Our new online tool helps manage vendor risks

April 29, 2024

Information Security GRC is excited to launch a new, digital Third-Party Risk Management (TPRM) module in ServiceNow. Beginning May 1, the TPRM module will improve risk assessment processes at Texas Children’s and make it easier for users to:

  • initiate Information Security Risk Assessments and
  • submit Information Security Policy Exceptions.

To engage this comprehensive online solution for identifying, evaluating and mitigating risks associated with vendor relationships, access the IS Service Portal and complete the required forms.

Click here to view a step-by-step video explaining how to submit exceptions and assessments in the new format.

Key features include:

  • Security Risk Assessments: The module automates and standardizes the assessment process, making it easier for business owners and vendors to connect through a user-friendly portal.
  • Reassessments: Continuous monitoring capabilities ensure risk insights are up-to-date and allow for prompt emerging risk identification.
  • Policy Exceptions: The module facilitates the management of policy exceptions and ensures deviations from established guidelines are properly addressed.
  • Reporting and Analytics: Advanced reporting views and analytics capabilities provide clear visibility into vendor risks and performance metrics.
  • Regulatory Compliance: The module helps ensure compliance with industry regulations and standards – and reduces the risk of penalties for non-compliance.

For more in-depth training materials, including additional videos and guides, visit the Information Security GRC SharePoint site for all you need to utilize the new tool.

Your feedback and engagement throughout this process is valuable. Email questions or concerns to CyberRiskMgmt@texaschildrens.org.