Penn Medicine Third Party Risk Management (TPRM) Program
A "Third Party" is any company that supplies products (such as cloud applications, medical devices, non-medical devices, software, or hardware) or services (such as medical billing and coding, training and education, or remote patient monitoring) to Penn Medicine/UPenn.
Why do I need to do this?
As part of Penn Medicine, the Perelman School of Medicine (PSOM) follows the Penn Medicine process for evaluating third party risk. This is in place of the University's V-Star process. This is required even if the purchase is made through the University of Pennsylvania procurement organization with funds recorded in the University of Pennsylvania's financial systems.
The purpose of the Third Party/Product Intake Form is to obtain preliminary information on third parties, solutions, and the intended business use-cases for third party profiling, scoping, and to determine the necessity for a third party risk assessment. This form is meant for a Penn Medicine/UPenn representative to fill out to request an assessment and should be completed from that perspective.
How do I accomplish this?
All initiatives that involve third parties (existing or new), must be entered in the third party management system via the Third Party/Product Intake Form. The Penn Medicine Third Party Risk Management team (TPRM) will evaluate each request to determine if further engagement with the vendor is required. When TPRM requires additional information to complete the assessment, they will reach out to the third party as necessary. The results of the assessment will be provided to your procurement contacts.
The buttons above are resources for you to use for whatever TPRM activity you require:
- Unsure if you need a TPRM assessment? Use the TPRM Wizard!
- Need to request a TPRM assessment? Use the TPRM Product/Service Intake Form!
- Need to check on the status of your TPRM assessment? Use TPRM Self-Search*!
- *This will require a Penn Medicine account to access.
Still can't find what you need? Check out our additional resources**!
**This will require being on the PSOM or UPHS networks and a Penn Medicine 365 account to access.