VRM PROGRAM EVALUATION (OUTSIDE ASSESSMENT)
Assess your existing VRM environment helping to identify gaps and blind spots in your existing end-to-end VRM program. Key focus areas include:
- Strategic Vision
- Tactical Execution
- Controls Framework Analysis
- Continuous Monitoring Life Cycle
- Remediation Strategy
- Remediation Strategy
- VRM Contract Review (specific to security language/addendum)
- Metrics and Reporting
- Inherent Risk Modeling
ONSITE ASSESSMENT REPRESENTATIVE
Coordinate and facilitate onsite assessments for critical vendors providing highly qualified and industry experienced VRM consultants with SME expertise across all security domains.
- Onsite assessments generally yield greater transparency
- Increased likely hood that the supplier will share tangible evidence beyond attestation
- Generally, concludes in an expedited fashion as our consultants have executed hundreds of very complex 3rd party assessments
Staff Augmentation
Supplement your VRM Program
- Incorporate out risk-based approach to streamline and assess your low to medium risk vendors
- Perform VRM periodic program health checks (monthly or quarterly)
- Outsource remediation/issue management to RiskVersity
- Engage RiskVersity to liaise between your business and your outside auditor
SUPPLIER RISKS
Evaluate the potential impact of a supplier on an organization based on the supplier risk profile.
- Insurance program review
- Contract and policy review
- Business risk strategy
- Continuity and disaster plan
- Supplier performance and financial risk
CERTIFICATE OF INSURANCE MANAGEMENT
Manage the vendor tracking and other 3rd Party insurance programs.
- Contractors & Subcontractors
- Vendors
- Suppliers