Sentrix Third-party Risk Management Platform

Sentrix's third-party risk management platform provides continuous monitoring of vendor security posture, replacing point-in-time questionnaires with ongoing risk visibility. The platform automates vendor onboarding by dispatching security questionnaires (SIG Lite, CAIQ, NIST, custom), importing existing certifications such as SOC 2, ISO 27001, and CAIQ reports, and generating risk scores based on criticality, data access, and control coverage. Vendors can update their posture directly through a vendor-facing portal. Once onboarded, vendors are continuously monitored for changes in compliance posture. The platform issues alerts when certifications lapse or expire, when security policies drift, or when new vulnerabilities or breach disclosures surface for a vendor. Escalation workflows include configurable SLA timers and owner assignments. Additional capabilities include risk-tiered onboarding that applies deeper scrutiny to critical vendors and lighter review to low-risk SaaS tools, concentration risk analysis to identify single points of failure across the vendor ecosystem (relevant to DORA and NIS2 requirements), remediation workflows with tracked deadlines and audit-ready completion evidence, and board-ready reporting including risk posture summaries, heat maps, and trend reports. The platform maintains a live vendor risk register showing active vendor counts, risk scores, and criticality/data-access classifications, and supports one-click export of audit-ready vendor risk dossiers.