Extended

Third-Party Risk Management Policy

Description

Advanced policy for managing third-party, fourth-party, and supply chain cybersecurity risks through vendor classification, due diligence, continuous monitoring, and contractual controls. Includes 2025/2026 requirements for DORA ICT third-party risk, software supply chain security (SBOM/SLSA), AI/ML vendor assessment, and geopolitical risk management.

What's Included

  • Vendor risk classification matrix
  • Due diligence questionnaire templates (SIG Lite, Core, Full)
  • Vendor risk scorecard and rating methodology
  • Contract security addendum template
  • Fourth-party risk assessment guide
  • Continuous monitoring checklist
  • Vendor exit and transition playbook
  • AI/ML vendor assessment framework
  • SBOM and software supply chain checklist
  • In-app viewing with copy to clipboard
  • Export to Markdown, JSON, or Word Doc
  • Fully customizable for your organization
  • Instant access - no waiting
  • Lifetime access to your purchase
  • 26 pages of comprehensive content

Who This Is For

Target Audience

  • All organizations with vendors
  • Procurement teams
  • Security teams
  • Compliance officers
  • Legal teams

Instant Access & Export

View in-app • Copy to clipboard

MarkdownJSONWord Doc

Version Info

Version 2.0Updated 12/31/2025

Price

$99.00

Bundle Discount Applied

✓ Instant Library Access

✓ Export to MD / JSON / Word

✓ Track Implementation Status

Third-Party Risk Management Policy | CyberPolicy.shop | CyberPolicy.shop