Calculates vendor risk scores using inherent and residual risk factors. Generates risk ratings, comparisons, and treatment recommendations.
/plugin marketplace add ethanolivertroy/claude-grc-engineering/plugin install grc-tprm@grc-engineering-suiteThis skill is limited to using the following tools:
Calculates and manages vendor risk scores.
| Factor | Weight |
|---|---|
| Data Sensitivity | 15% |
| System Access Level | 10% |
| Business Criticality | 10% |
| Regulatory Impact | 5% |
| Factor | Weight |
|---|---|
| Security Certifications | 15% |
| Questionnaire Score | 20% |
| Audit Findings | 15% |
| Incident History | 10% |
| Rating | Score Range | Review Frequency |
|---|---|---|
| Critical | 80-100 | Quarterly |
| High | 60-79 | Semi-Annual |
| Medium | 40-59 | Annual |
| Low | 0-39 | Biennial |