Consulting: Vendor Cyber Risk Management

Managing third-party risk is a critical component of any modern cybersecurity or compliance program. As part of this service, I will guide you through the full lifecycle of a vendor cyber risk assessment—from initial scoping to risk closure.

Whether you're onboarding a new vendor, re-evaluating an existing one, or preparing for audits like SOC2, ISO 27001, or GDPR, I’ll first understand your vendor’s use case to determine the right type and depth of assessment. Based on this, I can help you frame or customise a cyber risk questionnaire aligned to your business or compliance needs.

Once responses are received, I will support you in analyzing them, identifying potential gaps or risks, and providing guidance on mitigation strategies. If findings are generated, I can help track, document, and drive them to closure with the vendor—ensuring a clean audit trail and effective risk management.

With my experience in GRC and working with over 800+ findings across audits, I ensure each engagement is efficient, practical, and audit-ready.

Let’s make your third-party ecosystem more secure—one assessment at a time.