Introduction

Cyberwiz is a vendor risk and compliance platform. It covers two jobs that usually live in separate spreadsheets: assessing the third parties you rely on, and proving that your own controls are in place.

What the platform covers

Vendor risk

Keep a register of every vendor, the data each one processes, and the criticality you assigned it. Send security assessments to a vendor contact, review what comes back, and track the findings through to closure.

Compliance

Adopt a framework, work its control set, and attach evidence to each control. Control status is derived from the evidence you collect, so readiness is a by-product of the day-to-day work rather than a separate reporting exercise.

Questionnaires

Maintain a bank of reusable questions, assemble them into questionnaires, and score answers automatically through per-option weights and findings.

Who it is for

• Security and GRC teams running third-party reviews on a schedule.
• Compliance owners preparing for an audit against a framework such as ISO 27001 or SOC 2.
• Auditors, who get scoped, time-boxed access to a single organization's frameworks rather than a full account.

Vendors themselves never need an account. They answer through a tokenised link sent by email, which expires on its own.

How it fits together

Every object hangs off one organization. A vendor holds contacts and business context; an assessment is one questionnaire sent to one vendor at one point in time; a report is the rendered outcome of that assessment. On the compliance side, an adopted framework brings a control set with it, and evidence attaches to those controls.

Where to go next

• Quick start — from sign-in to a first sent assessment.
• Concepts — the objects and how they relate.