Meet legal and regulatory requirements The risk-based TPG Framework includes (a) enterprise-wide policies, (b) management and Second-Line oversight, (c) prescribed procedures for the third-party engagement life cycle, (d) defined business roles and responsibilities, (e) centralized third-party governance and third-party management functions, (f) common third-party relationship inventory platform/system of record, (g) reporting capabilities, and (h) communications and training.