Book a Demo

SWORDFISH SUPPLY
CHAIN SECURITY
MODULE

Supply Chain Security Management Module wishes to operationalize and automate the processes for managing the risk imposed by their third parties (suppliers, service providers, affiliate companies, partners and more), mainly attributed to latter’s partial or poor application of appropriate security measures and controls.
parties assessment

THIRD PARTIES ASSESSMENT

Third Parties can make use of the Supply Chain Security Security Management Module to respond to assessment questionnaires in an easy and intuitive way by using dynamic forms. There is no need to install anything on their premises. Third Parties are automatically notified by e-mail when an assessment task is allocated to them.

CAPABILITIES

Supply Chain Security Management, as part of its core functionality, provides the following capabilities:

  • Readily available Third Parties’ security questionnaires based on their contract and/or internationally recognized security standards (i.e., ISO 27001 and ISO 27002, Cyber Essentials) and leading practices.

  • Real-time monitoring of Third Parties’ adherence level to security requirements and tracking of remediation actions.

  • Map Third Parties to predefined criticality levels. Third Parties are assessed based on Criticality both in terms of Frequency but also in terms of Content and Context.

  • Identified security issues can be categorized, assigned, scheduled, and monitored. The planning scheme includes remediation actions’ implementation responsible, schedule for implementation, mitigation action, etc.

  • Reporting capabilities include a standard set of dashboards and reporting grids. Dashboards and Grids can be also customized.

  • Organize and plan mitigation actions for each identified partial or non-compliance issue.

  • Follow up mitigation actions and enforce deadlines for each working package.

  • Third Parties Assessment can be based on Organization’s Policies as reflected in the Policy Management Module.

  • Benchmarking with peers on regional, international levels based on anonymized data.

  • Non or partial compliance issues can be categorized, assigned, scheduled, and monitored. The planning scheme includes corrective actions’ implementation responsible, schedule, etc.

  • Benchmarking with peers on regional, international levels based on anonymized data.