Third-Party & Vendor Risk Concentration

All Vendors Tier 1 Critical Tier 2 Important High Risk SLA Breaching Q4 2024
Operational Revenue at Risk
$3.4M
+79% vs. 8w ago
Spend Concentration Ratio
47%
Top 5 vendors
Average Risk Score
62
+8 pts
SLA Breach Rate
3.1%
-0.4%
Contract Coverage Rate
94%
+2%
Avg Compliance Cert Lag
47d
+12d

Vendor Risk Score Distribution by Category

Spend Concentration (Top 10)

Fourth-Party Exposure Index

Total 4th Parties
342
Critical Undisclosed
18

Vendor Risk Register (Critical & High Risk)

Vendor Name Tier Primary Category Risk Score ORAR SLA Breach Compliance Lag Status
CloudOps Systems Tier 1 Infrastructure 78 $1.8M 6.2% 418d Critical
TechCore Infra Tier 1 Infrastructure 71 $1.1M 2.8% 34d High
DataVault LLC Tier 1 Data Services 68 $0.5M 3.4% 67d High
SecurePay Corp Tier 2 Payment Processing 64 $0.0M 1.9% 12d High
ComplianceEdge Tier 1 Compliance & GRC 59 $0.0M 2.1% 8d Medium
GlobalComm Partners Tier 2 Communications 57 $0.0M 4.7% 89d High
AnalyticsPro Inc Tier 2 Analytics 54 $0.0M 1.2% 23d Medium
BackOffice Solutions Tier 3 Operations 52 $0.0M 2.5% 45d Medium

SLA Breach Rate Trend (12 Weeks)

Financial Health Index Distribution

Geo-Political Risk

Finding Remediation

Avg Time to Resolve
34d

Compliance Coverage

SOC 2 87%
ISO 27001 72%
GDPR 94%
PCI DSS 68%

Open Findings Aging by Vendor Category

ORAR Waterfall Analysis

Risk Mitigation Actions

CloudOps Systems
• Initiate vendor review meeting
• Assess backup provider options
• Update compliance requirements
DataVault LLC
• Request updated certifications
• Schedule SOC 2 audit review
TechCore Infra
• Monitor SLA performance
• Review contract terms Q1 2025