VR-1
Vendor risk assessments
In reviewOrg
Third-party vendors are assessed for security and data-handling risk before onboarding and annually thereafter.
Remediation in progress
A fix is open for Vendor risk assessments. A credentialed expert co-signs it before it counts as passing.
Framework requirements (2)
SOC 2SOC2-CC9.2In review
ISO 27001ISO-A.5.19In review
Evidence (2)
▤vr-1-evidence-1.pdfcollected yesterday
▤vr-1-evidence-2.pdfcollected yesterday