Skip to content

Vendors and third parties

6 skills in this category.

Customer security questionnaire answersUse this skill when a customer or prospect has sent a security questionnaire, due diligence form or vendor assessment and someone asks "answer this security questionnaire", "fill in the customer's…Vendors and third partiesGeneral, SOC 2, ISO 27001, GDPRTristan Roth
Data processing agreement security annex reviewUse this skill when a data processing agreement is being negotiated or renewed and someone asks "review the TOMs annex", "check the security measures in this DPA", "can we sign this annex", "the…Vendors and third partiesGDPRTristan Roth
ICT third-party registerUse this skill when a financial entity in scope of DORA needs to build or refresh its register of ICT third-party arrangements, and someone asks "build our register of information", "list our ICT…Vendors and third partiesDORATristan Roth
Subprocessor register updateUse this skill when the company acts as a processor for its customers and someone asks "update our subprocessor list", "are we missing subprocessors", "we added a new tool, do we need to tell…Vendors and third partiesGDPR, ISO 27701Tristan Roth
Vendor security questionnaire triageUse this skill when a supplier has returned a security questionnaire, assurance report, certificate or trust pack and someone asks "review this vendor's answers", "is this supplier safe to use"…Vendors and third partiesGeneral, ISO 27001, SOC 2, GDPRTristan Roth
Vendor tieringUse this skill when a company needs to decide how much assessment each supplier deserves, or asks "tier our vendors", "which suppliers are critical", "we have 200 vendors and cannot assess them all"…Vendors and third partiesGeneral, ISO 27001, SOC 2, DORA, NIS 2Tristan Roth