Not all third parties are vendors and risk treatment should address this reality.  DPOBORAD's value added services cover broader spectrum of risk management. 

Our work includes contract negotiations, risk assessments, tracking and follow up of risk treatments, review and evaluation of artifacts, validation and challenges, compliance with privacy policies and applicable regulations and assessments of security controls. 

We are hands on. We do the heavy lifting work for you. We ensure that you reduce your risk without regard to its source. We conduct risk control self assessments for our clients, provide clear framework that ensures compliance and effective risk management program.  Rest assured knowing that you have talented group of professionals at DPOBOARD ready and able to assist you in each step of the way. 

We cover a wide range of industry and have deep expertise in multiple regulatory and compliance framework. The following links provide additional context to some of the areas we support to ensure that vendors and other third party risks are reduced.

Cross-border transfer mechanism negotiations including EU Standard Contractual Clauses +.

• FDIC Guidance - https://www.fdic.gov/news/news/financial/2008/fil08044a.html
• NCUA Guidance - http://www.ncua.gov/Resources/Documents/LCU2008-pdf
  
• NIST Cybersecurity Framework - http://www.nist.gov/cyberframework/
• Future Considerations - https://ffiec.gov/press/pr031715.htm
• FFIEC Handbooks - http://ithandbook.ffiec.gov/
  
• SSAE 16/18 Details - http://www.ssae16.org