Pro — $379

TPRM Assessment Tool — Pro

Professional third-party risk management for practitioners who need more than a questionnaire. 42 controls across 8 domains, Trust Gap Scoring, evidence tracking, executive summary, and direct Risk Register export — in a single self-contained file.

Buy Now — $379 Try Free Version

One-time purchase. No subscription. Delivered by email within 2–3 minutes. Works in any modern browser — no installation, no internet required after download.

What You Get

Built for vendor risk practitioners

42 Controls, 8 Domains

Complete vendor assessment coverage: Governance, Data Protection, Access Control, Technical Security, Incident Response, Business Continuity, Compliance, and Contractual.

Trust Gap Scoring

Go beyond self-attestation. Trust Gap measures the difference between what vendors claim and what they can prove with evidence. Higher gap = higher risk.

Evidence Tracking

Assign evidence owners per control. Track document status, note locations, and flag gaps where evidence is missing or insufficient.

Executive Summary

One-click dashboard with vendor risk score, domain breakdown, top gaps, and remediation priorities. Print-ready for leadership reporting.

Risk Register Export

Export identified gaps directly to IRONGATE Risk Register format. Maintains control mappings, priority ratings, and remediation owners.

Framework Mapped

Every control mapped to NIST CSF 2.0, SOC 2 TSC, and ISO 27001. Show auditors exactly how vendor assessments align to your compliance program.

Coverage

8 Risk Domains, 42 Controls

GOVGovernance & Organization

DATAData Protection & Privacy

IAMAccess Control & Identity

TECHTechnical Security

IRIncident Response

BCPBusiness Continuity

AUDCompliance & Audit

SLAContractual & SLA

Free vs Pro

Why upgrade?

Feature	Free	Pro
42 controls across 8 domains	✓	✓
Real-time maturity scoring	✓	✓
NIST / SOC 2 / ISO mappings	✓	✓
JSON save / load	✓	✓
Trust Gap Scoring	—	✓
Evidence tier weighting	—	✓
Evidence owner tracking	—	✓
Gap auto-detection	—	✓
Executive summary dashboard	—	✓
PDF export	—	✓
CSV export	—	✓
Risk Register export	—	✓

Framework Alignment

Mapped to the standards you report against

Every control includes mappings to major frameworks. Show auditors and leadership exactly how vendor assessments fit your compliance program.

NIST CSF 2.06 Functions
106 Subcategories

SOC 2Trust Services
Criteria

ISO 27001Annex A
Controls