Third-party risk

Assess every vendor the same way, from onboarding to the final report.

Tier vendors by risk, send the right questionnaire automatically, let vendors answer in their own portal, and close each cycle with a scored report.

Used by

Vendor risk managers, CISOs and your vendors' own teams

In this area

Third-party risk

How a vendor assessment runs

What's included

One register for every vendor, with a repeatable assessment cycle behind it.

Vendor register with risk tiers
The vendor's risk score picks the questionnaire template
A vendor portal for their CISO, responders and contributors
Responders hand single questions to a colleague without giving up the whole task
Clarifications and remediation items tracked to closure
Compliance score and a generated assessment report at the end
Repeat the cycle every year with the history kept

Build questionnaires from questions you already trust.

Catch risky answers without reading every response.

Tag questions by topic, such as encryption
One rule raises a finding for a risky answer in every questionnaire that carries the tag
Your own rules alongside platform rules
Switch any rule on or off

KashiGuard