sf-logo
  • Productsdropdown

    Product

    icon
    Secureframe AI
    icon
    Secureframe Comply
    icon
    Secureframe FederalNew
    icon
    Controls Management
    icon
    Automated Evidence Collection
    icon
    Policy Management
    icon
    Integrations

    Risk Management

    icon
    Risk Management
    icon
    Personnel Management
    icon
    Access Management
    icon
    Security Awareness Training

    Vendor Security Reviews

    icon
    Third-party Risk Management
    icon
    Trust Center
    icon
    Questionnaire Automation

    Supported Frameworks

    SOC 2
    ISO 27001
    CMMC 2.0
    FedRAMP 20x
    HIPAA
    PCI DSS
    GDPR
    NIST CSF 2.0
    NIST 800-171
    NIST 800-53
    ISO 42001
    Custom
    See all frameworksangle-right
  • Solutionsdropdown

    Solutions

    small-business
    Small businessBoost your business with security compliance
    Company smallangle-right
    enterprise
    EnterpriseGive your team time back with compliance automation
    Company enterpriseangle-right

    Top Frameworks

    SOC 2Monitor all five SOC 2 trust services criteria
    ISO 27001Manage ISO 27001 certification and surveillance audits
    CMMCAchieve and maintain compliance with CMMC 2.0 requirements
    FedRAMPMaintain compliance with FedRAMP and FedRAMP 20x
    HIPAACreate and monitor a healthcare compliance program
    PCI DSSStreamline PCI compliance across the RoC and SAQs
    See all frameworksangle-right
  • Customers
  • Partnersdropdown

    Partner Types

    service-partner
    Service PartnersEmpowers MSPs, MSSPs, vCISOs 
and advisories
    audit-partner
    Audit PartnersStreamline audit preparation and execution with our advanced technology
    reseller-partner
    Reseller PartnersEmpowers solution providers to enhance their customers’ security posture
    technology-partner
    Technology PartnersEnhanced offerings for technology firms to provide value through integrated solutions.

    Partner Program

    location
    Find a partnerangle-right
    handshake
    Register a dealangle-right
    grade
    Already a partner?
    Log in to the Partner Portalangle-right
    gap-assessment
    Gap Assessment ToolPinpoint security gaps and unlock service opportunities.
    Read gap assessmentangle-right
  • Pricing
  • Resourcesdropdown

    Security and Compliance Resources

    blog
    BlogGet expert advice on security, privacy and compliance
    Terms-Glossary
    Terms GlossaryUnderstand security, privacy and compliance terms and acronyms 
    ebooks
    EbooksDive deep into popular frameworks and security and compliance best practices
    frameworks-glossary
    Frameworks GlossaryDiscover common security, privacy, and compliance frameworks and standards
    checklist
    Checklists & TemplatesBrowse our library of policy templates, compliance checklists, and more free resources
    msp-resources
    MSP ResourcesFind resources to strengthen your and your clients’ cybersecurity posture

    Framework Resources

    hub
    SOC 2 Hub
    hub
    ISO 27001 Hub
    hub
    PCI DSS Hub
    hub
    HIPAA Hub
    hub
    GDPR Hub
    hub
    GRC Hub
    hub
    CMMC Hub
    icon
    NIST 800-53 Hub
    kit
    SOC 2 Kit
    kit
    ISO 27001 Kit
    HIPAA Kit
    icon
    CMMC 2.0 Kit
    icon
    Risk Management Kit
    icon
    Third-party Risk Management Kit

    Customer Resources

    icon

    Product Updates Explore New features

    icon

    Help Center

  • Companydropdown

    Company

    about
    AboutOur mission is to empower businesses to build trust
    careers
    CareersLet’s build together — learn about our team and view open positions 
    security
    SecuritySecurity is rooted in our culture  — read our commitment to security
    newsroom
    NewsroomRead the latest news, media mentions, and stories about Secureframe 
Sign inRequest a demoangle-right
hero-bg

Third-Party Risk Management Resources Kit

Managing third-party risk can be challenging — especially when you’re strapped for time and resources. This free third-party risk management resources kit simplifies the process with essential tools and resources you’ll need to identify, prioritize, and mitigate third-party risk, including policy templates, checklists, and more.

What’s in the third-party risk management kit:

  • Third-party risk management policy template
  • Vendor risk management checklist
  • Supply chain risk management policy template
  • Risk assessment template
  • Business continuity plan template

Third-party risk management policy template

A third-party risk management policy establishes controls and processes for managing security risks that are introduced by third parties. Use this template to help build a solid foundation for managing your third-party relationships, whether you’re creating a third-party risk management policy for the first time or looking to strengthen your current policy.

What's included:

  • A complete, auditor-approved template that's easy to tailor to your organization
  • Prompts to establish strong controls and processes for managing third-party security risks

Vendor risk management checklist

A vendor risk management program should put formalized processes in place for managing risk throughout the entire vendor lifecycle, from vendor risk assessments to continuous monitoring. Follow these steps to to implement an effective vendor risk management program at your organization.

What’s included:

  • A clear breakdown of steps your organization needs to take to manage vendor risk
  • An easy way to keep your efforts organized with categorized tasks

Supply chain risk management policy template

A supply chain risk management policy is designed to define and support the protection and controls of supply chain procedures and processes. Download this customizable policy template to build out your policy library.

What’s included:

  • A complete, auditor-approved supply chain risk management template
  • Prompts to specify roles and responsibilities and what supply chain risk management capabilities will be implemented

Risk assessment template

Risk assessment is a process for identifying risks to organizational operations, assets, and individuals and assessing the likelihood they will occur and the harm that would arise if they did occur. Use the template below as a starting point for assessing risks. It is tailored for non-adversarial risk, but you can use it to assess adversarial risk by replacing “range of effects” with “threat source characteristics.”

What’s included:

  • A built-in risk matrix to identify and prioritize risks
  • A section to assign specific risk treatment and risk owners to each threat

Business continuity plan template

A business continuity plan can help assist an organization in resuming operations and services as quickly as possible during a crisis. Use this template to begin identifying the risks, critical elements, mitigation actions, and preparedness strategies that will make up the basic components of your business continuity plan.

What’s included:

  • A step-by-step guide through the major planning steps for building a simple but effective plan to minimize damage and speed up the resumption of office operations after a crisis.
  • Prompts to identify the most critical elements of your organization, their resource requirements, and how their recovery should be prioritized
sf-logo-2
linked-in
x-dark
youtube
Products
  • Secureframe Comply
  • Secureframe Trust
  • Why Secureframe?
  • Product Updates
  • Pricing
Solutions
  • Small Business
  • Enterprise
Frameworks
  • SOC 2
  • ISO 27001
  • HIPAA
  • PCI DSS
  • CCPA
  • GDPR
  • View All
Frameworks
  • SOC 2
  • ISO 27001
  • HIPAA
  • PCI DSS
  • CCPA
  • GDPR
  • View All
Partners
  • Trusted Partners
  • Auditors
  • Service Providers
  • Become a Partner
  • Explore Partners
Company
  • About
  • CareersWe’re hiring
  • Newsroom
  • Customers
  • Trust Center
Company
  • About
  • CareersWe’re hiring
  • Newsroom
  • Customers
  • Trust Center
Resources
  • Blog
  • Compliance Hubs
  • Compliance Resources
  • Guides
  • Glossary
  • Knowledge Base Extension
  • API Reference
Support
  • Help
  • Contact us
  • Schedule a demo
  • Status99.99%
  • Support Metrics
  • Your privacy choicesprivacy-choices
aicpa-soc
iso-27001
ccpa
gdpr
© 2025 Secureframe. All Rights Reserved.
Terms of Service
Privacy Policy
Website Terms
Become a Secureframe Partner or Reseller