Products
PostureRiskComplianceRegulatoryThird-PartyAI GovernanceOne Vigil Platform
Solutions
For CISOs & Security LeadersFor vCISO PracticesFor Cyber Insurance BrokersFor IT & GRC ConsultanciesFor Regulated Industries
Company
PricingResourcesAboutContact
Request a DemoStart Free Trial
Vendor & Third-Party Risk

Third-Party

Know your vendors' risk before it becomes your risk.

The Third-Party module gives you a structured, NIST 800-161 C-SCRM–aligned vendor registry with tiered risk scoring, automated questionnaire workflows, continuous monitoring, and DORA ICT third-party reporting.

Start Free TrialRequest a Demo
app.vigilgrc.com/third-party
VENDOR RISK REGISTRY — NIST 800-161 C-SCRM
43 vendors tracked · 5 critical suppliers
VendorTierScoreStatus
Salesforce CRMTier 186Compliant
AWS InfrastructureTier 191Compliant
Legacy HR SystemTier 243At Risk
Email Marketing CoTier 367Review Due
Payroll ProcessorTier 178In Review
The Problem

Most vendor risk programs are spreadsheets with stale questionnaire responses. The Third-Party module replaces them with a live, scored vendor registry that automatically detects when a supplier's risk posture changes — before it's a headline.

Capabilities

Everything you need to manage Third-Party at scale.

🔗
NIST 800-161 C-SCRM
Build a supply chain risk management program aligned to NIST SP 800-161 with tiered vendor classification and continuous scoring.
📊
Tiered Vendor Risk Scoring
Automatically score vendors as Tier 1 (critical), Tier 2 (important), or Tier 3 (standard) based on access level and data classification.
🇪🇺
DORA ICT Third-Party Register
Maintain the required DORA ICT third-party service provider register and generate regulatory reports in one click.
📋
SIG Lite / CAIQ Questionnaires
Send, track, and score standardized security questionnaires. Receive responses directly in the platform.
📡
Vendor Security Scoring
Score vendors from questionnaires, evidence, and assessment history — maintained in the platform, no external ratings feed required.
🗺️
Supply Chain Exposure Map
Visualize your entire supply chain — nth-party suppliers included — as an interactive risk map.
How It Works

Up and running in 30 minutes.

Step 1
Import your vendor list
Upload your vendor list from a spreadsheet or connect to your procurement system. Vendors are auto-tiered.
Step 2
Score and monitor
Send questionnaires, review responses and evidence, and track vendor posture through scheduled reassessments.
Step 3
Report to the board
Generate DORA ICT register reports, supply chain risk summaries, and vendor risk trending in one click.
Framework Coverage
NIST SP 800-161NIST CSF 2.0 GV.SCDORA ICT Third-Party RiskISO 27036SOC 2 Vendor ManagementFedRAMP Supply Chain
Pricing

Simple, transparent pricing.

Connect
$2,999/month

The Third-Party module is included in this plan. All six modules

✓All six modules — incl. Regulatory, Third-Party & AI Governance
✓Everything in Launch
✓119-pack regulatory catalog
✓FAIR-based quantitative risk analysis
✓NIST AI RMF & NIST AI 600-1 governance packs
✓Evidence vault & signed decision ledger
✓Priority support
Request a Demo
Growth
$4,499/month

The Third-Party module is included in this plan. All six modules + priority support & enterprise governance controls

✓Everything in Connect
✓MFA enforcement (AAL2) & role-based access control
✓Signed decision ledger & audit-ready reporting
✓Priority support
✓Dedicated Customer Success Manager
✓Quarterly business review
✓Custom framework mapping available
Request a Demo

See Third-Party in action.

Book a 30-minute demo. We'll show you exactly how your organization would use Third-Party — configured to your industry and frameworks.

Book a DemoStart Free Trial