Third Party Risk Management (TPRM) Assessment

Name (full name).

Email address

Third Party Risk Management is the process of assessing and controlling reputational, financial and legal risks posed by parties outside our organisation.

• True

• False

The objective of the TPRM eLearning module is to provide awareness and training to PETRONAS Group, as part of the TPRM programme (in relation to the Five Critical Legal Areas), the relevant tools, for embedment/integration to relevant business processes which are the Due Diligence Screening Tools and the Compliance Clauses.

• False

• True

Which one of the following is NOT considered as our third party?

• Contractors

• Vendors

• Consultants

• Departments/Business Units

The following are among the 5 Critical Legal Areas EXCEPT _______________.

• Sanction

• Data Privacy

• Intellectual Property

• Competition

The 5 Critical Legal Areas have been identified as legal areas that pose enterprise risk to PETRONAS Group. These laws have extra-territorial effect that could result in the following options, EXCEPT _________ .

• High civil penalties

• Criminal penalties to the enterprise, senior management, and/or individual employees

• Technical interruptions in the plant's operation

• Severe reputational impact to the enterprise

“Section 17A(1) of the MACC Act has introduced new law on corporate liability offence that a commercial organisation commits an offence if a person associated with it corruptly gives, agrees to give, promises or offers any gratification to any person with an intent to obtain or to retain business or a business advantage for the said commercial organisation.”

• False

• True

This information from the TPRM due diligence would enable the team to anticipate that there is a risk of the investigation being extended to the company if the company proceeds to deal with this third party.

• False

• True

KYC Self-Declaration Questionnaire is to be conducted on new counterparty as in-house due diligence before concluding a transaction and not necessarily have a periodical due diligence.

• True

• False