ThirdPartyTrust’s TPRM solution for enterprises and third party vendors relies on seamless integration between organizations, suppliers, and–of course–data providers. One of our longest-running partners is BitSight, whose continuous monitoring and threat intelligence data is integrated into our platform to provide the most robust dataset on the market for making vendor risk decisions. Combining BitSight’s data and 3PT’s best in class workflow management/automation functionality results in the best end to end toolset for assessing any third-party’s security posture.
As part of BitSight’s continual optimization of their offerings, we are pleased to announce the integration of BitSight Assessment Accelerator into our TPRM platform.
BitSight Assessment Accelerator seamlessly integrates BitSight’s Security Ratings and Risk Vectors into ThirdPartyTrust’s TPRM platform to improve the effectiveness of third-party cybersecurity risk assessments. The combination of BitSight cybersecurity data integrated into the ThirdPartyTrust TPRM platform improves vendor risk assurance with security-driven workflows and executive reporting.
As a result, vendor risk managers are able to leverage objective cybersecurity ratings and risk vector data to add context to inherent risk tiers for more improved vendor selection and assessments. BitSight Security Ratings and Risk Vectors are automatically mapped to standard assessment questionnaire formats for faster correlation and validation of a vendor’s cybersecurity posture.
The combination of BitSight cybersecurity data integrated into vendor risk management platforms improves vendor risk assurance with security-driven workflows and executive reporting.
Specifically, customers using Assessment Accelerator through ThirdPartyTrust TPRM can expect to:
- Prioritize risk assessment by tiering third parties – BitSight Security Ratings and Rating Categories are used within TPRM platforms to prioritize third parties within tiers. In addition, BitSight Security Ratings and Rating Categories can be used to add an objective layer of insight and context in conjunction with other factors, like inherent risk based on the business relationship, to better optimize third-party tiering.
- Optimize the level of risk assessment required – BitSight Security Ratings, Rating Categories, and Risk Vectors are used to create rule-based logic within TPRM platforms to automate the determination of the type of assessment and depth of the assessment the third-party will receive during onboarding and reassessment.
- Improve validation of questionnaire responses – BitSight Security Ratings, Rating Categories, Risk Vectors and Questionnaire Mappings are used by TPRM platforms to validate third-party questionnaire responses and flag discrepancies and problem areas.
- Leverage up-to-date cyber risk data – Security Rating data is updated daily for selected vendors, while risk vector and questionnaire mapping data is pulled on demand
