Provider Name

ICT Service Type

Impact in case of unavailability

Low

Medium

High

Critical

Operational dependency level

Low

Medium

High

Ease of substitution

Easy

Moderate

Difficult

Certifications held

ISO 27001 SOC 2 Type II ISO 22301 (Business Continuity) PCI-DSS

Types of data processed

Critical financial data Customer personal data Trade secrets Operational data

Primary location

Data transfer mechanisms

Standard Contractual Clauses (SCC) Binding Corporate Rules (BCR) Adequacy decision

Contractual elements in place

Defined SLA with penalties Contractual audit right Documented exit plan Subcontractor control Incident notification procedure

Review frequency

🔍 Third-Party Risk Scorer

📋 Provider Information