-
Data Privacy
-
Security Testing
-
Information Security Governance
-
Sensitive Data Security
-
Resiliency
-
Business Continuity
Data Privacy
We conduct an in-depth review of your vendor or supplier's data privacy practices, covering breach notifications, privacy notices, data requests, consent, and sharing with fourth parties, ensuring alignment with industry guidelines, frameworks, standards and laws.
Security Testing
We administer a review to provide you with insights into your vendor or supplier’s penetration testing, vulnerability scanning, and social engineering exercises carried out on their systems and personnel.
Information Security Governance
Our assessment on information security governance provides a clear view of whether the vendor or supplier has formal programs, policies and industry standard practices in place, such as whether they have an information security policy, have a designated CISO, conduct background checks and more.
Sensitive Data Security
We evaluate the security practices employed by your vendors or suppliers to protect sensitive data that is stored and processed. Our assessment covers encryption, secure device configuration, incident detection and response, as well as their application security.
Resiliency
We assess the ability of your vendor or supplier to withstand virtual and physical potentially business-impacting events, including reviewing controls ranging from data backups to on-site generators to better understand the potential for uninterrupted continuation of your business operations, even in challenging situations.
Business Continuity
We determine your vendor or supplier's capacity to provide services during unexpected business disruptions, and their ability to resume normal operations, including Recovery Time Objective and Recovery Point Objective. We also verify that they have documented business continuity and disaster recovery plans in place.
At a glance, you'll know if there are any key risks posed to your organization's operations, assets and customers relating to information security governance, security testing, sensitive data security, business continuity, resiliency and data privacy.
Get insights aligned to important data protection regulations like GDPR, VCDPA, CPRA, to determine if your vendor has you in or out of compliance with data privacy laws.
