Strategic Focus: Innovations In Third-Party Risk Management

21 Jan, 2026

Access this research

Access all Third-Party Risk Management content with a strategic subscription or buy this single report

Need help or have a question about this report? Contact us for assistance

Executive Summary

In recent years, third-party risk management (TPRM) vendors have continued to expand their solutions to address cyber, ESG, financial, regulatory, geopolitical and reputational risks within single unified frameworks. From the Digital Operational Resilience Act (DORA) to the Cyber Resilience Act (CRA), the state and pace of regulatory change in Europe and beyond is pushing buyers towards deeper, multi-tier visibility and faster incident reporting platforms. With innovations across the TPRM toolkit reaching into new territories, this report examines the regulatory and market forces shaping these developments and the leading innovations emerging across the space.
Third-party risk management (TPRM) vendors are innovating across a variety of risk domains
New regulations are forcing the market to look deeper into the cyber risk surfaces of their third parties
Global volatility is prompting TPRM vendors to expand their analysis vertically and horizontally
Supply chain fragility is pushing business continuity plans to centre stage in TPRM
Figure 1. TPRM innovations are expanding mechanisms for analysis  

About the Authors

Tom Murphy

Tom Murphy

Industry Analyst

Tom is an Industry Analyst at Verdantix, specializing in third-party, GRC, reputational and geopolitical risk. His current research agenda focuses on how organizations can ins...

View Profile
Katelyn Johnson

Katelyn Johnson

Senior Manager

Katelyn is a Senior Manager at Verdantix, specializing in enterprise risk management and external risk and resilience. She helps executives navigate today’s evolving ris...

Other related content

Webinar
Third-Party Risk Management
Enterprise Risk & GRC
Corporate Risk Leaders
Predictions 2027: Risk Management

Upcoming / 25 January, 2027

Webinar
Third-Party Risk Management
Enterprise Risk & GRC
Corporate Risk Leaders
Selling Risk Intelligence Technology In...

Risk intelligence vendors have moved quickly to embed AI across their products, driven by buyer demand for faster, deeper insight into external threats. Regulation is catching up, ...

Upcoming / 09 December, 2026

Webinar
Third-Party Risk Management
Sustainable Supply Chains
Sustainability & Climate Risks
Digital Grid Technologies
Corporate Sustainability & Climate Change Services
Corporate Risk Leaders
Corporate Energy Transition Solutions
Corporate Energy Leaders
Built Environment Energy & Decarbonization
Energy Risk In 2027: How To Protect You...

A Super El Niño is under way, and its consequences for energy systems are already visible. Hydro generation capacity is declining as water reserves fall, grid stress is intensifyin...

Upcoming / 01 December, 2026

Webinar
Third-Party Risk Management
Enterprise Risk & GRC
Corporate Risk Leaders
Decoding Risk Intelligence: What The Fi...

Risk leaders are being asked to monitor a widening range of external threats, many of which overlap in ways that make them difficult to track in isolation. Cybersecurity remains fr...

Upcoming / 05 November, 2026

Blog
Corporate Risk Leaders
Third-Party Risk Management
Between A Rock And A Hard Place: Bab al...

For much of 2026, the closure of the Strait of Hormuz has dominated supply chain risk agendas. Since Iran restricted the Strait for most commercial shipping in late February, tra...

14 October, 2026

Blog
Corporate Risk Leaders
Third-Party Risk Management
Where Your Data Live Is Only Half The R...

Geopolitical risk is increasingly becoming a third-party risk, and data sovereignty is emerging as a critical blind spot. The 2026 Verdantix global corporate survey found that 75...

02 October, 2026