Assessment Scopes

Urbane provides diverse technical and procedural coverage for assessing the security and risk of third party vendors through the following highlighted services.

Third Party Vendor Assessments

With a combination of services tailored to an organization’s specific needs, Urbane can assist with performing risk assessments during the evaluation and on-boarding process of new vendors, providing a detailed review of security questionnaires, validation of requested vendor evidence, the performance of full risk assessments, and expert opinion and guidance to the strength of the vendor's information security program. When a large number of vendors exist, Urbane also makes available full program management of vendor security questionnaires and compliance monitoring to provide relief of security teams to focus on internal security.

Vendor Penetration Testing

Validating the effectiveness of claimed vendor security controls, Urbane performs independent penetration testing of vendors environments from network and application perspectives. Upon discovery of any findings that could impact the security an organization’s data, Urbane discloses to both client teams and the vendors teams with follow up testing to ensure the findings were successfully remediated.

Vendor Access Assessments

With the growing number of vendors provided accounts to access an organization's resources, Urbane performs reviews of user and service accounts assigned to vendors to determine their lifespan, inactivity, access levels, and ability to potentially escalate into the environment if compromised.

Customer Security Request Support

As an interface between an organization’s customers and the organization’s role as a vendor or service provider, Urbane provides management of customer security and compliance requirements by responding to questionnaires, providing annual compliance reports and attestations, and serving as a proxy for evidence requests and customer audits.

The Urbane Difference