Ncontracts Releases New Report: The 2025 Venminder State of Third-Party Risk Management Survey

Latest survey provides insights into the current practices, challenges, and trends shaping third-party risk management (TPRM) across various industries

BRENTWOOD, Tenn.--(BUSINESS WIRE)--Ncontracts, the leading provider of integrated compliance, risk, and third-party management solutions to the financial services industry, today published the 2025 Venminder State of Third-Party Risk Management Survey, offering a comprehensive look at how organizations are navigating the complexities of third-party risk.

Now in its ninth year, this survey dives deep into current practices, challenges, compliance drivers, and the tangible benefits of robust third-party risk management (TPRM) programs.

Key findings from the 2025 survey include:

• Hybrid TPRM Model Adoption Surges: 52% of respondents now use a hybrid TPRM operating model, up 41% from the previous year, indicating a maturing understanding of third-party risk management complexities.
• Increased Vendor Management: Organizations are managing more vendors than ever, with notable increases in programs handling 101-300 vendors (28%, up from 23%) and those with over 1,000 vendors (18%, up from 16%).
• TPRM Staffing Challenges: Despite managing more vendors, TPRM staffing has not increased proportionally. Programs with 1-2 full-time employees rose from 43% to 48%.
• Shift Towards Dedicated TPRM Tools: The use of dedicated TPRM software platforms increased by 19%, with 64% of respondents now using such tools.
• Rising Focus on Vendor Cybersecurity and AI Risks: 49% of organizations experienced vendor-related cyber incidents in 2024. Additionally, there's growing attention to managing vendor AI risks, with a significant decrease in organizations not monitoring AI usage (from 37% to 23%).

"The 2025 survey results underscore the complexities of third-party risk management and the increasing sophistication of TPRM programs," said Michael Berman, founder and CEO of Ncontracts. "As organizations grapple with expanding vendor portfolios and emerging risks like AI, it's clear that robust TPRM strategies are more critical than ever."

The survey, conducted between November 2024 and January 2025, gathered responses from a diverse range of industries, including financial services, fintech, healthcare, and IT. It reflects the perspectives of organizations of all sizes, from small businesses to large enterprises with over 5,000 employees.

For more information about the 2025 State of Third-Party Risk Management Survey or to request a copy of the full report, visit our site. For a deep dive into the results, register for our webinar Tuesday, February 26 at 1 p.m. CST.

About Ncontracts

Ncontracts provides integrated risk management, compliance, and third-party risk management solutions to over 5,500 organizations worldwide, including 4,500 U.S. financial institutions, mortgage companies, and fintechs. The flagship Ncontracts IRM suite combines AI-powered software with expert services, helping financial institutions streamline risk and compliance management through an intuitive, cloud-based platform. Ncontracts’ Venminder solution is trusted by enterprise financial companies and other large organizations to strategically manage third-party risk across the entire vendor lifecycle. Visit www.ncontracts.com or follow the company on LinkedIn and X for more information.