---
title: "Report: State of Third-Party Risk Management 2020"
description: Exclusive report details the current state of third-party risk management, including the challenges TPRM programs are facing in 2020.
image: https://www.riskrecon.com/hubfs/sotp-thumbnail-1200x600-1.png
---

[![mc_riskrecon_pos-small](https://www.riskrecon.com/hs-fs/hubfs/Logos/RiskRecon%20and%20Mastercard%20Logos/mc_riskrecon_pos-small.png?width=180&height=84&name=mc_riskrecon_pos-small.png "mc_riskrecon_pos-small")](https://www.riskrecon.com/?hsLang=en)

[**](https://www.facebook.com/riskrecon) [**](https://twitter.com/riskrecon) [**](https://www.linkedin.com/company/riskrecon/)

# Report: The State of Third-Party Risk Management

![Pulse-1](https://www.riskrecon.com/hubfs/Pulse-1.svg)

#### Report Overview

![TPR-Ecosystem-1200-1](https://www.riskrecon.com/hs-fs/hubfs/TPR-Ecosystem-1200-1.png?width=300&name=TPR-Ecosystem-1200-1.png)Download this new report that will allow you to benchmark your TPRM program in areas such as program staffing, risk assessment methods, and vendor remediation.  

**We surveyed over 150 third-party risk practitioners to create the report, here are some key results:**

- 81% of respondents claimed that 3/4 of their vendors pass their security questionnaires
- In contrast, only 14% of those surveyed trust that third parties security matches responses from their questionnaires
- 31% of respondents stated that they have vendors they considered to be a material risk in the event of a data breach
- The typical ratio of vendors to staff reported by TPRM programs is 50(vendors):1(staff)

[![riskrecon_by_mc_rgb_rev](https://www.riskrecon.com/hs-fs/hubfs/2020_RR/riskrecon_by_mc_rgb_rev.png?width=150&height=74&name=riskrecon_by_mc_rgb_rev.png "riskrecon_by_mc_rgb_rev")](https://www.riskrecon.com/?hsLang=en)

Locations:

Murray, UT  
Boston, MA

E: [sales@riskrecon.com](mailto:sales@riskrecon.com)

[![Contact Us](https://no-cache.hubspot.com/cta/default/2477095/bf45a9b1-2774-4be7-88e8-3edd40ff6445.png)](https://cta-redirect.hubspot.com/cta/redirect/2477095/bf45a9b1-2774-4be7-88e8-3edd40ff6445)

#### Solutions

- [RiskRecon Cyber Ratings](https://www.riskrecon.com/solutions/riskrecon-by-mastercard)
- [RiskRecon Privacy Ratings](https://www.riskrecon.com/solutions/riskrecon-privacy)
- [RiskRecon Assessments](https://www.riskrecon.com/solutions/riskrecon-assessments)
- [Cyber Quant](https://www.riskrecon.com/solutions/mastercard-cyber-quant)
- [Threat Protection](https://www.riskrecon.com/solutions/mastercard-threat-protection)

#### Use Cases

- [Third-party diagnostic & prioritization](https://www.riskrecon.com/use-case/third-party-portfolio-diagnostic)
- [Cyber Attack Protection](https://www.riskrecon.com/mastercard-threat-protection)
- [Cyber Risk Quantification](https://www.riskrecon.com/solutions/mastercard-cyber-quant)
- [Supply Chain Monitoring](https://www.riskrecon.com/use-case/supply-chain-monitoring-and-visualization)
- [Own Enterprise Monitoring](https://www.riskrecon.com/use-case/own-enterprise-subsidiary-monitoring)

#### Company

- [Why RR](https://www.riskrecon.com/why-riskrecon)
- [Our Story Leadership](https://www.riskrecon.com/team#leadership)
- [Partners](https://www.riskrecon.com/partners-riskrecon)
- [Careers](https://careers.mastercard.com/us/en/search-results?keywords=riskrecon)
- [Privacy Policy](https://www.mastercard.us/en-us/vision/corp-responsibility/commitment-to-privacy/privacy.html?hsLang=en)
- [Terms of Use](https://www.riskrecon.com/terms-of-use)

#### Resources

- [Academy](https://www.riskrecon.com/academy)
- [Blog](https://blog.riskrecon.com/)
- [Events](https://blog.riskrecon.com/company/events)
- [Reports and WPs](https://blog.riskrecon.com/resources/reports-and-whitepapers)
- [Videos & Webinars](https://blog.riskrecon.com/resources/videos-and-webinars)
- [Ratings Model](https://www.riskrecon.com/cybersecurity-risk-rating-model)

Follow us:

[**](https://www.facebook.com/riskrecon) [**](https://twitter.com/riskrecon) [**](https://www.linkedin.com/company/riskrecon/)

© Copyright 2026. | [Privacy Policy](https://www.riskrecon.com/privacy-policy?hsLang=en) | [Terms of Use](https://www.riskrecon.com/terms-of-use?hsLang=en)

 Manage Cookies