At ICE we understand the complexities of the modern supply chain and shared responsibility model.
We take a risk-based approach to 3rd party assessments and help you select the right vendors and suppliers to assess, assess with appropriate rigor and balance all that against your budget.
How It Works
-
We help select the most critical suppliers and vendors based on their role in your company and the sensitivity of the data they hold for you.
-
We tune one of our assessments to your unique needs ensuring the right level of rigor and effort are applied.
-
We execute our assessments on a schedule that is feasible and manageable for you, us and your vendors
-
We contextualize any gaps or deficiencies against your business and determine the best course of action.
-
We refresh those assessments annually to be sure your vendors and suppliers continually meet their commitment to security
What We Find
Unfortunately, not every vendor and supplier has the highest levels of security.
No matter the situation, we help know what your risk is and what you should do about it. Some typical outcomes for 3rd party risk assessments include:
Good: Vendors / suppliers with good security controls – or acceptable risk and the ability to prove it!
Bad: When a vendor or supplier has a security gap that needs to be addressed – this usually comes with a requirement to demonstrate that they’ve resolved the issue.
Ugly: When a vendor doesn’t have the basic controls in place or the ability to demonstrate and hey are likely putting your company at risk.
Pricing Factors
Assessments are priced based on:
▪ Number of 3rd party vendors/suppliers to assess
▪ Criticality of those 3rd parties
▪ Frequency of assessment
