Complete Vendor Information Security Review

We bring together all of our skills in vendor risk management, vendor evaluation, COBIT 5, COSO 2013, NIST, FFIEC Cybersecurity Assessment Tool, credit union, and bank information security and business continuity PLUS our comprehensive vendor knowledge in our VendorVault™ to provide a complete information security review either before you contract with a new critical vendor or as part of your ongoing vendor management monitoring program.

We gather all relevant documents including vendor information security policies, examination reports including the vendor Report of Examination (ROE) , insurance, etc. and review for appropriate security, availability, recovery, confidentiality, privacy, incident response and breach management,  4th party risk, compliance risk, reputation risk, and strategic risk. We also include our vendor financial risk review, vendor SSAE 16 review, vendor business continuity plan, test results review, and vendor contract risk review. We summarize our findings and recommendations, create an examiner-friendly report, and present it to your IT Steering Committee, Vendor Management Team, Risk Committee, executive team, or Board.

Key Features:

• Review can be conducted as part of your internal new vendor evaluation process, our vendor evaluation project, or your ongoing vendor risk management program
• Prepared by our vendor management experts including both CISSPs and former bank examiners, CIOs, and Information Security Officers
• Includes recommendations to reduce your vendor risk exposure
• Above and beyond. We can help you mitigate identified vendor risks through contract negotiation, business continuity, or other means.
• Examiner-approved. Our vendor risk review, scoring process, and risk scorecards have been approved by every regulatory agency.

So, What Makes Us Different?