Third-Party & Supplier Risk
Third-party risk often sits in access rights and renewals that nobody owns. We list every third party, what it can touch and when it was last reviewed.
Questions we help answer
- Which agencies, apps and freelancers can still access our systems?
- How dependent are we on a single supplier, carrier or platform?
- What should we check before onboarding a new supplier?
- Which contracts renew automatically next quarter?
- How do we monitor supplier performance without relying on their own reports?
What we do
Third-party inventory
Suppliers, agencies, apps, integrators and freelancers, with contracts, spend, data access and system permissions for each.
Onboarding checks
Checklists and records for new suppliers, scaled to the access and value each one carries.
Access and offboarding controls
Scheduled access reviews and a recorded removal step when a relationship ends.
Concentration analysis
Spend, volume and capability concentration on single suppliers, carriers and platforms.
Performance monitoring
Delivery, quality and incident data by supplier, taken from your own systems.
- How an engagement with THEFOCUS startsDiscuss this with us
How we approach it
- 01
Build the inventory from records
Payables, contract files, app lists and user accounts reveal third parties that no single team tracks.
- 02
Rate by exposure
Each third party is rated on the data it holds, the access it has and how much the business depends on it.
- 03
Put reviews on the calendar
Reviews are tied to renewal dates and offboarding, with owners and reminders in the tools your team uses.
- 04
Monitor from your own data
Supplier performance and incidents are tracked from your receipts, tickets and quality records.
Relevant industries
How an engagement with THEFOCUS starts
A first conversation is about your situation. If there is a fit, we propose a scoped diagnostic with a fixed deliverable before any larger commitment.
Discuss this with us01
A working conversation
Forty-five minutes with the person who would lead the work. We ask about the decision, the systems behind it and the deadline.
02
A scoped diagnostic
Read-only access, a fixed timeframe and a written finding: what the records show, what it costs and what to change first.
03
A plan you can act on
Changes, owners, measures and exclusions in writing. The same team then builds and measures, or hands over cleanly.
- One accountable team
- The people who diagnose also build the systems and measure the result.
- Partners chosen per problem
- Independent specialists join for the parts that need them, under one contract.
- Records before dashboards
- Orders, ledgers and logs are reconciled before any recommendation depends on them.
Questions executives ask
Do you assess suppliers' financial health or legal standing?
We assemble the records a review needs, such as public company filings, delivery and quality history and contract terms. Credit, legal and sanctions judgements stay with your finance, legal and compliance advisers.
Do you negotiate supplier contracts?
No. We show where terms, renewals and dependency create exposure. Negotiation and drafting stay with your procurement team and legal advisers.
Discuss this with us
A few details help us route your enquiry to the right partner. Fields marked optional can be left blank.