Third-Party Risk Management
Managing the risk of vendors and supply chains.
INCLUDED IN:
Operational Phase
01
Vendor Categorization
Grouping vendors by risk (Critical vs Low Risk).
02
Due Diligence
Reviewing SOC2 reports and SIG questionnaires.
03
Continuous Monitoring
Watching for vendor breaches using threat intel.
04
Offboarding
Ensuring data is destroyed when contracts end.