{ "docId": "019dd923-5de0-76bd-a16b-1d72bab18495", "docSlug": "0b0e77be71340a95", "documentTitle": "Third-party governance and risk management The threats are real", "authorId": "Deloitte", "authorName": "Deloitte", "documentKindSlug": "consulting-deck", "documentKindLabel": "Consulting deck", "sourceTypeSlug": "strategy_consulting", "sourceTypeLabel": "Strategy consulting", "presentationDate": null, "orientation": "landscape", "aspectRatio": 1.414, "pageNumber": 30, "pageCount": 39, "prevPage": 29, "nextPage": 31, "slideType": "industry_trends", "function": "analyze_data", "density": "overcrowded", "nDataPoints": 7, "notes": "The slide uses a combination of text, callout boxes, and donut charts to illustrate the tension between decentralization and standardized governance.", "elementsJson": [ "headline_text", "action_title", "paragraph", "callout_box", "donut_chart", "icon_grid" ], "metadataConfidence": 1, "imagePath": null, "slideHref": "/slides/019dd923-5de0-76bd-a16b-1d72bab18495/30", "deckHref": "/decks/019dd923-5de0-76bd-a16b-1d72bab18495", "deckJsonHref": "/decks/019dd923-5de0-76bd-a16b-1d72bab18495.json", "deckAnchorHref": "/decks/019dd923-5de0-76bd-a16b-1d72bab18495#slide-30", "components": [ { "bbox": { "h": 0.25, "w": 0.53, "x": 0.42, "y": 0.18 }, "kind": "callout", "text": "75.5 percent of respondents today have a partial through to a high degree of decentralization, reflecting a potential challenge to a holistic and unified approach to third-party risk management. 86 percent (However, the vast majority of these organization) mandate common third-party standards to ensure a consistent approach across business units.", "attrs": null, "subkind": "primary", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "89cdc99c-2a55-470e-b9b2-08a6c4b00529", "frameworkName": null, "frameworkSlug": null }, { "bbox": null, "kind": "callout", "text": "75.5 percent of respondents today have a partial through to a high degree of decentralization, reflecting a potential challenge to a holistic and unified approach to third-party risk management.", "attrs": null, "subkind": null, "toolName": "Visual emphasis", "toolSlug": "visual-emphasis", "confidence": null, "componentId": "019dd952-0491-71ac-9db5-1165acd77570", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.4, "w": 0.25, "x": 0.42, "y": 0.45 }, "kind": "chart", "text": "Increasing degree of decentralization in respondent organizations (% of respondents)", "attrs": null, "subkind": "donut", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "41d8f206-b69f-4d9b-92da-cc76e4d8bfb0", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.4, "w": 0.25, "x": 0.68, "y": 0.45 }, "kind": "chart", "text": "Mandating third-party standards (% of respondents)", "attrs": null, "subkind": "donut", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "487dfcbe-e46b-4efc-abff-a164577e5208", "frameworkName": null, "frameworkSlug": null }, { "bbox": null, "kind": "metric", "text": "Percentage of respondents: 86%", "attrs": null, "subkind": "primary", "toolName": "Quantification", "toolSlug": "quantification", "confidence": null, "componentId": "019dd952-0491-71ac-9db5-14f47f7737c1", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.6, "w": 0.38, "x": 0.05, "y": 0.28 }, "kind": "paragraph", "text": "A decentralized organization is one where the decision-making authority does not vest in a central group or individual, but is dispersed across business units and divisions to achieve divisional flexibility with which to react to local environmental and operational contingencies. The survey confirms that global organizations are increasingly being managed through degrees of decentralization across their various operating units. Nearly 76 percent of respondents today have a partial through to a high degree of decentralization, reflecting a potential challenge to a holistic and unified approach to third-party risk management. As many as 86 percent of respondents mandate common third-party standards to ensure a consistent approach to third-party risk management across decentralized and often diverse business units. The survey also reveals that the general trend is to have a combined approach to formulating these standards, representing a mix of existing industry-specific (e.g. HIPAA standards for safeguarding of personal identifiable or private information for patient data handled or managed by third-party service providers) or generally accepted functional standards (ISO 22301 standard for business continuity in relation to business processes operated by third-parties), supplemented by organization-specific standards particularly in those areas where no such generally accepted standards exist. Respondents have also indicated that the domains covered by these third-party standards are continually expanding and extending to areas such as code of conduct and ethics, regulatory compliance, minimum wage requirements, information security, and privacy etc.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "55369d6e-f687-48dc-b334-7ddd609fe6c6", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.08, "w": 0.38, "x": 0.05, "y": 0.18 }, "kind": "title", "text": "Most organizations are mandating consistent third-party governance standards amidst increasing decentralization of operating units.", "attrs": null, "subkind": "action-title", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "198085af-bfd5-4dee-a275-e0c43afd725d", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.05, "w": 0.45, "x": 0.09, "y": 0.05 }, "kind": "title", "text": "Third-party governance (cont.)", "attrs": null, "subkind": "headline", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "39e78f01-c7e5-4ff4-a876-a28de1c3b6ab", "frameworkName": null, "frameworkSlug": null } ], "metrics": [], "tools": [ { "name": "Action Titles", "slug": "action-titles", "agent": "Architect", "layer": "slide", "matchId": "0f903b7f-afc5-4a8c-a79e-e8089dfd2eaa", "evidence": "title/action-title: Most organizations are mandating consistent third-party governance standards amidst increasing decentralization of operating units.", "confidence": 0.9 }, { "name": "Waterfall chart", "slug": "waterfall-chart", "agent": null, "layer": "slide", "matchId": "f9257f4c-8ec5-4162-9cba-dea085a997ff", "evidence": "chart/donut: Increasing degree of decentralization in respondent organizations (% of respondents)", "confidence": 0.7 } ], "frameworks": [], "arcBeats": [ { "to": 35, "from": 19, "beatId": "2838f766-362d-4d20-8c1e-8c578de9a277", "arcName": "The Consultant's Gambit", "arcSlug": "consultants-gambit", "beatName": "Impact & Next Steps", "beatSlug": "consultants-gambit-impact-next-steps", "evidence": "The deck provides best practices and recommendations for implementing robust governance and risk management practices", "position": 3, "confidence": 0.8, "parentBeatName": "Resolution", "parentBeatSlug": "resolution" } ], "loops": [], "imagePathAlt": null, "thumbSrc": null, "thumbSrcAlt": null, "locked": true }