Prevalent Use Cases

NERC Security Guideline for the Vendor Risk Management Lifecycle

The North American Electric Reliability Corporation (NERC) Security Guideline for the Supply Chain Cyber Se...

NERC CIP Compliance

The North American Electric Reliability Corporation (NERC) critical infrastructure protection (CIP) standar...

Québec Law 25

Review the select provisions in Québec Law 25 that pertain to third-party data protection, and how the Prev...

SEC Cybersecurity Disclosure Requirements

In March 2022 the U.S. Securities and Exchange Commission (SEC) proposed new rules and amendments to enhanc...

NIST SP 800-66 Compliance

National Institute of Standards and Technology (NIST) Special Publication (SP) 800-66 was developed to help...

NIST AI Risk Management Framework

Prevalent can help your organization align its TPRM program with the NIST AI Risk Management Framework to e...

Bribery Act of 2010

The Bribery Act of 2010 is a United Kingdom (UK) law that defines and enforces the crime of bribery to ensu...

TISAX Compliance

Simplify TISAX compliance for cybersecurity supply chain risk management in the automotive industry.

New York DFS NY CRR 500 & Third-Party Risk

23 NY CRR 500 was enacted in response to the alarming growth in data breaches and cyber threats against fin...

Center for Internet Security (CIS) Critical Security Controls Compliance

There are two primary CIS controls related to third-party risk management (TPRM) – Control 15: Service Prov...

FIEC IT Examination Handbook & Third-Party Risk

The goal of the FFIEC IT Examination Handbook is to heighten cybersecurity awareness for the financial indu...

EBA Outsourcing Guidelines Compliance

The EBA Guidelines set out the internal governance arrangements that credit institutions, payment instituti...

NIST SP 800-53r5, NIST SP 800-161r1 and NIST CSF v2.0 Compliance

Both NIST SP 800-53r4, SP 800-161 and CSF v1.1 specify that an organization needs to establish and implemen...

OSFI of Canada Guideline B-13 Compliance

OSFI B-13 is a guideline issued by the Office of the Superintendent of Financial Institutions (OSFI) in Can...

OSFI of Canada Guideline B-10 Compliance

The Canadian Government Office of the Superintendent of Financial Institutions (OSFI) has issued a draft of...

Bank of England Prudential Regulation Authority SS2/21 Compliance

The Bank of England’s Prudential Regulation Authority (PRA) Supervisory Statement SS2/21 sets expectations ...

Singapore Personal Data Protection Act (PDPA) Compliance

The Singapore Personal Data Protection Act (PDPA) includes ten obligations, with the Protection Obligation ...

FFIEC IT Examination Handbook Compliance

The goal of the FFIEC IT Examination Handbook is to heighten cybersecurity awareness for the financial indu...

FCA FG 16/5 Compliance

In July 2018, the FCA released its finalized guidance, FG 16/5 Guidance for firms outsourcing to the ‘cloud...

Executive Order on Improving the Nation’s Cybersecurity

In May 2021, the President of the United States signed the Executive Order on Improving the Nation’s Cybers...

EBA Outsourcing Guidelines Compliance

The EBA Guidelines set out the internal governance arrangements that credit institutions, payment instituti...

CMMC Compliance

The Prevalent Third-Party Risk Management Platform provides a single solution for suppliers and certified t...

Cloud Security Alliance CAIQ

The Cloud Security Alliance (CSA) Consensus Assessments Initiative Questionnaire (CAIQ) was developed as an...

Center for Internet Security (CIS) Critical Security Controls Compliance

There are two primary CIS controls related to third-party risk management (TPRM) – Control 15: Service Prov...

California Transparency in Supply Chains Act

APRA CPS 234 Information Security Compliance

The Australian Prudential Regulation Authority (APRA) implemented the CPS 234 regulatory standard in July 2...

System & Organization Control (SOC) 2 Compliance

SOC 2 is a standard that is designed to provide assurance that an organization's systems are set up to cove...