Vendor & Third-Party Risk Audit Dashboard

Meridian Health Systems • 214 Active Vendors • Last Updated: Dec 2024

Attestation Completion
82%
-3% vs target
SOC 2 Currency Index
71%
+5% MoM
Remediation SLA Compliance
68%
-12% vs SLA
Contract Compliance
79%
+2% MoM
Risk-Accepted Vendors
14
9 Critical, 5 High
Vendor-Attributable Findings
23%
Target: 15%

Vendor Risk Heatmap by Tier & Assessment Age

0-90 days
91-180 days
181-270 days
271-365 days
366-545 days
546+ days
Critical (31)
8
6
4
7
5
1
High (68)
22
18
12
10
4
2
Medium (89)
41
28
14
6
0
0
Low (26)
18
7
1
0
0
0

DataSync Pro (Critical, 427 days) and 12 other tier-1 vendors overdue for SOC 2 refresh

Attestation Completion Rate by Tier (6-Month Trend)

Fourth-Party Exposure Index

Remediation SLA Compliance by Severity

SOC 2 Report Currency Distribution

Vendor Risk Register — Top 10 by Composite Risk Score

Vendor Name Tier Risk Score SOC 2 Age (days) Open Findings SLA Compliance Fourth-Party Count Status
DataSync Pro Critical 94 427 3 High 52% 11 Action Required
CloudStore Ltd High 87 312 5 High, 2 Med 61% 8 Post-Breach Review
SecureVault Inc Critical 83 389 2 High 64% 6 Escalated
Analytics360 High 76 198 1 High, 4 Med 72% 14 In Progress
PaymentFlow Critical 74 112 3 Med 78% 4 On Track
TeleHealth Connect High 68 245 2 Med 69% 9 In Progress
NotifyMaster Medium 62 88 1 Med 81% 3 On Track
BackupPro Critical 59 54 0 92% 2 Compliant

Inherent Risk Score Distribution

Onboarding Assessment Completion

Business Unit Coverage

Contract Compliance Coverage by Clause Type

Vendor Concentration Risk Score (Top 5 Vendors)

DataSync Pro34%
CloudStore Ltd28%
SecureVault Inc19%
Analytics36012%
PaymentFlow7%

Percentage of critical business functions dependent on single vendor