TPRM

A step-by-step vendor risk management program for SOC 2, ISO 27001 and GDPR: inventory, tiering by data and access, right-sized questionnaires, evidence, contracts and scheduled re-assessment.

You cannot assess every vendor equally. Here is a tiered approach that satisfies auditors without consuming your week.