TPRM (Third-Party Risk Management)
The discipline of evaluating and continuously monitoring vendors that touch your data or systems. A TPRM Platform automates questionnaires, evidence collection, and continuous control monitoring across your vendor inventory.
Where this term fits in a CISO program
TPRM (Third-Party Risk Management) is one of 35 cybersecurity strategy concepts CISO Game models live. TPRM (Third-Party Risk Management) appears throughout the simulation — in the risk register, the investment catalog, and the mechanics reference — so a player encounters the concept in context rather than as an isolated definition.
See it in play
The fastest way to internalize TPRM (Third-Party Risk Management) is to watch it move during a 5-year program. Start a free CISO Game run to see how this concept interacts with budget, hiring, and incident response across 20 quarters of strategic play.
Related glossary terms
- Team MoraleA 0–100 metric tracking team well-being. Drops from understaffed tools (each mis…
- Tool Without Team EffectivenessThe 30% effectiveness multiplier applied when you own a security tool but lack t…
- Vendor Lock-inVendor lock-in is the operational and financial cost of replacing a deeply-integ…
← Tool Without Team Effectiveness · All terms · Vendor Lock-in →