Third-Party Risk Assessor

Assess the risk a vendor poses

Vendors with access to your data extend your risk to them, and assessing that risk is essential. This tool assesses vendor risk based on the data they access and its type, so you can prioritise which vendors need scrutiny.

Why vendor risk scales with data access

A vendor is a risk to the extent that a breach of them would expose your data, so the risk depends on what data they can access and how sensitive it is. A vendor touching only public information is low risk; one handling your customers’ personal or financial data is high, because their compromise becomes your breach. Assessing vendors on this basis focuses scrutiny where it matters, since you cannot deeply vet every vendor equally. This is a core part of managing third-party risk, one of the most common ways organisations are breached.

A tool, not advice

It runs entirely in your browser, so nothing you enter is uploaded, which matters when the input concerns your own business or security posture.

Related tools

• Incident Impact Calculator — Estimate the cost of a security incident from severity, affected users and downtime hours, with a compliance and trust rating and the response actions each severity level demands.
• Data Breach Cost Estimator — Estimate what a data breach would cost from records exposed, cost per record, days to detect and hours of downtime, split into direct and indirect costs.
• SaaS Risk Heatmap — Pick the SaaS apps your company runs, add your own, and get a heatmap ranking each by data criticality times access scope, with the risk each carries.
• Customer Data Flow Mapper — Visually map how customer data moves through your system.