Log in

Use-cases

PowerVRM

Automate all vendor-related processes – assessments, evidence analysis, findings, tasks, risk, and compliance management – no more spreadsheets and resource-sapping manual reviews!

CloudVRM

Outdated questionnaires and risk scanners miss critical in-cloud threats. Findings’ Cloud VRM delivers instant, in-depth audits with trusted cloud controls — turning weeks of manual work into minutes.

Source with Trust

Faster sourcing, fewer risks, and deal cycles that move at lightning speed
Frameworks

GDP

ISO 55000

CIS

IEC 61439

SEC

NIST CSF

SUSTAINABLE FINANCE

GMP

ISO 27017

ISO 27701

ISO 27018

ISO 27001-22

ISO 9001

ISO 31000

ISO 27005

ISO 22301

ISO 27003

ISO 21823

IMO

ISO 27002

CPRA

USMS

UN Guiding Principles

SRMBOK

OECD Guidelines

NIS2

IEC
Resources

About

Findings is a leading cloudVRM platform, helping enterprises to automate cybersecurity, sustainability, and compliance across their entire supply chain – at the click of a button. With AI-driven risk assessments, continuous monitoring, and real-time collaboration empower organizations to identify, mitigate, and manage third-party risks with unmatched speed and accuracy.

Blog

Findings’ blog is full of articles that help decision makers meet regulatory readiness, enhance business security and stay ahead of evolving risks.

E-guides

Findings’ e-guides offer insights on cybersecurity, sustainability, automated risk management, and regulatory strategies. Designed to help businesses, they provide practical tools to navigate evolving risks and improve security.

Press-Room

Faster sourcing, fewer risks, and deal cycles that move at lightning speed
Why Findings?

< back to all posts

Insights and Solutions for Vendor Risk Management

◼︎

4 Reasons Why Your CISO Wants To Implement A CMMC Framework

April 12, 2022

◼︎

Your Vulnerability Disclosure Policy Can Be Easier Than You Think

April 4, 2022

◼︎

Why Cyber Insurance Won’t Save You When You’re In Need

March 21, 2022

◼︎

3 Predictions about CMMC 2.0’s Impact on Compliance Operations in 2022

March 14, 2022

◼︎

The Top 20 Cybersecurity and Supply Chain Conferences of 2022

March 1, 2022

◼︎

CMMC Compliance Requirements: Everything You Need to Know in 2026

February 28, 2022

◼︎

Prioritizing Third-Party Assessments by leveraging Inherent Risk

January 31, 2022

◼︎

For Holistic Supply Chain Security, Think Beyond CMMC 2.0

January 23, 2022

◼︎

Supply Chain Cyber Attacks: Log4j, Kaseya, and the Threat to Global Businesses

January 13, 2022

◼︎

All You’ve Ever Wanted to Know About Vulnerability Disclosure Programs (VDPs)

December 20, 2021