تقرير تقييم مخاطر الطرف الثالث (أمن سيبراني)

Third Party Cybersecurity Risk Assessment Tool

Excel-Based Professional Assessment Tool

A professional Microsoft Excel–based tool designed to assess third-party cybersecurity risks, enabling organizations to make informed decisions when onboarding, contracting with, or continuing relationships with vendors and service providers, while ensuring compliance with regulatory and recognized standards in the Kingdom of Saudi Arabia.

The tool is built on a smart, dynamic assessment model that automatically presents only the relevant questions based on the type of service provided by the third party (cloud, technical, operational, financial, consulting, and others). This approach ensures accurate risk evaluation, reduces manual effort, and saves time.

Product Features

• Smart questionnaire that dynamically adapts based on third-party service type
• Automated cybersecurity risk scoring and calculation
• Clear risk classification (Low – Medium – High – Critical)
• Executive-ready reports, printable and presentation-friendly
• Professional, user-friendly design
• No additional systems or internet connectivity required

Assessment Scope

The tool evaluates key cybersecurity domains, including:

• Third-party cybersecurity governance
• Data protection and privacy
• Access and identity management
• Infrastructure and system security
• Incident management and response
• Regulatory and contractual compliance

Regulatory Alignment

The tool is designed to align with the requirements of:

• National Cybersecurity Authority (NCA)
• Saudi Central Bank (SAMA)
• Communications, Space & Technology Commission (CST – formerly CITC)
• Insurance Authority
• Personal Data Protection Law (PDPL)
• ISO/IEC 27001

Tool Outputs

• Comprehensive third-party cybersecurity risk assessment report
• Executive Summary suitable for senior management
• Clear and structured risk matrix
• Actionable risk treatment recommendations
• A single, well-organized and approval-ready Excel file

Target Users

• Cybersecurity departments
• Risk and compliance teams
• Procurement and supply chain departments
• Consulting firms
• Organizations subject to regulatory requirements

Value Proposition

• Accelerates vendor and third-party risk assessments
• Reduces operational and regulatory exposure
• Supports professional and defensible contracting decisions
• High-value, cost-effective, and practical assessment solution