ProcessUnity Global Risk Exchange (GRX) risk assessments apply a dynamic and comprehensive approach to risk assessment analysis, replacing outdated static spreadsheets as well as the need to repetitively complete or request assessments each year. Our assessments integrate advanced analytics, threat intelligence, and sophisticated risk models, based on known breach kill chains, with the vendors responses, to provide an in-depth view of how a vendor’s security controls will protect against potential threats.
The assessments feature five control groups (Strategic, Operations, Core, Management and Privacy), that include controls and sub-controls based on the following frameworks: FFIEC, ISO 27001, NIST 800-53, NIST 800- 171, NY-DFS, PCI DSS, SOC, etc. Because the assessment data lives on the GRX Exchange, Third Parties only have to complete it once and simply update the information as they implement new security measures or practices.
Comments
0 comments
Please sign in to leave a comment.