---
title: "Report: The State of Third-Party Risk Management 2020"
description: Read this exclusive report on the current state of third-party risk management.
---

[Blog Testing ](https://blog.riskrecon.com/blog-testing)

# [Report: The State of Third-Party Risk Management 2020](https://blog.riskrecon.com/blog-testing/report-the-state-of-third-party-risk-management)

 Written by [RiskRecon](https://blog.riskrecon.com/blog-testing/author/riskrecon) | Nov 9, 2020 1:27:00 PM

In the spring of 2020, we surveyed over 150 third-party risk practitioners to gain a better understanding of how organizations are operating their [third-party risk management](https://www.riskrecon.com/solutions/third-party-risk-management?hsLang=en) programs, the challenges those programs are facing, and the strategies TPRM programs are utilizing to managed third-party risk.

We hope that you find this study helpful in your work to hold vendors accountable for managing third-party cyber risk well, because you can outsource your systems and services, but you cannot outsource your risk.

**Here are some highlights from the report: **

- 81% of respondents claimed that 3/4 of their vendors pass their security questionnaires
- In contrast, only 14% of those surveyed trust that third parties security actually matches responses from their questionnaires
- 31% of respondents stated that they have vendors they considered to be a material risk in the event of a data breach
- The typical ratio of vendors to staff reported by TPRM programs is 50(vendors):1(staff)

[View full post](https://blog.riskrecon.com/blog-testing/report-the-state-of-third-party-risk-management)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "RiskRecon"
  },
  "dateModified" : "2020-11-17T13:32:13.784Z",
  "datePublished" : "2020-11-09T13:27:00Z",
  "headline" : "Report: The State of Third-Party Risk Management 2020",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1030,
    "url" : "https://f.hubspotusercontent40.net/hubfs/2477095/State-of-TPRM-1200x1200-1.png",
    "width" : 829
  },
  "mainEntityOfPage" : "https://blog.riskrecon.com/blog-testing/report-the-state-of-third-party-risk-management",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Blog Testing"
  }
}
```