tprm-scorer

Calculate vendor risk scores from inherent and residual risk factors.

1|Updated Apr 25, 2026
One-click install
npx skills add https://github.com/rifh2000/claude-grc-engineering. --skill tprm-scorer-rifh2000
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tprm-scorer
Source: https://github.com/rifh2000/claude-grc-engineering./tree/main/plugins/grc-tprm/skills/tprm-scorer
Command: npx skills add https://github.com/rifh2000/claude-grc-engineering. --skill tprm-scorer-rifh2000

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Calculates and manages vendor risk scores using inherent and residual risk factors to provide clear risk ratings, trend insights, and actionable treatment recommendations.

Core Features & Use Cases

  • Risk Scoring: Calculate inherent and residual risk
  • Rating Assignment: Assign risk ratings (Critical/High/Medium/Low)
  • Trend Analysis: Track risk score changes over time
  • Peer Comparison: Compare vendors in same category
  • Use Case: Generate quarterly risk reports and remediation plans across a vendor portfolio.

Quick Start

Provide your vendor risk data and run the tprm-scorer to generate scores, ratings, and recommended mitigations.

Frequently Asked Questions about tprm-scorer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I calculate vendor risk scores using inherent and residual risk factors?

Vendor risk scoring calculates inherent and residual risk factors to produce actionable risk ratings. This approach evaluates supplier vulnerabilities and existing controls to generate a quantified score for ongoing vendor risk management.

What is the best way to assign vendor risk ratings for audit-ready reporting?

Assign vendor risk ratings by evaluating calculated risk scores against defined thresholds to categorize vendors as Critical, High, Medium, or Low. This ensures consistent rating assignment for audit-ready compliance documentation.

Can I track vendor risk score changes over time for trend analysis?

Yes, you can track vendor risk score changes over time for trend analysis. Monitoring inherent and residual risk score fluctuations helps governance teams identify emerging supplier risks and document remediation progress across reporting periods.

How do I generate remediation plans from vendor risk assessment results?

Generate remediation plans by using calculated vendor risk scores and assigned ratings to drive targeted treatment recommendations. This translates residual risk factors into actionable mitigation steps for supplier risk management.

Does vendor risk management require comparing peer vendors in the same category?

Peer comparison compares vendors in the same category to contextualize inherent and residual risk scores. This relative supplier risk assessment highlights outliers and prioritizes remediation efforts across the vendor portfolio.