tprm

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

Open-source AI agent for vendor privacy risk assessment. Scores vendors across 8 GDPR/CCPA dimensions using a published, enforcement-grounded rubric. Works with Claude, GPT-4o, Gemini, Mistral, or fully local with Ollama. Free forever.

A complete third-party vendor security risk-assessment framework — questionnaire, live scoring engine, and worked vendor assessments with approve/conditions/reject recommendations. Two-axis inherent×control residual-risk model mapped to NIST 800-161, ISO 27001 & SOC 2.

Análise tática de TPRM e GRC em licitações públicas, cruzando a Lei 14.133/21 com o framework NIST SP 800-161. Projeto prático gerado com IA (NotebookLM) | Desafio DIO.

AI-powered TPRM assistant that analyzes SOC2 reports, vendor questionnaires, and security evidence to identify potential cybersecurity risks, governance gaps, and compliance concerns. Generates structured audit-style findings, severity ratings, and actionable recommendations.

A comprehensive third-party risk management framework for a global media streaming platform. Focuses on vendor classification, content security, intellectual property protection, and compliance monitoring, delivering risk maps, due diligence checklists, and strategic recommendations

Top Third Party Risk Exchange 🌟 Star if you like it! 🌟

Open-source AI-Aware Third-Party Risk Management Toolkit - ISO 27001, EU AI Act, NIS2 DORA aligned

Claude plugin for Bitsight Security Ratings — a zero-dependency MCP server wrapping the Bitsight REST API as 15 read-only tools, plus 16 skills that turn ratings into board packs, vendor decisions, remediation roadmaps, audit evidence and Indian regulatory incident notifications.

Multi-agent third-party risk review on Google Gemini 2.5 Flash — vendor onboarding & M&A due-diligence in under 90 seconds. lablab.ai Transforming Enterprise Through AI submission (Track 2).

TPRM portfolio focused on US privacy & cloud vendor risk: minimization, retention/deletion, DSAR readiness, subprocessors, evidence-backed decisions.

Cybersecurity Risk & GRC Analyst | IT Risk | TPRM | Security Compliance | IAM | ISO 27001 | NIST CSF | SOC 2 | ServiceNow | Splunk | PMP

Offline assessment workbook and open control catalog for the Central Bank of Kuwait Cyber and Operational Resilience Framework (CORF)

IT Compliance Framework for Manufacturing: GDPR/CCPA, Annual IT & OT Audit, TPRM (Third-Party Risk Management) — templates, checklists, and methodology

AI-driven TPRM agent for banks, assessing ICT vendor reliability through financial insights to enhance Operational Resilience.

Open-source security questionnaire & RFP auto-responder. Drafts answers grounded in your own security profile and flags gaps instead of inventing certifications. BYOK with the Anthropic Claude API - no data stored server-side.

Cybersecurity GRC Intern | Translating business impact into risk-based controls, evidence-backed security assurance, and privacy-driven TPRM.

Python-based Third-Party Risk Management (TPRM) tool featuring an automated vendor scoring engine, relational SQL audit database, and GRC policy frameworks.

A showcase of hands-on cybersecurity, risk management, and compliance projects. Demonstrating practical expertise in Framework Auditing (NIST, ISO 27001, SOC 2), Threat & Vulnerability Analysis, Incident Response, and Security Controls Implementation. Designed for recruiters and hiring teams evaluating technical skill and governance proficiency.

NIST-aligned Markdown skills for third-party risk management workflows