Log in

Use-cases

PowerVRM

Automate all vendor-related processes – assessments, evidence analysis, findings, tasks, risk, and compliance management – no more spreadsheets and resource-sapping manual reviews!

CloudVRM

Outdated questionnaires and risk scanners miss critical in-cloud threats. Findings’ Cloud VRM delivers instant, in-depth audits with trusted cloud controls — turning weeks of manual work into minutes.

Source with Trust

Faster sourcing, fewer risks, and deal cycles that move at lightning speed
Frameworks

GDP

ISO 55000

CIS

IEC 61439

SEC

NIST CSF

SUSTAINABLE FINANCE

GMP

ISO 27017

ISO 27701

ISO 27018

ISO 27001-22

ISO 9001

ISO 31000

ISO 27005

ISO 22301

ISO 27003

ISO 21823

IMO

ISO 27002

CPRA

USMS

UN Guiding Principles

SRMBOK

OECD Guidelines

NIS2

IEC
Resources

About

Findings is a leading cloudVRM platform, helping enterprises to automate cybersecurity, sustainability, and compliance across their entire supply chain – at the click of a button. With AI-driven risk assessments, continuous monitoring, and real-time collaboration empower organizations to identify, mitigate, and manage third-party risks with unmatched speed and accuracy.

Blog

Findings’ blog is full of articles that help decision makers meet regulatory readiness, enhance business security and stay ahead of evolving risks.

E-guides

Findings’ e-guides offer insights on cybersecurity, sustainability, automated risk management, and regulatory strategies. Designed to help businesses, they provide practical tools to navigate evolving risks and improve security.

Press-Room

Faster sourcing, fewer risks, and deal cycles that move at lightning speed
Why Findings?

< back to all posts

Insights and Solutions for Vendor Risk Management

◼︎

What is Log4j vulnerability? Do you need to worry?

December 14, 2021

◼︎

A Complete Checklist To Supply Chain Security

December 13, 2021

◼︎

How Your Competitors Are Preventing Supply Chain Attacks

November 30, 2021

◼︎

6 Alarming cracks you must deal within your supply chain security – Number 2 will keep you up at night.

October 19, 2021

◼︎

What action can you take post Kaseya

July 8, 2021

◼︎

Solarwinds hack – and what can you do today

December 17, 2020

◼︎

How to align the vendors objective and internal risk profile

April 20, 2020

◼︎

Your business continuity and the Coronavirus crisis

April 10, 2020

◼︎

GE Discloses Data Breach After Service Provider Hack

April 7, 2020

◼︎

A comprehensive guide on what you need to know about CCPA, CPRA and CPPA

February 6, 2020