Case Study: Norwegian Cruise Line Holdings builds a modern third-party risk program with Mitratech TPRM

Norwegian Cruise Line Holdings builds third-party risk program for 200–250 vendors with Mitratech

Norwegian Cruise Line Holdings (NCLH) faced a challenge in managing third-party risk due to disparate, ad-hoc processes across its IT, Legal, and Supply Chain teams. This lack of a unified program made it difficult to gain visibility into vendor risk exposure. The company partnered with vendor Mitratech and implemented its Third-Party Risk Management (TPRM) platform to build a comprehensive program from the ground up.

The Mitratech solution centralized vendor data, automated onboarding and reassessments, and enabled real-time cyber monitoring. This provided NCLH with a single source of truth, improved cross-department collaboration, and established a scalable risk framework. Within the first year, Mitratech helped NCLH standardize assessments for high-risk IT vendors and lay a foundation for continuous program improvement with planned AI and automation enhancements.

Norwegian Cruise Line Holdings (nclh)

John Kolich

Director | IT Compliance