On-Demand Webinar: “Third-Party Risk Management”

Wednesday, June 18, 2025

12:30 pm – 1:30 pm E.T.

Duration: 60 Minutes

Series

Summer CPE Symposium

Close Series Description
Summer CPE Symposium

The PYA Summer CPE Symposium is a complimentary, two-day virtual event designed for healthcare professionals, offering four expert-led sessions on key industry topics. Participants will gain valuable insights on reimbursement, healthcare compliance, audit and accounting, and cybersecurity, along with practical takeaways and tools. Hosted by PYA thought leaders, the symposium offers CPE credits, and attendees can register for as many sessions as they choose.

What is Third-Party Risk Management in healthcare, and why is it important?

Third-Party Risk Management (TPRM) helps healthcare organizations reduce cybersecurity, compliance, and privacy risks posed by vendors and service providers. This webinar explains key TPRM program elements—including risk assessment, due diligence, and governance—and how they address HIPAA, FDA, and other regulatory requirements.

Cyberattacks, ransomware, supply chain shortages, privacy breaches, and the resulting regulatory focus, fines, and penalties have all demonstrated the critical importance of a robust Third-Party Risk Management Program (TPMP) for healthcare entities of all sizes.

During this session, Lori Foley discussed the key elements and importance of an integrated Third-Party Risk Management (TPRM) program, with an emphasis on the regulatory and compliance landscape.

Specifically, attendees learned from these key points:

  • Importance of TPRM in healthcare
  • Brief overview of recent incidents or regulatory focus areas
  • Definition and types of third parties (e.g., IT vendors, medical device manufacturers, outsourced service providers)
  • Regulatory and compliance requirements pertaining to third-party vendors (e.g., BAAs, HIPAA, FDA)
  • Core elements of a TPRM program lifecycle (inventory, risk assessment, due diligence, contracting, and ongoing monitoring)
  • Coordination of parties in identification and mitigation of risks (e.g., internal audit, compliance, legal, quality, risk management, IT)
  • Recommendations for appropriate governance oversight

View Presentation Slides

Meet Our Presenters
PYA
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.