risk
Vendor/outsourcing service non-performance and disputes
Outsourced processing, IT, payroll/HR, print/mail, or sub-custodian providers fail to meet service levels, deliver defective software, make incorrect payments, or breach contractual deliverables, causing processing errors, outages, and loss.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- third_party
- domain
- Third-Party / Supply-Chain Risk
- taxonomy
- basel-operational-risk
- coso-erm-risk
- inherent_rating
- medium
Details
- risk_id
- tprm-vendor-service-nonperformance
- category
- third_party
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- basel-operational-risk
- coso-erm-risk
Source
No record-specific source URL is provided.
Connections
- UC-TPRM-03 — Bind vendors to security and privacy terms by contract mitigates Vendor/outsourcing service non-performance and disputes
- strength
- related
- rationale
- Contractually defining deliverables and obligations before service begins creates enforceable recourse against non-performance.
- UC-TPRM-08 — Govern security of external and cloud service use mitigates Vendor/outsourcing service non-performance and disputes
- strength
- primary
- rationale
- Agreeing service and exit terms and monitoring provider compliance governs external and cloud service delivery, directly addressing non-performance.
- UC-TPRM-06 — Manage secure termination and disposal at relationship end mitigates Vendor/outsourcing service non-performance and disputes
- strength
- related
- rationale
- Service-transition provisions at termination reduce the switching impact when moving off a non-performing vendor.
- UC-TPRM-01 — Operate a third-party security risk management program mitigates Vendor/outsourcing service non-performance and disputes
- strength
- primary
- rationale
- Defining, agreeing, and reviewing service agreements and supplier performance and operating lifecycle controls to address weaknesses directly targets non-performance.
- UC-TPRM-02 — Perform risk-based due diligence before engaging vendors mitigates Vendor/outsourcing service non-performance and disputes
- strength
- related
- rationale
- Assessing operational risk before engagement screens out likely non-performers, indirectly reducing later service-delivery failures.
- UC-ACCESS-21 — Manage subservice organizations supporting the system mitigates Vendor/outsourcing service non-performance and disputes
- strength
- primary
- rationale
- Monitoring subservice-org performance against commitments and tracking identified issues to resolution directly detects and remediates service non-performance.
- UC-TPRM-04 — Monitor vendor performance, services, and risk mitigates Vendor/outsourcing service non-performance and disputes
- strength
- primary
- rationale
- Monitoring performance and service delivery against contractual and SLA requirements directly detects and drives remediation of non-performance.