April 16, 2025

ISO 27001 and 27002 define structured standards for information security and third-party risk control.

DORA requires financial institutions to manage digital and third-party risks with structured, resilient practices.

MITRE ATT&CK maps real-world attack techniques to improve threat detection and response.

BIO is the Dutch government’s information security standard, mandatory for public institutions and relevant for suppliers.

NIST provides global standards for cybersecurity and risk management — across your organization and your supply chain.

CWE categorizes software weaknesses to support secure development and smarter third-party risk analysis.

CVE assigns unique identifiers to known vulnerabilities for better risk tracking and response.

TPRM manages third-party risks in areas like cybersecurity, compliance, and operational continuity.

SCRM manages risks in the supply chain to strengthen resilience against cyber and operational disruptions.