Vendor Risk Assessment
What is Vendor Risk Assessment?
A formal evaluation of the risks associated with using a specific third-party vendor, including security, compliance, operational, and reputational considerations.
Frameworks that govern vendor risk assessment
What the standards actually require on vendor risk assessment
Requirements naming vendor risk assessment across 2 standards, quoted from the control text.
For IT and cyber third-party arrangements outside the Outsourcing Directions (paragraphs 126 to 135), the bank runs a vendor risk assessment with controls proportionate to risk and materiality to mitigate concentration risk, eliminate or manage conflicts of in...
rbi-cybersecurity-framework-for-banks::126 · Para 126: vendor risk assessment and proportionate controls →Manage supply chain risk for DER components, including vendor risk assessments, contract requirements, and ongoing monitoring of vendor security postures.
DER-GV-02 · Supply Chain Risk Management for DER →Questions people ask about vendor risk assessment
What is Vendor Risk Assessment?
Why is Vendor Risk Assessment important for compliance?
Which compliance frameworks address Vendor Risk Assessment?
Where can I learn more about Vendor Risk Assessment?
See how Vendor Risk Assessment applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.