IIA Third Party Topical Requirements
Audit Readiness Results
We couldn't find your responses — you may not have completed the assessment yet, or your browser data was cleared. Take the assessment to see your results here.
Take the Assessment →
An assessment of your organization's readiness against the Institute of Internal Auditors' Third-Party Topical Requirement, with prioritized findings by category.
In September 2026, the Institute of Internal Auditors' Third-Party Topical Requirement takes effect, giving internal audit a defined standard against which third-party management programs will be examined. This report shows where your program stands against that standard today, and which gaps are worth closing first.
How your score was produced. You answered 17 questions across three categories — Governance, Risk Management, and Controls — marking each as Yes, Partially, or No. Those answers are weighted into a single readiness score from 0 to 100, and the score places you in one of four readiness bands.
Where you stand by category. Your score broken out across Governance, Risk Management, and Controls, so you can see which area is furthest from ready.
Your priorities. Every question you marked Partially or No, with the specific elements you flagged as missing underneath it.
What good looks like. Each gap is stated as the practice the requirement expects, so the report doubles as a working checklist.
How to move forward. A short summary of how Vendor Centric helps organizations close these gaps, and how to start a conversation.
This report is a starting point for a conversation, not an audit opinion. It reflects your own view of your program on the day you completed it — a self-assessment, not an independent examination. Its value is in focus: rather than facing the whole requirement at once, you get a short list of the things standing between you and readiness, ordered so the most consequential come first.
Most teams find it useful to review these findings with the people who own the underlying processes — procurement, risk, compliance, and the business units that engage third parties directly — before deciding what to tackle in the current cycle.
Based on your answers, here's where your program stands by category and the specific elements to address, drawn directly from what you flagged.
You don't have to figure this out from scratch or do it alone. We bring a proven process, tested across dozens of third party management programs, so every step is grounded in what actually works. Here's what that looks like in practice:
We start by turning your gaps into a clear, prioritized plan, covering both the work to be done and what it takes to get your team behind it.
Next, we do the work with you: developing policies and procedures, standing up governance, configuring your systems, and training your team so the new approach sticks.
Then we stay on as an extension of your team, filling needs as they arise and sharing market insights that keep your program performing at a high level.
Everything we do, from building the plan to closing the gaps to sustaining the results, rests on the Vendor Management Operating Model (VMOM). It's grounded in more than a decade of real-world practice and mapped to four globally recognized standards, including the IIA Third Party Requirements you're being measured against.
Book a 45-minute call with a senior Vendor Centric advisor to talk through your results and shape your next move.
Schedule a callYou don't have to figure this out from scratch or do it alone. We bring a proven process, tested across dozens of third-party management programs, so every step is grounded in what actually works.
We start by turning your gaps into a clear, prioritized plan, covering both the work to be done and what it takes to get your team behind it.
Next, we do the work with you: developing policies and procedures, standing up governance, configuring your systems, and training your team so the new approach sticks.
Then we stay on as an extension of your team, filling needs as they arise and sharing market insights that keep your program performing at a high level.
Everything we do rests on the Vendor Management Operating Model (VMOM) — grounded in more than a decade of real-world practice and mapped to four globally recognized standards, including the IIA Third-Party Requirements you're being measured against.
Review your results with a senior Vendor Centric advisor. We'll talk through what this assessment surfaced, how other teams are handling the same requirements, and where it makes sense for you to start.
Email us to schedule your review
A 45-minute conversation with a senior Vendor Centric advisor to talk through what your assessment surfaced and help you shape your thinking. You get:
Pick a time that works for you, confirmed instantly.
A 45-minute complimentary results review, confirmed instantly.
Scheduler not loading? Open it in a new tab.