Outsourcing in TPRM: Rethinking Its Relevance and Role

Article

Outsourcing Is Dead. Long Live Outsourcing.

Outsourcing, as we've known it in third-party risk management, is outdated. But dismissing it entirely would be a strategic mistake. In its place, we need a more dynamic, business-aligned lens - one that prioritizes criticality and value over legacy definitions.

Sep 17, 2025

Mike Day, Head of Third Party Management, MUFG Bank

Tags: Vendor and Third Party Risk

Outsourcing Is Dead. Long Live Outsourcing.

The views and opinions expressed in this content are those of the thought leader as an individual and are not attributed to CeFPro or any other organization

Outsourcing as a regulatory concept is becoming outdated
SaaS and cloud models challenge traditional definitions
Regulatory focus is shifting toward critical third-party services
Many vital third-party relationships go unreported under old frameworks
MUFG uses data visualizations to prompt strategic discussions with executives
A new lens focuses on how much is outsourced and whether that’s sustainable
Third-party databases offer the greatest value for risk response
Outsourcing committees may give way to broader third-party governance
TPRM must evolve from a compliance gatekeeper to a strategic advisor
Outsourcing still matters – just not how we used to think

WHAT'S INCLUDED:

Unlimited access to peer-contribution articles and insights

Global research and market intelligence reports

Discover Connect Magazine, a monthly publication

Panel discussion and presentation recordings

Related insights —