Your Service Relationship Owner (SRO) will be asked a series of questions to establish a risk profile of the service. If our service is deemed “VRM Liable” what happens next? We will conduct a deeper assessment for services where the risk profile indicates that this is necessary.Ħ.

Liability for VRM is decided using a risk based assessment of the services being provided.

What are the criteria for going through the VRM process? We expect the process to be much quicker and easier going forward with greater consistency and a lower administrative burden.ĥ. You will manage and maintain your own evidence and liaise with the Bank through an online portal (dbSupplierManagement/dbSLPM). We will be more direct and transparent with you regarding the VRM process and how to navigate it. What will be different for third parties?

To reduce the workload on Third Parties and EmployeesĤ.

To expand the scope of VRM by using Risk as the key driver of liability.

To improve the quality and time taken to execute the VRM process.

If a new service has different attributes – and, therefore, require additional controls – we will only ask for evidence of these extra controls. Once these controls have been ‘certified’, the system will “remember” the evidence for as long as it is valid – so future engagements should be quicker and easier to approve. We have pre-defined the control requirements associated with these attributes and third parties will be provided with a clear list of the evidence needed to prove that the controls applicable to their service are in place. Going forward the process will involve establishing a risk profile of a service at the outset using questions which determine its risk “attributes”. The Bank is implementing a new VRM process and new IT system to support it. Why is the Bank changing its Vendor Risk Management (“VRM”) process?ĭeutsche Bank is addressing feedback from third parties and employees highlighting frustrations with the current process/system where much of the work is repetitive and low value – particularly when procuring services from organisations with whom we already have established relationships. We will update this page over time so please revisit.ġ. If your question (and answer!) do not appear below, please contact and your query will be directed to the person best placed to answer it.

Please find below the answers to some frequently asked questions.

Ariba vendor management