Automate the identification, analysis and remediation of third-party risks to close security gaps
Personally identifiable information (PII) and protected health information (PHI) represent attractive targets for cyber criminals. It is therefore essential that Chief Privacy Officers (CPOs), data protection officers (DPOs) and risk managers have an accurate view of how third parties are interacting with a company’s data to mitigate the risk of unwanted access.
However, many organizations struggle with manual, spreadsheet-based approaches that complicate everything from identifying where data resides and assessing the potential exposure to a breach, to consistently enforcing policies with third parties and reporting on compliance.
Prevalent automates data discovery, privacy impact assessments, remediation and reporting against identified risks and privacy compliance requirements. With Prevalent, organizations can build a data privacy program that is unified with vendor risk assessments for a complete view of third-party risk.
主要优势
-
Eliminate spreadsheets by automating and centralizing risk identification, analysis, management and remediation
-
Close security gaps by validating point-in-time controls assessments with continuous cyber monitoring insights
-
Make better decisions with machine learning analytics that deliver unparalleled insights into vendor risk trends, security status, and outlier events
-
Knock down silos and gain a unified view of vendor risk by integrating Prevalent TPRM with existing security and GRC tools and frameworks
主要功能
自动化入职流程
通过电子表格模板或API连接现有采购系统导入供应商，从而消除易出错的手动操作流程。
Library of Reusable Content
Rapidly pre-screen vendors using a library of completed risk assessments with inherent/residual risk scores, assessment results and real-time monitoring.
固有风险评分
使用具有明确评分的简单评估来捕捉、跟踪和量化所有第三方的固有风险。
剖析和分层
Automatically tier suppliers according to their inherent risk scores, set appropriate levels of diligence, and determine the scope and frequency of assessments.
风险评估图书馆
利用200多份标准化风险评估调查问卷、自定义调查创建向导，以及将回答映射至合规法规和框架的问卷。
Rapid Incident Response
Use Prevalent’s continuously updated customizable event and incident management assessment questionnaire to determine the impact of security incidents affecting your vendors.
自动化风险与合规登记簿
在完成供应商调查后，自动为每位供应商生成风险登记册。通过实时报告仪表盘查看集中化的风险概况，并下载或导出报告以支持合规工作。
自动响应行动
Act on risks according to their potential business impact with automated risk response playbooks that can be triggered by a library of workflow rules
Cyber Threat Intelligence
Reveal third-party cyber incidents and prioritize vendor assessments with insights from 1,500+ criminal forums; thousands of onion pages, 80+ dark web special access forums; 65+ threat feeds; and 50+ paste sites for leaked credentials — as well as several security communities, code repositories, and vulnerability databases.
Single Risk Register for Assessments & Monitoring
Prevalent normalizes, correlates and analyzes information across risk assessments and vendor monitoring. This unified model provides context, quantification, management and remediation support.
风险评分与分析
Quickly gauge the impact of vendor risks with scores that are adjustable according to your organization’s risk tolerance.
虚拟第三方风险顾问
利用经过数十亿次事件和 20 多年经验训练的对话式人工智能，在 NIST、ISO、SOC 2 等行业准则的背景下提供专业的风险管理见解。
泄漏事件通知监控
访问包含全球数千家公司 10 多年数据泄露历史的数据库。包括被盗数据的类型和数量、合规性和监管问题以及实时供应商数据泄露通知。
内置补救指南
通过内置的补救建议和指导，采取可行措施降低供应商风险。
报告与仪表板
Gain visibility into risk and compliance status, performance metrics, and other data via centralized dashboards; leverage PowerBI or QuickSight integration for custom reporting.
Machine Learning Reporting & Analytics
Reveal risk trends, status and exceptions to common behavior for individual vendors or groups with embedded machine learning insights. Quickly identify outliers across assessments, tasks, risks, and other factors that could warrant further investigation
Compliance-Specific Reporting
自动将基于控制的评估所收集的信息映射至ISO 27001、NIST、CMMC、GDPR、CoBiT 5、SSAE 18、SIG、SIG Lite、SOX、NYDFS等监管框架，快速可视化并处理关键合规要求。
事件报告
允许供应商主动提交事件评估——或针对数据泄露、通知及其他事件发布评估——并根据评估结果动态调整供应商风险评分。
自动化离职流程
Leverage customizable offboarding assessment surveys and workflows to track system access, data destruction, access management, compliance controls, and other termination criteria.
谁受益于普瑞维兰特（
）
来自普瑞维兰特（
）
TPRM解决方案
了解Prevalent如何助力安全、风险
管理、隐私、采购、审计和
法律团队降低其组织中的供应商风险。
相关解决方案
TPRM Jump Start
Build a program to discover and assess third parties in 30 days or less.
Third-Party Incident Response
Quickly discover, score and remediate risks from vendor breaches.
供应商风险监控
Gain continuous insights into vendor risks from more than 550,000 intelligence sources.
