Supplier risk management, due diligence, data protection agreements (DPAs), subcontracting and ongoing monitoring — in line with DORA’s ICT supplier rules and ISO 27036.
Everything you need for third party management — inventory, due diligence, contracts and monitoring — all within the same platform as the rest of your governance.
Supplier register and classification by criticality.
Due diligence and structured supplier onboarding.
Security assessments and supplier questionnaires.
DPA, data transfer mechanisms and privacy due diligence.
Register of ICT suppliers and concentration risk (DORA).
Continuous monitoring of value chain risk.
Governance of subcontracting and outsourced services.
Third-party audits and follow-up on findings.
Assess a supplier once and iComply will flag them against all the standards and laws that require it — without any duplication of effort.
Scope & diagnosis
Define the scope and carry out a GAP analysis against the selected standards.
Map controls
Select controls; iComply automatically maps them to each relevant framework.
Collect evidence
Assign tasks, upload evidence once and reuse it across all requirements.
Audit & monitor
Carry out audits, track CAPA and monitor compliance on an ongoing basis.
