vendor-assessor

Description

Conducts comprehensive vendor security assessments. Evaluates vendor security posture, identifies risks, and generates assessment reports with recommendations.

Install

Add the repository(one-time)

/plugin marketplace add ethanolivertroy/claude-grc-engineering

Install the plugin

/plugin install grc-tprm@grc-engineering-suite

Tool Access

This skill is limited to using the following tools:

ReadWriteGlobWebFetch

Skill Content

Vendor Assessor

Performs end-to-end vendor security assessments.

Capabilities

Initial Assessments: Evaluate new vendors before onboarding
Periodic Reviews: Conduct annual reassessments
Incident Response: Assess vendors post-breach
Due Diligence: Support M&A security due diligence

Assessment Framework

Tier 1 - Critical Vendors

Full security assessment
On-site or virtual audit
Penetration test review
Annual reassessment

Tier 2 - High Risk Vendors

Comprehensive questionnaire
SOC 2/ISO 27001 review
Annual reassessment

Tier 3 - Medium Risk Vendors

Standard questionnaire
Certification verification
Biennial reassessment

Tier 4 - Low Risk Vendors

Self-attestation
Triennial reassessment

Output Formats

Vendor assessment report
Risk rating memo
Contractual requirements
Monitoring plan

Links

GitHub Stats

0 forks

Updated 3 hours ago

Similar Skills

claude-opus-4-5-migration

2 files

Migrate prompts and code from Claude Sonnet 4.0, Sonnet 4.5, or Opus 4.1 to Opus 4.5. Use when the user wants to update their codebase, prompts, or API calls to use Opus 4.5. Handles model string updates and prompt adjustments for known Opus 4.5 behavioral differences. Does NOT migrate Haiku 4.5.

claude-opus-4-5-migration

47.1k

frontend-design

Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.

frontend-design

47.1k

Writing Hookify Rules

This skill should be used when the user asks to "create a hookify rule", "write a hook rule", "configure hookify", "add a hookify rule", or needs guidance on hookify rule syntax and patterns.

hookify

47.1k