Panorays: Third-Party Security Risk Management

Panorays is dedicated to eliminating third-party security risk so that companies worldwide can quickly and securely do business together. We automate, accelerate and scale customers’ vendor security evaluation and risk management process.

With Panorays, our customers quickly and easily manage, mitigate and remediate supplier security, reduce breaches, ensure vendor compliance and improve their security across the board, resulting in efficient and effective risk remediation in alignment with their security policies and risk appetite.

Use Cases -

* Third-Party Security
* Enterprise Risk Management
* Mergers and Acquisitions
* Executive-Level Reporting
* Cyber Insurance
* External Attack Surface
* Evaluating Subsidiaries

Tables -

SUPPLIERS
=========
id (VARCHAR)
name (VARCHAR)
business_impact (NUMBER)
asset (VARCHAR)
insert_ts (TIMESTAMP)
update_ts (TIMESTAMP)
approval_status (VARCHAR)
approval_by (VARCHAR)
approval_update_ts (VARCHAR)

RATINGS
=======
id (VARCHAR)
supplier_id (VARCHAR)
type (VARCHAR)
name (VARCHAR)
rating (NUMBER)
update_ts (TIMESTAMP)

QUESTIONNAIRES
==============
id (VARCHAR)
supplier_id (VARCHAR)
status (VARCHAR)
created_by (VARCHAR)
created_at (TIMESTAMP)
updated_at (TIMESTAMP)
template_name (VARCHAR)
recipients (VARCHAR)
total_sent (NUMBER)
total_answered (NUMBER)
rating (NUMBER)
important_out_of_policy (BOOLEAN)

ASSETS
======
id (VARCHAR)
supplier_id (VARCHAR)
asset_name (VARCHAR)
asset_type (VARCHAR)
status (VARCHAR)
location (VARCHAR)
insert_ts (TIMESTAMP)
update_ts (TIMESTAMP)

FINDINGS
========
id (VARCHAR)
supplier_id (VARCHAR)
asset_name (VARCHAR)
status (VARCHAR)
test (VARCHAR)
finding (VARCHAR)
severity (VARCHAR)
cves (VARCHAR)
insert_ts (TIMESTAMP)
update_ts (TIMESTAMP)

BUSINESS_INFORMATION
===================
id (VARCHAR)
supplier_id (VARCHAR)
question (VARCHAR)
answer (VARCHAR)
insert_ts (TIMESTAMP)
update_ts (TIMESTAMP)

CERTIFICATIONS
=============
id (VARCHAR)
supplier_id (VARCHAR)
certification (VARCHAR)
link (VARCHAR)
insert_ts (TIMESTAMP)
update_ts (TIMESTAMP)

搜集汇总

背景与挑战

背景概述

该数据集专注于第三方安全风险管理，通过自动化流程帮助企业管理供应商安全评估和风险缓解。它包含供应商、评级、问卷等多个数据表，覆盖从安全合规到资产监控的全面信息。