State of Third-Party Risk Management 2026 Survey Report

More vendors, leaner teams, and higher stakes. Where does your TPRM program stand?

The 2026 State of Third-Party Risk Management Survey Report is here with fresh data from financial services professionals on AI risk, TPRM program maturity, exam outcomes, and more.

The survey reveals an industry under pressure. Programs are managing larger vendor portfolios with small teams, AI risk dominates vendor concerns, and internal boards are demanding improvements just as loudly as regulators. 

WHAT THE DATA SHOWS:

• 63% of TPRM programs run on just 1-2 dedicated employees. 
• Not a single organization feels extremely confident managing vendor AI risk. 
• Excel users are 82% more likely to receive exam findings than software users.
• 73% of organizations feel pressure to improve their TPRM programs — and the push is coming from the board, not just the examiner.
• The hybrid operating model now dominates at 60% adoption, up 15% from last year. 

WHAT'S INSIDE:

Download the full report to explore:

• How financial institutions are — and aren't — tracking vendor AI use, and the five concerns keeping teams up at night.
  
• Why spreadsheet-based programs pay a steep price at exam time.
• How operating model choices affect program maturity.
• What metrics distinguish programs that demonstrate strategic value from those stuck in compliance-checkbox mode.
• Best practices for doing more with flat budgets and lean teams.

See where the industry stands — and where your program needs to go. Download today!