Vendor Cyber-Risk Profile Assessment Guide

This document is a Vendor Cyber-Risk Profile Assessment Guide that provides a framework for CIOs and CISOs to identify and mitigate risks associated with third-party vendors. It aligns with established standards such as ISO and NIST 800-53, detailing critical security controls that vendors should implement to safeguard customer data and assets. The profile includes information about Trend Micro, a global cybersecurity leader, and outlines their security practices, including employee training, compliance with legal obligations, and data protection measures. It emphasizes the importance of security awareness training for employees and the necessity for contractors to comply with company policies. Additionally, the document discusses the organization's approach to privacy, including regular assessments and the establishment of a cyber-liability trust. The assessment process is designed to ensure that all practices comply with relevant regulations and contractual obligations, thereby enhancing the overall security posture of the organization.