{
  "docId": "019dd923-5de0-76bd-a16a-e4d393602b7b",
  "docSlug": "52c2577c209255d7",
  "documentTitle": "Global third-party risk management survey 2022",
  "authorId": "Deloitte",
  "authorName": "Deloitte",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 12,
  "pageCount": 46,
  "prevPage": 11,
  "nextPage": 13,
  "slideType": "transition",
  "function": "transition",
  "density": "dense",
  "nDataPoints": 0,
  "notes": "The slide includes a navigation menu on the right indicating the current section is '2. Managing third-party resilience'.",
  "elementsJson": [
    "headline_text",
    "paragraph",
    "callout_box",
    "photo"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5de0-76bd-a16a-e4d393602b7b/12",
  "deckHref": "/decks/019dd923-5de0-76bd-a16a-e4d393602b7b",
  "deckJsonHref": "/decks/019dd923-5de0-76bd-a16a-e4d393602b7b.json",
  "deckAnchorHref": "/decks/019dd923-5de0-76bd-a16a-e4d393602b7b#slide-12",
  "components": [
    {
      "bbox": {
        "h": 0.55,
        "w": 0.45,
        "x": 0.03,
        "y": 0.26
      },
      "kind": "callout",
      "text": "The story so far... Earlier TPRM surveys (2016-2019) showed how many organizations had started to develop business continuity and disaster recovery plans for their third-party networks. We believe this was a necessary initial response at that time. However, as organizations increasingly started using third parties to meet strategic objectives rather than just achieve a tactical cost-reduction or other short-term objective, these initial efforts failed to keep pace with the growing levels of critical dependence. That, in turn, progressively led organizations to face a newer spectrum of risks across a growing number of risk domains (e.g., geopolitical, geographic or supplier concentration, export controls and sanctions) with aggravated consequences of failure. Some of these risks were consciously embraced with adequate risk-management processes and technology, but many were deprioritized until COVID-19 highlighted the huge strategic impact of such third-party failures and how quickly risks can be realized. Particularly those accelerated by real-time technologies in a connected world enabled by the rise of cloud service providers (CSPs).",
      "attrs": null,
      "subkind": "primary",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "36246af7-4362-4fc1-9039-502a4bff9fdd",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "callout",
      "text": "That, in turn, progressively led organizations to face a newer spectrum of risks across a growing number of risk domains (e.g., geopolitical, geographic or supplier concentration, export controls and sanctions) with aggravated consequences of failure.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-1044-75f9-bcf8-2ee3c29667c9",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.75,
        "w": 0.18,
        "x": 0.81,
        "y": 0.15
      },
      "kind": "list",
      "text": "Foreword\nKey findings\n1. Addressing ESG risks\n2. Managing third-party resilience\n3. Integrated/holistic third-party management\n4. External assistance & managed service solutions\n5. Key post-pandemic TPRM trends\nRespondent profile\nAbout the authors\nTPRM contacts\nGlossary\nAppendix",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9dc062b1-78a4-4ce7-b79e-dd1fa5aca3bb",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.45,
        "x": 0.03,
        "y": 0.15
      },
      "kind": "paragraph",
      "text": "The need to improve resilience has increased the focus on relationships with critical cloud service providers (CSPs). It has also underlined the importance of developing capabilities to manage evolving challenges, such as sanctions, export controls and geographic concentration.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "65c5fdd8-53ac-4064-8a50-270199ad8e62",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.35,
        "x": 0.03,
        "y": 0.05
      },
      "kind": "title",
      "text": "Managing third-party resilience",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "2f751f06-939d-4736-92ab-68fca1b8efe3",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "Story Moments",
      "slug": "story-moments",
      "agent": "Storyteller",
      "layer": "slide",
      "matchId": "c9778f66-67d1-4f6a-8c8a-015f143b79ae",
      "evidence": "callout/primary: The story so far... Earlier TPRM surveys (2016-2019) showed how many organizations had started to develop business continuity and disaster recovery plans for their third-party networks.",
      "confidence": 0.6
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 24,
      "from": 10,
      "beatId": "1138e7a3-7f10-48a3-915d-2c869c7ae516",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Solution & Approach",
      "beatSlug": "consultants-gambit-solution-approach",
      "evidence": "The sections on managing third-party resilience, integrated & holistic third-party management, and external assistance & managed service solutions provide solutions and approaches",
      "position": 2,
      "confidence": 0.8,
      "parentBeatName": "Turn",
      "parentBeatSlug": "turn"
    }
  ],
  "loops": [
    {
      "to": 24,
      "from": 10,
      "name": "Golden Circle",
      "slug": "11-golden-circle",
      "bestFor": "Visionary leadership, brand positioning, mission statements",
      "matchId": "61725a62-eeef-4ab7-84ba-c3c108f4498c",
      "evidence": "The sections on integrated management approaches and external assistance solutions provide a golden circle narrative",
      "position": 1,
      "objective": "Explaining the benefits of integrated & holistic third-party management",
      "structure": "The Why (Belief) -> The How (Process) -> The What (Result)",
      "confidence": 0.6,
      "description": "Invert the typical pitch by starting with why you exist, rather than what you do"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}