The exercise
As part of GRC Mastery coursework, I developed a supplier discovery and classification approach, designed a vendor security questionnaire and evaluated scenario responses.
The exercise led to risk-rated findings and remediation recommendations. It is included as applied learning, not as professional ownership of a third-party risk program.
Work completed in the scenario
Supplier classification
Organized suppliers to support a structured approach to assessment.
Security questionnaire
Developed questions to gather information about the supplier’s security practices.
Response assessment
Evaluated the scenario responses and recorded risk-related observations.
Recommendations
Produced risk-rated findings and proposed remediation actions.
Connection to my client work
My professional contracting work involves coordination with clinic owners and MSP stakeholders. That provides experience with technical clarification, documentation and handoff, while the coursework introduces a distinct supplier-risk assessment process.
I do not treat routine vendor coordination as equivalent to a formal third-party security assessment.
What this page establishes
This case study demonstrates coursework exposure to vendor-risk documentation. It does not claim verified supplier compliance, a real procurement decision or professional review of a particular assurance report.
Read about my professional client work