Abstract: Assessing risks arising from relationships with third-parties that support the operations or strategic goals of an organization, such as a bank, are provided. A risk assessment system receives risk assessment values respectively corresponding to the likelihood, severity, and control for a risk item associated with a third-party relationship. The risk assessment system then determines a risk priority value for the risk item based on the risk assessment values. The risk assessment system may prioritize multiple risk items according to their respective risk priority values, risk categories, or both. In some arrangements, the risk assessment system may identify a risk item for additional risk mitigation and determine a risk mitigation action plan for the identified risk item.

Abstract: Provided is a method and system of assigning a level of risk presented to an enterprise by a supplier of goods or services. In at least some embodiments, a tier level and/or a composite supplier risk index (CSRI) is calculated for the supplier based on answers provided to a series of multiple choice questions, wherein the questions are used to provide a measure of the risk elements presented by a supplier. In some embodiments, the risk elements comprise business continuity risk, information security risk, finance risk, operational risk, and supply chain risk. An embodiment can be implemented via a stand-alone computing system or such a system interconnected with other platforms or data stores by a network, such as a corporate intranet, a local area network, or the Internet.

Abstract: Provided is a method and system of assigning a level of risk presented to an enterprise by a supplier of goods or services. In at least some embodiments, a tier level and/or a composite supplier risk index (CSRI) is calculated for the supplier based on answers provided to a series of multiple choice questions, wherein the questions are used to provide a measure of the risk elements presented by a supplier. In some embodiments, the risk elements comprise business continuity risk, information security risk, finance risk, operational risk, and supply chain risk. An embodiment can be implemented via a stand-alone computing system or such a system interconnected with other platforms or data stores by a network, such as a corporate intranet, a local area network, or the Internet.

Abstract: Evaluating the risks posed by a supplier of goods and services, wherein the supplier subcontracts the production of the goods or services to a third entity, offshores the production of the goods or services, or uses an offshore subcontractor to provide the goods or services. In at least some embodiments, the invention comprises gathering answers to a series of multiple choice questions regarding characteristics of the goods or services provided by the supplier and calculating a risk score therefrom. An embodiment can be implemented via a stand-alone computing system or such a system interconnected with other platforms or data stores by a network, such as a corporate intranet, a local area network, or the Internet.

Abstract: Supply chain management using a supplier portfolio index (SPI) is disclosed. A single risk and performance metric for a supplier can be used across portfolios at both the business unit and enterprise level. The SPI can be produced by stratifying suppliers to obtain a plurality of risk element scores, which in turn are used to obtain a composite supplier risk index. A supplier performance scorecard metric can also be determined by combining a plurality of individual performance metrics. The composite supplier risk index, the supplier performance scorecard metric, and an indication of supplier manager certification can be aggregated to produce SPI. Percentage weights can be applied to the composite supplier risk index, the supplier performance scorecard metric, and the indication of supplier manager certification status so that the SPI is indicated on a 100-point scale.