Overview Comprehensive vendor assessment and due diligence framework for IT service providers, technology vendors, and third-party service providers. Creates structured risk assessments, evaluation reports, and ongoing monitoring frameworks across financial, operational, compliance, security, and reputational dimensions.
LEGAL DISCLAIMER IMPORTANT: This skill provides general information and frameworks for vendor assessment purposes only. It does NOT constitute legal, financial, or professional advice. Users should:
The frameworks provided are templates only. Actual vendor assessments require expertise in law, finance, cybersecurity, and risk management. Neither the skill creator nor Claude/Anthropic assumes any liability for decisions made based on this skill's output.
用於評估 IT 服務提供者、技術供應商和第三方合作夥伴的框架。使用監管清單(GDPR、DORA、NIS2、SOX)建立跨財務、營運、合規、安全和聲譽維度的結構化風險評估。在下列情況下使用:(1) 評估新供應商或技術供應商,(2) 進行第三方採購風險評估,(3) 執行關鍵供應商盡職調查以確保合規性,(4) 建立供應商入職文檔,(5) 建立持續的供應商監控流程,(6) 評估供應商集中度風險,或 (7) 產生執行級供應商風險報告。 來源:lawvable/awesome-legal-skills。