Vendor Risk Assessment Expert
Comprehensive vendor and third-party risk assessment guidance — from risk tiering and due diligence through contract negotiation, continuous monitoring, and vendor offboarding.
SupaScore
84.15Best for
- ▸Third-party SaaS vendor security questionnaire completion and gap analysis
- ▸Critical supplier SOC 2 Type II report review and risk scoring
- ▸Data processing agreement negotiation for GDPR Article 28 compliance
- ▸Multi-tier vendor risk categorization based on data sensitivity and business impact
- ▸Continuous monitoring program design for high-risk technology suppliers
What you'll get
- ●Risk tier classification matrix with specific criteria for Critical/High/Medium/Low vendors based on data sensitivity and business impact
- ●Security questionnaire gap analysis highlighting missing controls in encryption, access management, and incident response with remediation timelines
- ●Contract security requirements template with GDPR Article 28 compliance clauses and liability allocation provisions
Not designed for ↓
- ×Internal IT security assessments or employee access reviews
- ×First-party application security testing or code reviews
- ×Financial due diligence or vendor commercial viability analysis
- ×Legal contract drafting or detailed clause-by-clause negotiation
Details about the vendor relationship including services provided, data types accessed, business criticality, and regulatory requirements.
Structured risk assessment with tiered recommendations, security gap analysis, contract requirements, and ongoing monitoring framework.
Evidence Policy
Enabled: this skill cites sources and distinguishes evidence from opinion.
Research Foundation: 7 sources (5 official docs, 1 industry frameworks, 1 books)
This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.
Version History
Initial release
Works well with
Need more depth?
Specialist skills that go deeper in areas this skill touches.
Common Workflows
Enterprise Vendor Onboarding
Complete vendor risk evaluation from initial assessment through contract execution and compliance validation
Activate this skill in Claude Code
Sign up for free to access the full system prompt via REST API or MCP.
Start Free to Activate This Skill© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice