Third-Party Risk Networks

Key Features

• 

  Standards-Based Assessment Library

  Access over 10,000 completed and verified assessments and supporting evidence. All vendor profiles are based on assessments from SIG-Core, SIG-Lite or H-ISAC. Vendors are reassessed annually or upon your request.

• 

  Search and Request Assessments

  Search for a specific vendor in the network to access assessment, cyber, business and financial data. Request assessments with a single click.

• 

  Risk Score Previews

  Screen vendors during RFx processes with risk score previews based on inherent/residual risk, internal assessment results, and external monitoring reports.

• 

  Contact Onboarding

  Identify potential points of contact; send templated email communications to enroll the user or identify alternatives; and onboard the user as the primary responder.

• 

  Outsourced Due Diligence

  Save time and money by letting Prevalent experts handle everything from conducting assessments and following up with vendors, to reviewing responses and evidence for accuracy and relevance.

• 

  Snapshot Event Triage

  Conduct an initial point-in-time review of business, reputational, or data breach events identified by Prevalent Vendor Threat Monitor; analyze them to identify false positives and noteworthy events; and adjust risk scores to reflect criticality.

• 

  Workflow and Task Management

  Streamline vendor communications and speed remediation efforts by capturing and auditing conversations, assigning tasks, and tracking progress.

• 

  Automation Playbooks

  Efficiently coordinate internal and vendor teams with pre-built playbooks that automate a broad range of onboarding, assessment and review tasks.

• 

  Machine Learning Analytics and Reporting

  Leverage machine learning analytics to correlate hard-to-track metrics and provide insight into the riskiest vendors, controls and trends.

• 

  Compliance Mapping

  Prevalent automatically maps assessment responses to specific regulatory and industry framework requirements, enabling you to quickly verify compliance or justify remediation efforts.

• 

  Remediation Guidance

  Get clear and actionable recommendations for addressing risks identified during assessments. Track and report on issue resolution over time.

• 

  Issue Supplementary or Proactive Assessments

  Issue additional assessments for fourth-party mapping, certifications, and business profiling. Vendors can also proactively report important events.

• 

  Relationship Mapping

  Leverage passively identified fourth-party technologies to identify and create relationships among third parties.

• 

  Continuous Cyber, Business & Financial Insights

  Transform point-in-time vendor assessments into dynamic intelligence profiles with continuous insights from cyber, business and financial monitoring events.