CYBERPULSE AI GRC: Vendor Risk Evaluator

This workflow streamlines the onboarding and risk assessment of third-party vendors by automating intake via forms or webhooks. It uses AI to classify vendors based on function, data access, access type, and certifications like ISO 27001, SOC 2, IRAP, or PCI DSS, assigning risk tiers: Low, Standard, or Critical. Missing certifications trigger flags, ensuring no high-risk vendors slip through.

Key benefits include standardized due diligence, scalable documentation, and audit-ready evidence logged to Google Sheets with scorecards featuring vendor details, risk tier, and timestamps. Instant alerts via Gmail/SMTP notify teams of high-risk or uncertified vendors, reducing manual effort and compliance gaps.

Ideal for GRC consultants, compliance/procurement teams, security leads, and audit groups managing supply chain risks. Customizable for internal risk appetites, additional certifications, alert thresholds, or integrations like Slack/Teams/SIEM. Supports ISO 27001 controls for supplier relationships.