Solutions for Security & IT Teams

Key Capabilities

• 

  Automated Onboarding

  Import vendors via a spreadsheet template or through an API connection to your existing procurement solution, eliminating error-prone, manual processes.

• 

  Library of Reusable Content

  Rapidly pre-screen vendors using a library of completed risk assessments with inherent/residual risk scores, assessment results and real-time monitoring.

• 

  Inherent Risk Scoring

  Use a simple assessment with clear scoring to capture, track and quantify inherent risks for all third parties.

• 

  Profiling & Tiering

  Automatically tier suppliers according to their inherent risk scores, set appropriate levels of diligence, and determine the scope and frequency of assessments.

• 

  Risk Assessment Library

  Leverage 200+ standardized risk assessment surveys, a custom survey creation wizard, and a questionnaire that maps responses to compliance regulations and frameworks.

• 

  Rapid Incident Response

  Use Prevalent's continuously updated, customizable event and incident management assessment questionnaire to determine the impact of security incidents affecting your vendors.

• 

  Automated Risk & Compliance Registers

  Automatically generate a risk register for each vendor upon survey completion. View centralized risk profiles in a real-time reporting dashboard and download or export reports to support compliance efforts.

• 

  Automated Response Actions

  Act on risks according to their potential business impact with automated risk response playbooks that can be triggered by a library of workflow rules.

• 

  Cyber Threat Intelligence

  Reveal third-party cyber incidents and prioritize vendor assessments with insights from 1,500+ criminal forums; thousands of onion pages, 80+ dark web special access forums; 65+ threat feeds; and 50+ paste sites for leaked credentials — as well as several security communities, code repositories, and vulnerability databases.

• 

  Single Risk Register for Assessments & Monitoring

  Prevalent normalizes, correlates and analyzes information across risk assessments and vendor monitoring. This unified model provides context, quantification, management and remediation support.

• 

  Risk Scoring & Analysis

  Quickly gauge the impact of vendor risks with scores that are adjustable according to your organization’s risk tolerance.

• 

  Virtual Third-Party Risk Advisor

  Leverage a conversational AI trained on billions of events and more than 20 years of experience to deliver expert risk management insights in the context of industry guidelines such as NIST, ISO, SOC 2 and others.

• 

  Breach Event Notification Monitoring

  Access a database containing 10+ years of data breach history for thousands of companies around the world. Includes types and quantities of stolen data; compliance and regulatory issues; and real-time vendor data breach notifications.

• 

  Built-in Remediation Guidance

  Take actionable steps to reduce vendor risk with built-in remediation recommendations and guidance.

• 

  Reporting & Dashboards

  Gain visibility into risk and compliance status, performance metrics, and other data via centralized dashboards; leverage PowerBI or QuickSight integration for custom reporting.

• 

  Machine Learning Reporting & Analytics

  Reveal risk trends, status and exceptions to common behavior for individual vendors or groups with embedded machine learning insights. Quickly identify outliers across assessments, tasks, risks, and other factors that could warrant further investigation.

• 

  Compliance-Specific Reporting

  Automatically map information gathered from control-based assessments to ISO 27001, NIST, CMMC, GDPR, CoBiT 5, SSAE 18, SIG, SIG Lite, SOX, NYDFS, and other regulatory frameworks to quickly visualize and address important compliance requirements.

• 

  Event Reporting

  Enable vendors to submit proactive event assessments – or issue assessments related to data breaches, notifications and other events – and dynamically adjust vendor risk scores based on the results.

• 

  Automated Offboarding

  Leverage customizable offboarding assessment surveys and workflows to track system access, data destruction, access management, compliance controls, and other termination criteria.