USUnited States
US Interagency TPRM
US interagency third-party risk management guidance
Outsourcing GuidanceThird-Party Risk
Regulatory intelligence
A practical GRC library for regulated teams.
Explore vendor risk, outsourcing, privacy, cybersecurity, operational resilience, and AI governance requirements across major global regulations. Each page explains what applies, what evidence is expected, and how Halbarad helps operationalize the work.
46
Global regulations
8
Regions covered
7
Risk themes
Workflow
Turn regulatory obligations into operating work.
01
Identify ApplicableRegulations
02
Gather RegulatoryRequirements
03
Map ApplicableControls
04
Discover4th to nth-party Dependencies
05
Collect DDQs / DocumentsEvidence
06
AssessVendors (AI + Evidence)
07
MonitorEmerging Risks
08
ReportFindings, Alerts & Decisions
09
RemediateGaps (Track & Resolve)
Explore catalog
Global vendor risk regulations
Search across jurisdictions, risk themes, industries, and regulation types. Results are organized by region so each guide is easy to scan before opening.
Browse By
Jurisdictions
Risk Themes
United States
7 regulations
USUnited States
FFIEC Outsourcing & TSPs
FFIEC outsourcing and technology service provider expectations
ICT & Technology RiskICT Risk
USUnited States
NYDFS 23 NYCRR 500
NYDFS 23 NYCRR 500 cybersecurity requirements
ICT & Technology RiskICT Risk
USUnited States
SEC Regulation S-P
SEC Regulation S-P
Privacy & Data ProtectionPrivacy
USUnited States
GLBA Safeguards Rule
GLBA Safeguards Rule
Privacy & Data ProtectionPrivacy
USUnited States
HIPAA Business Associates
HIPAA business associate oversight
Privacy & Data ProtectionPrivacy
USUnited States
CISA Supply Chain Risk
CISA supply chain risk management
AI Governance
Canada
5 regulations
CACanada
OSFI B-10
OSFI B-10 third-party risk management
Outsourcing GuidanceThird-Party Risk
CACanada
OSFI B-13
OSFI B-13 technology and cyber risk management
ICT & Technology RiskICT Risk
CACanada
OSFI E-21
OSFI E-21 operational risk and resilience
Operational Resilience
CACanada
PIPEDA Vendor Privacy
PIPEDA third-party vendor privacy
Privacy & Data ProtectionPrivacy
CACanada
Critical Cyber Systems
Canadian critical cyber systems protection
ICT & Technology RiskICT Risk
UK / EU
8 regulations
EUUK / EU
PRA SS2/21
PRA SS2/21 outsourcing and third-party risk management
Outsourcing GuidanceThird-Party Risk
EUUK / EU
FCA Outsourcing
FCA outsourcing and operational resilience
Operational Resilience
EUUK / EU
UK Critical Third Parties
UK critical third parties regime
Outsourcing GuidanceThird-Party Risk
EUUK / EU
EU DORA ICT TPRM
EU DORA ICT third-party risk
ICT & Technology RiskICT Risk
EUUK / EU
EBA Outsourcing
EBA outsourcing guidelines
Outsourcing GuidanceThird-Party Risk
EUUK / EU
GDPR Processor Risk
GDPR processor risk management
Privacy & Data ProtectionPrivacy
EUUK / EU
NIS2 Supply Chain Security
NIS2 supply chain security
AI Governance
EUUK / EU
EU AI Act Third-Party AI
EU AI Act third-party AI risk
AI Governance
UAE / ADGM / CBUAE
4 regulations
UAEUAE / ADGM / CBUAE
CBUAE TPRM
CBUAE outsourcing and third-party risk
Outsourcing GuidanceThird-Party Risk
UAEUAE / ADGM / CBUAE
DFSA Outsourcing Risk
DFSA outsourcing risk management
Outsourcing GuidanceThird-Party Risk
UAEUAE / ADGM / CBUAE
ADGM Outsourcing Risk
ADGM outsourcing risk management
Outsourcing GuidanceThird-Party Risk
UAEUAE / ADGM / CBUAE
UAE PDPL Processing
UAE PDPL third-party data processing
Privacy & Data ProtectionPrivacy
Saudi Arabia
4 regulations
SASaudi Arabia
SAMA Outsourcing Rules
SAMA outsourcing rules
Outsourcing GuidanceThird-Party Risk
SASaudi Arabia
SAMA Cyber Security
SAMA Cyber Security Framework
ICT & Technology RiskICT Risk
SASaudi Arabia
Saudi NCA ECC
Saudi NCA Essential Cybersecurity Controls
ICT & Technology RiskICT Risk
SASaudi Arabia
Saudi PDPL Processing
Saudi PDPL third-party processing
Privacy & Data ProtectionPrivacy
Singapore
5 regulations
SGSingapore
MAS TPRM
MAS third-party risk management
Outsourcing GuidanceThird-Party Risk
SGSingapore
MAS Outsourcing
MAS outsourcing guidelines
Outsourcing GuidanceThird-Party Risk
SGSingapore
MAS Technology Risk
MAS technology risk management
ICT & Technology RiskICT Risk
SGSingapore
PDPA Processing
Singapore PDPA third-party data processing
Outsourcing GuidanceThird-Party Risk
SGSingapore
Critical Information Infrastructure
Singapore critical information infrastructure
Outsourcing GuidanceThird-Party Risk
India
6 regulations
INIndia
RBI IT Outsourcing
RBI IT outsourcing directions
Outsourcing GuidanceThird-Party Risk
INIndia
RBI Financial Services Outsourcing
RBI outsourcing of financial services
Outsourcing GuidanceThird-Party Risk
INIndia
RBI Cyber Security
RBI cyber security framework for banks
ICT & Technology RiskICT Risk
INIndia
India DPDP Processors
India DPDP Act third-party processors
Privacy & Data ProtectionPrivacy
INIndia
SEBI Cyber Resilience
SEBI cybersecurity and cyber resilience
ICT & Technology RiskICT Risk
INIndia
IRDAI Outsourcing
IRDAI outsourcing for insurance
AI Governance
APAC
7 regulations
APACAPAC
APRA CPS 230
APRA CPS 230 operational risk management
Operational Resilience
APACAPAC
HKMA SA-2 Outsourcing
HKMA SA-2 outsourcing
Outsourcing GuidanceThird-Party Risk
APACAPAC
HKMA TM-G-1 Technology Risk
HKMA TM-G-1 technology risk management
ICT & Technology RiskICT Risk
APACAPAC
Japan FSA Outsourcing
Japan FSA outsourcing supervision
Outsourcing GuidanceThird-Party Risk
APACAPAC
Korea Electronic Financial Rules
South Korea electronic financial supervisory regulations
ICT & Technology RiskICT Risk
APACAPAC
Indonesia OJK IT Risk
Indonesia OJK IT risk management
Outsourcing GuidanceThird-Party Risk
APACAPAC
Philippines BSP Outsourcing
Philippines BSP outsourcing and IT risk
Outsourcing GuidanceThird-Party Risk