Your resilience is only as strong as your supply chain. We help you build a proportionate third-party risk programme: tiering suppliers by criticality, assessing them consistently, and monitoring the ones that matter most.
We design the process, the questionnaires, and the governance — and can run assessments for you — so that supplier risk is a managed, evidenced part of your operating model rather than a once-a-year scramble.
What's included
- Supplier tiering and inherent-risk model
- Assessment questionnaires and review workflow
- Contractual and exit-risk guidance
- Ongoing monitoring and reporting design
Outcomes
- A defensible view of supply-chain exposure
- Consistent, proportionate supplier assurance
- Evidence ready for auditors and regulators
Frameworks & standards
ISO 27001
DORA
NIST CSF