Third-Party & Supply Chain Cyber Risk

NorthStar Logistics — 1,100 Active Vendors

WTPRE
74
+6 vs Q3
Tier-0 Residual Risk
61
+4
Concentration Index
0.38
-0.02
Assessment Staleness
18%
+3%
Contagion Alerts
3
Active incidents

Vendor Risk Portfolio: Inherent vs. Residual Risk

Tier-0
Tier-1
Tier-2
Tier-3

Critical-Path Concentration

FreightLink API 42%
RouteOptima SaaS 38%
PayrollPro 26%
CloudDocs Enterprise 19%
SecureID Auth 14%

% of critical business processes dependent on single vendor

Assessment Staleness Queue

PayrollPro (Tier-0)
Last assessed: 14 months ago
OVERDUE
FreightLink API (Tier-0)
Last assessed: 13 months ago
OVERDUE
CustomsHub (Tier-1)
Last assessed: 11 months ago
DUE SOON
RouteOptima SaaS (Tier-0)
Last assessed: 9 months ago
ON TRACK
CloudDocs Enterprise (Tier-1)
Last assessed: 8 months ago
ON TRACK

Tier-0 Vendor Risk Scorecard

Vendor Category Inherent Risk Residual Risk Last Assessment Incidents (12mo) Status
PayrollPro HR/Finance 92 78 14 months 0 ACTION REQ
FreightLink API Logistics 85 64 13 months 1 CONTAGION
RouteOptima SaaS Logistics 79 52 9 months 0 MONITOR
SecureID Auth Security 88 41 6 months 0 GOOD
CloudDocs Enterprise Productivity 72 48 8 months 0 MONITOR
CustomsHub Customs/Trade 81 58 11 months 0 DUE SOON

SaaS Shadow IT Discovery Trend

Remediation SLA Attainment by Vendor Tier

Fourth-Party Coverage
67%
Tier-0 mapped 94%
Tier-1 mapped 71%
Tier-2 mapped 43%
Contagion Alerts
FreightLink breach investigation
Active • API keys rotation req'd
CloudDocs service outage
Monitoring • 4hr impact
CustomsHub CVE disclosure
Patched • No exposure found
Owner Accountability
82%
Assigned owners 96%
Review SLA met 78%
Action closure 73%

Highest WTPRE Contributors

Exit/Renegotiate Candidates

PayrollPro
Residual 78 • 14mo stale
IMMEDIATE ACTION
FreightLink API
Incident active • High concentration
RENEGOTIATE CLAUSE
CustomsHub
11mo stale • Alternative available
EVALUATE ALTERNATIVES
LegacyEDI Gateway
EOL announced Q2 2025
MIGRATION PLANNED

Assessment Calendar & Procurement Sync

This Month
12
Assessments scheduled
Next 30 Days
18
Due for renewal
Procurement Sync
94%
Contract coverage
Clause Coverage
87%
Security clauses enforced
Data refreshed daily from OneTrust, ProcessUnity, CASB/SSPM feeds • Last sync: 2 hours ago