Third-Party Risk Assessment (TPRA)

Overview

Assess vendor security posture by validating SIG questionnaire responses against evidence and auditing SOC 2 reports for coverage gaps. Produces structured TPRA reports aligned with NIST SP 800-161 and GDPR Article 28, with automated tools that flag unsupported vendor claims, expired reports, and bridge-letter gaps.

Getting Started

Add your source materials to the project workspace, then activate the Third-Party Risk Assessment (TPRA) skill. The agent will guide you through the process step by step.