third-party security due diligence process, from supplier onboarding through ongoing assurance, reassessment, and offboarding. Perform comprehensive security risk assessments of third parties, evaluating cybersecurity, resilience, data protection, cloud security, supply chain security, and operational risk exposures. Assess supplier security capabilities through review of questionnaires, policies, certifications, audit reports, penetration … testing results, independent assurance reports, and supporting evidence. Evaluate control effectiveness against recognised frameworks and standards including ISO 27001, NIST Cybersecurity Framework, SOC reports, DORA, and relevant SWIFT security requirements. Identify security gaps, residual risks, and compensating controls, providing clear risk ratings and recommendations to stakeholders. Supplier Assurance & Continuous MonitoringEstablish ...