Solutions for Audit and Compliance Teams

Key Capabilities

• 

  Maturity Assessment

  Evaluate the health of your third-party program and identify opportunities for improvement by benchmarking it against best practices for comprehensive third-party risk management. Get clear scores for each TPRM objective with supporting milestones.

• 

  Operations Manual

  Ensure a consistent, programmatic approach to TPRM with an operations manual that is customized to reflect your organization’s internal roles, resources, responsibilities and processes.

• 

  Inherent Risk Scoring

  Use a simple assessment with clear scoring to capture, track and quantify inherent risks for all third parties.

• 

  Profiling & Tiering

  Automatically tier suppliers according to their inherent risk scores, set appropriate levels of diligence, and determine the scope and frequency of ongoing assessments.

• 

  Categorization

  Categorize vendors with rule-based logic based on a range of data interaction, financial, regulatory and reputational considerations.

• 

  Risk Assessment Library

  Leverage 200+ standardized assessment templates including GDPR, FCA, PCI-DSS, ISO 27001, CMMC, NIST and Modern Slavery. Use the Prevalent Compliance Framework (PCF) to map results to any compliance regulation or build custom questionnaires with risk and control elements relevant to your business.

• 

  Automated Risk & Compliance Registers

  Automatically generate a risk register for each vendor upon survey completion. View centralized risk profiles in a real-time reporting dashboard and download or export reports to support compliance efforts.

• 

  Virtual Third-Party Risk Advisor

  Leverage a conversational AI trained on billions of events and more than 20 years of experience to deliver expert risk management insights in the context of industry guidelines such as NIST, ISO, SOC 2 and others.

• 

  Breach Event Notification Monitoring

  Access a database containing 10+ years of data breach history for thousands of companies around the world. Includes types and quantities of stolen data; compliance and regulatory issues; and real-time vendor data breach notifications.

• 

  Compliance Report Template Library

  Automatically map information gathered from control-based assessments to ISO 27001, NIST, CMMC, GDPR, CoBiT 5, SSAE 18, SIG, SIG Lite, SOX, NYDFS, and other regulatory frameworks to quickly visualize and address important compliance requirements.

• 

  Workflow

  Built-in discussion tools facilitate communication with suppliers on remediating risk register issues. Capture and audit conversations, records and estimated completion dates; assign tasks based on risks, documents, or entities; and match documentation or evidence against risks.

• 

  Document & Evidence Management

  Collaborate on supporting evidence, documents and certifications, such as NDAs, SLAs, SOWs and contracts, with built-in version control, task assignment and auto-review cadences. Manage all documents throughout the vendor lifecycle in centralized vendor profiles.

• 

  Built-in Remediation Guidance

  Take actionable steps to reduce vendor risk with built-in remediation recommendations and guidance.

• 

  Data & Relationship Mapping

  Identify relationships between your organization and third parties to discover dependencies and visualize information paths.