Vendor Security Assessment demo
See where a vendor's answers and its evidence disagree: a security radar scores every domain from the questionnaire, the SOC 2 report and the pen test, and flags each contradiction with both passages. 1:14
What the demo shows
A third-party risk solution for security teams that rates a supplier's SOC 2 and questionnaire.
Reads the questionnaire, SOC 2 report and pen test, scores ten security domains from each source, and plots what the vendor claims against what the independent evidence shows. The contradiction finder flags every answer a test contradicts, with both passages cited to the page, and lists claims no test covers. Findings become requests and clauses; the risk rater explains residual risk; the analyst decides and High residual is co-signed.
Transcript
- Vendor Security Assessment rates a supplier's SOC 2 report and questionnaire for pharma IT risk teams.
- A tier, one review means 600 answers and a 100-page audit report, read by hand.
- Valunda's answers load onto the security radar.
- Blue is what the vendor says, green what the evidence shows.
- Encryption scores 98 on the questionnaire, but the auditor found backups that were never encrypted.
- The Contradiction Finder sets both statements side-by-side, each cited to its page.
- One click opens the auditor's exception on page 52.
- Residual risk is high at 64 and moderate once the vendor closes its seven requests.
- The analyst signs, IT risk cosigns, and the vendor gets its request the same day.
- Build on Botminds, agents, data, screens, and governance on one platform.
Transcribed from the film’s narration. Captions are on the player.