Trustero TPRM uses AI to review vendor risk documents
Trustero has launched Trustero Third-Party Risk Management (TPRM), a product that applies the company's AI engine to the vendors and partners an organization relies on, not only to its own compliance program. Security and compliance teams no longer collect and read vendor documentation themselves. They get a recommended risk determination, which they then review and approve.
The launch targets a part of security work that many teams see as tedious. Every new supplier, SaaS provider or service partner brings attestations, questionnaires and reports, and someone has to read them.
A logistics problem more than an analysis problem
Trustero describes vendor risk management as mostly a matter of logistics. Teams spend their time chasing attestations, keeping track of who owns which vendor, and working through questionnaires and audit reports.