This message was posted by a user wishing to remain anonymous
Hello! We are beginning the process of reviewing vendors who perform risk assessments as a stand-alone service. We are not looking to move to a new vendor management system at this time, but are looking for vendors who can provide complete and compliant risk assessments, perhaps from a library of common vendors, or as a stand alone.
Does anyone have any recommendations or experience with such firms? The security piece is important and we are considering firms like SecurityScorecard as well as more wholistic reviews. I haven't done any demos yet- looking for recommendations and experience from the group if you have any to share.