Cybersecurity Risk Rating Tool

Clemson University is seeking a Cybersecurity Risk Rating Tool to automate the collection and analysis of externally available third-party risk data. The goal is to enable evaluation of prospective vendors, monitoring of existing third-party partners, monitoring of fourth-party vendors, and prioritizing risk remediation efforts. The tool should provide risk-prioritized findings, enable categorization of assets and vendors, and provide interactive knowledge base with straightforward explanations and recommended actions. The university anticipates continuous monitoring for between 50 and 100 third-party vendors and will pull 5-10 point-in-time reports per month for vendor assessments. Key features and requirements include: • Data output for subscribers • Data gathering and accuracy • Third-party collaboration and outputs • Reporting and analytics • Customer enhancement requests • Security and compliance with applicable laws and regulations • Business continuity and resilience • Integration with existing systems and technologies • Vendor-hosted solutions with secure data storage and transmission • Annual review of SOC1 and SOC2 reports • Exit strategy with database backup and recovery capabilities