Case study
Third-Party Vendor Risk Assessment
Portfolio case study using fictional data. Not an employer record and makes no claims about employer outcomes.
Business challenge
Vendor onboarding lacks risk-based tiering and consistent due diligence.
Scope
Onboarding through monitoring.
Approach
Automated classification, tiered questionnaires, SOC 2 review, reviewer & approval routing.
Technology
TPRM lab
Frameworks
SOC 2, GLBA (summary)
Deliverables
Vendor inventory, risk scores
Evidence
Interactive lab records, automation execution logs and downloadable PDF/CSV reports generated in the related lab.