1) Establish Policies and Procedures
2) Conduct gap analysis for ISO 27001 / SOC2 reporting.
3) Conduct Risk Assessment.
4) Help fill out customer questionnaires
5) Help complete CAIQ, SIG Lite, SIG Core, HECVAT, Vendor Security Alliance Questionnaires.
6) Establish Third Party Security Risk (TPRM) Process
7) Conduct Annual third-party risk assessment.