tprm

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

A complete third-party vendor security risk-assessment framework — questionnaire, live scoring engine, and worked vendor assessments with approve/conditions/reject recommendations. Two-axis inherent×control residual-risk model mapped to NIST 800-161, ISO 27001 & SOC 2.

Open-source AI agent for vendor privacy risk assessment. Scores vendors across 8 GDPR/CCPA dimensions using a published, enforcement-grounded rubric. Works with Claude, GPT-4o, Gemini, Mistral, or fully local with Ollama. Free forever.

A comprehensive third-party risk management framework for a global media streaming platform. Focuses on vendor classification, content security, intellectual property protection, and compliance monitoring, delivering risk maps, due diligence checklists, and strategic recommendations

Top Third Party Risk Exchange 🌟 Star if you like it! 🌟

Claude plugin for Bitsight Security Ratings — a zero-dependency MCP server wrapping the Bitsight REST API as 15 read-only tools, plus 16 skills that turn ratings into board packs, vendor decisions, remediation roadmaps, audit evidence and Indian regulatory incident notifications.

AI-powered TPRM assistant that analyzes SOC2 reports, vendor questionnaires, and security evidence to identify potential cybersecurity risks, governance gaps, and compliance concerns. Generates structured audit-style findings, severity ratings, and actionable recommendations.

Open-source AI-Aware Third-Party Risk Management Toolkit - ISO 27001, EU AI Act, NIS2 DORA aligned

Análise tática de TPRM e GRC em licitações públicas, cruzando a Lei 14.133/21 com o framework NIST SP 800-161. Projeto prático gerado com IA (NotebookLM) | Desafio DIO.

AI-native Third-Party Risk Management platform — automate vendor security questionnaires, evidence review, and continuous monitoring with policy-as-code.

Multi-agent third-party risk review on Google Gemini 2.5 Flash — vendor onboarding & M&A due-diligence in under 90 seconds. lablab.ai Transforming Enterprise Through AI submission (Track 2).

AI-driven TPRM agent for banks, assessing ICT vendor reliability through financial insights to enhance Operational Resilience.

TPRM portfolio focused on US privacy & cloud vendor risk: minimization, retention/deletion, DSAR readiness, subprocessors, evidence-backed decisions.

Cybersecurity Risk & GRC Analyst | IT Risk | TPRM | Security Compliance | IAM | ISO 27001 | NIST CSF | SOC 2 | ServiceNow | Splunk | PMP

Open-source security questionnaire & RFP auto-responder. Drafts answers grounded in your own security profile and flags gaps instead of inventing certifications. BYOK with the Anthropic Claude API - no data stored server-side.

Offline assessment workbook and open control catalog for the Central Bank of Kuwait Cyber and Operational Resilience Framework (CORF)

IT Compliance Framework for Manufacturing: GDPR/CCPA, Annual IT & OT Audit, TPRM (Third-Party Risk Management) — templates, checklists, and methodology

Documenting my transition from academia/DevOps into GRC — risk assessment, TPRM, and ISO frameworks, building toward Enterprise Risk Management in Germany.

Third-Party Vendor Risk Assessment project demonstrating TPRM lifecycle including vendor risk scoring, SOC 2 review, due diligence, and remediation planning.

Central index for my US-grade GRC, Security Assurance, and TPRM portfolios. Features audit-ready documentation, cross-framework mappings, and evidence-driven vendor risk management.