Venseca Overview

Information Security Reporting Agency

Program Overview

Venseca Vendor Outputs

VENSECA DIGITAL TRUST SCORE

Independent and ongoing evaluation of all internal policies, procedures and collected evidence

EXECUTIVE SUMMARY

2 pages that highlight Digital Trust Score, Service Description, Shared Data, Evidence Collected & Validated, Compliances Observed, Prior Breach details

DETAILED REPORT

6 – 12 pages of additional evidence providing detail about cyber risk posture, recommended areas of improvement/remediation, and supporting evidence

SECURITY RISK ASSESSMENT MAPPING

Map all collected information to common risk assessment standards (NIST CSF, NIST 800-171, SOC2, HIPAA, CISv8, CMMC Level 1 & 2, ISO 27001, GLBA, PCI, others)

VALIDATED INDUSTRY QUESTIONNAIRES

Completed industry specific questionnaire (HIMSS, HECVAT, K-12CVAT, CAIQ)

Venseca Digital Trust Score*

INDEPENDENT & ONGOING EVALUATION OF:

• Cybersecurity Public Facing Information or Cybersecurity Risk Register

• Risk Mitigation Strategies (Cyber Liability Insurance)

• Policies, Plans, and Documentation

• Compliance, Certifications, Standards, and Regulations

• Cybersecurity People, Process, and Technology

• Cybersecurity Program Assessments and Testing

Vendor or Executive Security Report

EXECUTIVE SUMMARY

2 pages that highlight Digital Trust Score, Brief Service Description, Shared Data, Number of Records, Evidence Collected & Validated, Compliances Observed, and prior breach details.

DETAILED REPORT

6–10 pages of additional evidence providing detail about a provider’s cyber risk posture, recommended areas of improvement / remediation, and supporting evidence.

In summary Win/Win Solution

• Free Access to Public Facing reports on vendors

• Free Access to Catalog of High-Quality validated Vendor Risk Assessment reports with Digital Trust Score

• Meeting GLBA Compliance with TPRM requirement

Trust Catalog - Vendor

• One to Many Model

• Efficiency: Questionnaire Mappings

• Cost Effectiveness: Access to many Risk Assessment Mappings

• Marketing differentiator: Validated questionnaire

• Favorable Cyber Liability Terms and Conditions

• Ability to work with cyber-analyst to aid questionnaire accuracy

• Gain an understanding how to improve infosec program Member

Simple Process

Member

• No contract

• Provide list of Vendors

• Receive Access to portal for you and your team

• Select your vendors

• Access to public facing reports at a minimum Vendor

• Provide Questionnaire for no cost

• Validation and Vendor Security Risk Assessment – minimal cost