tprm

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

Open-source AI agent for vendor privacy risk assessment. Scores vendors across 8 GDPR/CCPA dimensions using a published, enforcement-grounded rubric. Works with Claude, GPT-4o, Gemini, Mistral, or fully local with Ollama. Free forever.

Análise tática de TPRM e GRC em licitações públicas, cruzando a Lei 14.133/21 com o framework NIST SP 800-161. Projeto prático gerado com IA (NotebookLM) | Desafio DIO.

A comprehensive third-party risk management framework for a global media streaming platform. Focuses on vendor classification, content security, intellectual property protection, and compliance monitoring, delivering risk maps, due diligence checklists, and strategic recommendations

Claude plugin for Bitsight Security Ratings — a zero-dependency MCP server wrapping the Bitsight REST API as 15 read-only tools, plus 16 skills that turn ratings into board packs, vendor decisions, remediation roadmaps, audit evidence and Indian regulatory incident notifications.

AI-powered TPRM assistant that analyzes SOC2 reports, vendor questionnaires, and security evidence to identify potential cybersecurity risks, governance gaps, and compliance concerns. Generates structured audit-style findings, severity ratings, and actionable recommendations.

Open-source AI-Aware Third-Party Risk Management Toolkit - ISO 27001, EU AI Act, NIS2 DORA aligned

Multi-agent third-party risk review on Google Gemini 2.5 Flash — vendor onboarding & M&A due-diligence in under 90 seconds. lablab.ai Transforming Enterprise Through AI submission (Track 2).

TPRM portfolio focused on US privacy & cloud vendor risk: minimization, retention/deletion, DSAR readiness, subprocessors, evidence-backed decisions.

IT Compliance Framework for Manufacturing: GDPR/CCPA, Annual IT & OT Audit, TPRM (Third-Party Risk Management) — templates, checklists, and methodology

AI-driven TPRM agent for banks, assessing ICT vendor reliability through financial insights to enhance Operational Resilience.

Cybersecurity Risk & GRC Analyst | IT Risk | TPRM | Security Compliance | IAM | ISO 27001 | NIST CSF | SOC 2 | ServiceNow | Splunk | PMP

Python-based Third-Party Risk Management (TPRM) tool featuring an automated vendor scoring engine, relational SQL audit database, and GRC policy frameworks.

A showcase of hands-on cybersecurity, risk management, and compliance projects. Demonstrating practical expertise in Framework Auditing (NIST, ISO 27001, SOC 2), Threat & Vulnerability Analysis, Incident Response, and Security Controls Implementation. Designed for recruiters and hiring teams evaluating technical skill and governance proficiency.

Open-source security questionnaire & RFP auto-responder. Drafts answers grounded in your own security profile and flags gaps instead of inventing certifications. BYOK with the Anthropic Claude API - no data stored server-side.

A complete third-party vendor risk assessment — from intake through final risk decision — executed against a cloud payroll vendor and rolled up into a companion NIST 800-53 / PCI DSS GRC program.

GenAI Security Assessment Toolkit — OWASP GenAI Top 10 scanner...

Central index for my US-grade GRC, Security Assurance, and TPRM portfolios. Features audit-ready documentation, cross-framework mappings, and evidence-driven vendor risk management.

Third-Party Vendor Risk Assessment project demonstrating TPRM lifecycle including vendor risk scoring, SOC 2 review, due diligence, and remediation planning.

Third-party vendor risk assessment framework with tiering methodology, weighted security questionnaires (45-question Tier 1, 20-question Tier 2), scoring rubric, sample CloudMed EHR assessment (67%, Medium Risk), and vendor risk register.