{
  "docId": "019dd923-5de0-76bd-a16a-e4d393602b7b",
  "docSlug": "52c2577c209255d7",
  "documentTitle": "Global third-party risk management survey 2022",
  "authorId": "Deloitte",
  "authorName": "Deloitte",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 37,
  "pageCount": 46,
  "prevPage": 36,
  "nextPage": 38,
  "slideType": "industry_trends",
  "function": "summarize",
  "density": "overcrowded",
  "nDataPoints": 35,
  "notes": "Includes a navigation sidebar typical of a digital report.",
  "elementsJson": [
    "headline_text",
    "paragraph",
    "bar_chart_stacked",
    "navigation_sidebar"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5de0-76bd-a16a-e4d393602b7b/37",
  "deckHref": "/decks/019dd923-5de0-76bd-a16a-e4d393602b7b",
  "deckJsonHref": "/decks/019dd923-5de0-76bd-a16a-e4d393602b7b.json",
  "deckAnchorHref": "/decks/019dd923-5de0-76bd-a16a-e4d393602b7b#slide-37",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "Risk domains such as cyber and data privacy that have typically been focused on in the past continue to need significant attention.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-0493-74cf-be8c-8baf58178e91",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.47,
        "x": 0.27,
        "y": 0.15
      },
      "kind": "chart",
      "text": "Figure 15. TPRM maturity trends since the start of our annual surveys",
      "attrs": null,
      "subkind": "bar-stacked-100pct",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "d2427220-fdfe-4837-a8a6-19c95818fb5e",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 1,
        "w": 0.19,
        "x": 0.81,
        "y": 0
      },
      "kind": "framework",
      "text": "Navigation sidebar",
      "attrs": null,
      "subkind": "instance",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "5d18a43a-8472-4d47-b9f0-285961e5b92a",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "TPRM maturity level: 61%",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd952-0493-74cf-be8c-8c343cc82113",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.25,
        "x": 0.03,
        "y": 0.52
      },
      "kind": "paragraph",
      "text": "The war in Ukraine has no doubt aggravated concerns related to managing geopolitical risk since the survey was conducted. Similarly, net-zero and other commitments made by organizations post COP26, have heightened the focus on climate change risk. Governmental and organizational targets cannot be met unless the impact of third-party ecosystems is considered, with scope 3 emissions being of particular relevance here. More generally, the lack of confidence in processes to identify, assess and manage subcontractor risk is of particular concern, as many of the other risk domains may also manifest themselves in lower tiers of the supply chain.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "56241e5b-8125-4c92-b8b9-428d43fc77dc",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.15,
        "w": 0.25,
        "x": 0.27,
        "y": 0.52
      },
      "kind": "paragraph",
      "text": "GPS represents the key outlier group from an industry perspective. Only 7% of the respondents from GPS currently consider/manage climate change risk as part of their TPRM frameworks. Similarly, only 8% of GPS respondents believe that managing third-party concentration risk is a strength in their organizations. This stands out as the lowest across all industry segments. Only 8% of GPS respondents believe that managing third-party concentration risk is a strength in their organizations.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "90d922ab-80c2-4208-9738-415ab46d6ffa",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.25,
        "x": 0.03,
        "y": 0.15
      },
      "kind": "paragraph",
      "text": "Specific risk domains requiring focus and attention. Risk domains such as cyber and data privacy that have typically been focused on in the past continue to need significant attention. However, the risk domains where organizations believe they are weakest include managing geopolitical risk (61%), climate change risk (58%), subcontractor risk (55%) and concentration risk (53%).",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "c6172af7-20d3-490b-a897-4f09128d9431",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.04,
        "w": 0.35,
        "x": 0.03,
        "y": 0.05
      },
      "kind": "title",
      "text": "Key post-pandemic TPRM trends",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "bab38653-9449-491b-a067-bf95807614ad",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "Chartjunk Elimination",
      "slug": "chartjunk-elimination",
      "agent": "Designer",
      "layer": "slide",
      "matchId": "96920b17-720c-4bc0-be8e-b4a94224d59f",
      "evidence": "Figure 15. TPRM maturity trends since the start of our annual surveys",
      "confidence": 0.6
    }
  ],
  "frameworks": [
    {
      "name": "maturity-model",
      "slug": null,
      "matchId": "3c7a5002-3e0c-44a5-b0b3-a017dfc1a131",
      "evidence": "Figure 15 title mentions TPRM maturity trends",
      "confidence": 1
    }
  ],
  "arcBeats": [
    {
      "to": 46,
      "from": 25,
      "beatId": "e29e7cb7-9a23-4d32-bab6-af92a1a9edd1",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Impact & Next Steps",
      "beatSlug": "consultants-gambit-impact-next-steps",
      "evidence": "The remaining sections provide key takeaways, trends, and conclusions, as well as appendices with additional data and information",
      "position": 3,
      "confidence": 0.8,
      "parentBeatName": "Resolution",
      "parentBeatSlug": "resolution"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}