39%	46%	53%	24%	40%	35%	38%
Information security	38%	28%	46%	36%	30%	35%	39%

Health and safety risk, cyber risk, and resiliency/business continuity risk were the most significant concerns.
Organizations that had underinvested in TPRM were more likely to face high-impact incidents.

Future Predictions

The need for real-time information and continuous monitoring is expected to drive further improvements in TPRM maturity.
As technology solutions become more accessible, the benchmark for excellent TPRM is likely to rise.
Organizations will continue to play catch-up as new practices and expectations emerge.
The digital transformation is reshaping the landscape of third-party risk, with a greater focus on resilience and flexibility.

Respondents Profile

The survey includes a broad range of industries, with a particular emphasis on extended enterprise relationships.
A significant portion of respondents (over 50%) reported experiencing one or more third-party risk incidents since the start of the pandemic.
The impact of these incidents varied, with 13% being high-impact, 31% moderate, and 46% low.

Authors and Contacts

The survey was conducted by Deloitte and led by Kristian Park, a Partner and Global Leader in the Extended Enterprise division.
For more insights, organizations are encouraged to contact their local Deloitte experts.

Conclusion

The 2021 TPRM survey underscores the ongoing challenges of managing third-party risks in a post-pandemic world, emphasizing the need for digital transformation, real-time monitoring, and improved risk intelligence. While cost pressures continue to influence outsourcing decisions, the increased awareness of third-party risks has led to a greater focus on maturity and resilience.

展开完整摘要