Third Party Risk Management

For more than 130 years we’ve been finding new and innovative ways to provide clean, reliable energy to power people’s lives.

To help strengthen Portland General Electric’s relationship with our suppliers, manage risk and ensure compliance with mandated laws and regulations PGE has a Third Party Risk Management Program to help us manage supplier health and safety pre-qualification properly, collect critical data, and improve standards across our supply chain. Suppliers doing work deemed high-risk are required to comply with the TPRM program requirements.

The TPRM program requirements vary depending upon the risk(s) that apply to a given supplier, and we may seek additional information and insight from you in one or more of the following areas:

  • Cyber security information, practices, and posture

  • Safety statistics, safety culture practices and procedures

  • Financial performance and solvency

  • Regulatory requirements, including FERC/NERC Standards

  • Material quality standards and practices

  • Environmental performance and impacts

  • Social, judicial and market findings

  • Business continuity and disaster recovery practices