tprm-scorer

Vendor risk scoring computes inherent and residual risk scores by evaluating supplier profiles. It generates baseline scores, assigns Critical/High/Medium/Low ratings, and recommends mitigations to reduce blind spots during supplier onboarding and continuous monitoring.

Peer comparison benchmarks vendors within the same category to identify supplier risk outliers. This trend analysis approach highlights deviations in risk ratings across suppliers, enabling targeted continuous monitoring and consistent vendor risk assessment.

You need baseline risk scoring during supplier onboarding to establish initial inherent and residual risk profiles. Generating a baseline score with recommended mitigations ensures structured vendor selection and prevents blind spots in continuous vendor monitoring workflows.

Yes, vendor risk ratings apply to continuous monitoring across industries. The scoring mechanism calculates inherent and residual risks universally, supporting trend analysis and rating assignment regardless of the specific supplier category or sector.

Inherent risk scores evaluate a vendor's baseline threat level before controls, while residual risk scores measure the remaining risk after mitigations. Both are calculated to assign risk ratings and drive actionable recommendations during continuous monitoring.