Key Features
- Design a lifecycle-based TPRM program that ties vendor decisions to cyber risk
- Map DORA, NIST C-SCRM, and ISO/IEC 27036 controls to audits and evidence
- Build contract clauses, SBOM requirements, and playbooks for third- and fourth-party breaches
- Includes assessment templates, evidence checklists, and incident playbooks you can adapt
Who this book is for
This book is for cybersecurity leaders, TPRM/VRM practitioners, risk managers, and procurement professionals who need a repeatable way to evaluate and monitor vendors and critical suppliers. Compliance teams and in-house counsel working with DORA, GDPR, HIPAA, and related requirements will also benefit. Basic familiarity with security principles and vendor management helps.