article thumbnail

Important KPIs for Successful Vendor Management

Reciprocity

The six risks listed below are a good place to start. Begin by determining your organization’s tolerance for cybersecurity risk. If your vendor needs to meet a compliance standard or regulation, check recent security audits to review how well it manages compliance with that standard. Cybersecurity. Staff training.

article thumbnail

The Difference Between Strategic and Operational Risk

Reciprocity

Since operational risks are constant, varied, and increasingly complex, ORM is an ongoing activity. It is guided by four fundamental principles: Accept no unnecessary risk. Accept risk when benefits outweigh costs. Make risk decisions at the appropriate level. Anticipate and manage risk with planning.