{
  "docId": "019dd923-5de0-76bd-a16b-1d72bab18495",
  "docSlug": "0b0e77be71340a95",
  "documentTitle": "Third-party governance and risk management The threats are real",
  "authorId": "Deloitte",
  "authorName": "Deloitte",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.414,
  "pageNumber": 20,
  "pageCount": 39,
  "prevPage": 19,
  "nextPage": 21,
  "slideType": "risk_register",
  "function": "diagnose",
  "density": "dense",
  "nDataPoints": 11,
  "notes": "The slide uses a combination of a ranked table and a bubble chart to illustrate risk criticality and impact.",
  "elementsJson": [
    "data_table",
    "icon_grid",
    "callout_box"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5de0-76bd-a16b-1d72bab18495/20",
  "deckHref": "/decks/019dd923-5de0-76bd-a16b-1d72bab18495",
  "deckJsonHref": "/decks/019dd923-5de0-76bd-a16b-1d72bab18495.json",
  "deckAnchorHref": "/decks/019dd923-5de0-76bd-a16b-1d72bab18495#slide-20",
  "components": [
    {
      "bbox": {
        "h": 0.7,
        "w": 0.35,
        "x": 0.6,
        "y": 0.18
      },
      "kind": "callout",
      "text": "Deloitte point of view: The severity of consequences of negative actions by third-parties on organizational reputation, earnings and shareholder value is currently the single-most compelling driver for organizations.",
      "attrs": null,
      "subkind": "primary",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "fa2d9476-915d-478b-b64f-fdd64bfbd26d",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "callout",
      "text": "The severity of consequences of negative actions by third-parties on organizational reputation, earnings and shareholder value is currently the single-most compelling driver for organizations to invest in either implementing or refining TPGRM processes and frameworks.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd952-0491-71ac-9db4-2854f31eb21b",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.2,
        "w": 0.5,
        "x": 0.05,
        "y": 0.55
      },
      "kind": "chart",
      "text": "26.2 Reputational damage; 23 Financial/reporting; 23 Non-compliance; 20.6 Breach of data; 10.3 Lost business",
      "attrs": null,
      "subkind": "bubble",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "c8b0fb59-7aff-4637-8fe4-06d675bc7fb0",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": null,
      "kind": "metric",
      "text": "Percentage of respondents: 26.2",
      "attrs": null,
      "subkind": "primary",
      "toolName": "Quantification",
      "toolSlug": "quantification",
      "confidence": null,
      "componentId": "019dd952-0491-71ac-9db4-2f9300f83805",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.25,
        "w": 0.5,
        "x": 0.05,
        "y": 0.22
      },
      "kind": "table",
      "text": "Disruption in customer service; Breach of regulation; Reputational damage; Breakdown in supply chain; Financial fraud; Failure of financial viability",
      "attrs": null,
      "subkind": "data",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9a90c13f-fc09-4a46-9b7c-9592a153c8ad",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.4,
        "x": 0.05,
        "y": 0.18
      },
      "kind": "title",
      "text": "Top areas of third-party engagement risk, ranked in order of criticality",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "27235527-6c15-42eb-a76b-51460d79a318",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.45,
        "x": 0.05,
        "y": 0.49
      },
      "kind": "title",
      "text": "Impact of third-party incidents actually faced by respondents (% of respondents)",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "a9d1d27a-16f4-4a66-9ede-9e39b0aa624f",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "Chart Selection Guide",
      "slug": "chart-selection-guide",
      "agent": "Designer",
      "layer": "slide",
      "matchId": "6b171aa4-9890-4cec-bfed-bb2144f776b7",
      "evidence": "chart/bubble: 26.2 Reputational damage; 23 Financial/reporting; 23 Non-compliance; 20.6 Breach of data; 10.3 Lost business",
      "confidence": 0.6
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 35,
      "from": 19,
      "beatId": "2838f766-362d-4d20-8c1e-8c578de9a277",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Impact & Next Steps",
      "beatSlug": "consultants-gambit-impact-next-steps",
      "evidence": "The deck provides best practices and recommendations for implementing robust governance and risk management practices",
      "position": 3,
      "confidence": 0.8,
      "parentBeatName": "Resolution",
      "parentBeatSlug": "resolution"
    }
  ],
  "loops": [
    {
      "to": 20,
      "from": 19,
      "name": "Cost Of Inaction",
      "slug": "27-cost-of-inaction",
      "bestFor": "Urgent budget requests, compliance, risk mitigation",
      "matchId": "2196d220-1c9a-434b-87ca-35c2073653a4",
      "evidence": "The deck emphasizes the importance of managing third-party risks to avoid negative consequences",
      "position": 0,
      "objective": "Highlight the risks of not managing third-party risks effectively",
      "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point",
      "confidence": 0.6,
      "description": "Quantify what happens if the audience does nothing"
    },
    {
      "to": 25,
      "from": 20,
      "name": "Mece Breakdown",
      "slug": "40-mece-breakdown",
      "bestFor": "Problem structuring, ensuring completeness, strategic analysis",
      "matchId": "a9c87922-32ba-4b78-9300-fb605355b331",
      "evidence": "The deck provides a detailed analysis of third-party engagement risks and their criticality",
      "position": 1,
      "objective": "Provide a comprehensive breakdown of third-party engagement risks",
      "structure": "The Whole -> Category A (distinct) -> Category B (distinct) -> Category C (distinct) -> Complete Coverage",
      "confidence": 0.6,
      "description": "Divide a complex topic into mutually exclusive, collectively exhaustive categories"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}