SWORDFISH SUPPLY CHAIN SECURITY MODULE

Readily available Third Parties’ security questionnaires based on their contract and/or internationally recognized security standards (i.e., ISO 27001 and ISO 27002, Cyber Essentials) and leading practices.

Real-time monitoring of Third Parties’ adherence level to security requirements and tracking of remediation actions.

Map Third Parties to predefined criticality levels. Third Parties are assessed based on Criticality both in terms of Frequency but also in terms of Content and Context.

Identified security issues can be categorized, assigned, scheduled, and monitored. The planning scheme includes remediation actions’ implementation responsible, schedule for implementation, mitigation action, etc.

Reporting capabilities include a standard set of dashboards and reporting grids. Dashboards and Grids can be also customized.

Organize and plan mitigation actions for each identified partial or non-compliance issue.

Follow up mitigation actions and enforce deadlines for each working package.

Third Parties Assessment can be based on Organization’s Policies as reflected in the Policy Management Module.

Benchmarking with peers on regional, international levels based on anonymized data.

Non or partial compliance issues can be categorized, assigned, scheduled, and monitored. The planning scheme includes corrective actions’ implementation responsible, schedule, etc.

Benchmarking with peers on regional, international levels based on anonymized data.