Vendor Risk Assessment Framework
Systematize vendor risk assessment with scoring matrices and compliance frameworks
What You Can Do
You can evaluate vendors comprehensively across security, financial stability, operations, and compliance using structured scoring matrices. Claude generates detailed risk assessments, produces vendor comparison reports, and recommends approval/rejection decisions backed by quantified scores.
Features
Score vendors on data protection, breach history, and security certifications
Analyze creditworthiness, cash flow, and financial health indicators
Rate vendor reliability, service continuity, and delivery track record
Verify regulatory compliance, audit status, and industry certifications
Side-by-side scorecards with weighted scoring across all dimensions
Classify vendors as low/medium/high risk with actionable mitigation strategies
Generate buy/no-buy recommendations with confidence scores
Adapt weighting and criteria to your industry and risk tolerance
Example Output
Vendor Risk Scorecard Example:
| Dimension | Score | Weight | Weighted Score | Status |
|---|---|---|---|---|
| Security | 7.5/10 | 30% | 2.25 | ⚠️ Acceptable |
| Financial Stability | 8.2/10 | 25% | 2.05 | ✅ Strong |
| Operations | 6.8/10 | 25% | 1.70 | ⚠️ Acceptable |
| Compliance | 9.1/10 | 20% | 1.82 | ✅ Excellent |
| Overall Risk Score | — | — | 7.82/10 | APPROVE |
Vendor Comparison Example: Vendor A: 7.82 (Approve with conditions) | Vendor B: 6.4 (High risk, require remediation) | Vendor C: 8.9 (Approved for premium tier)
Recommendation: "Vendor A is acceptable for non-critical operations. Require quarterly security audits and annual financial review. Vendor B needs 90-day improvement plan before consideration."
What's Included
- SKILL.md: Complete vendor assessment framework with decision matrices and scoring methodology
- Vendor Scorecard Template: Structured assessment form for consistent evaluation across dimensions
- Security Assessment Checklist: Detailed security criteria including data protection, certifications, and breach history
- Financial Analysis Worksheet: Financial stability indicators with interpretation guide and red flag triggers
- Comparison Matrix: Multi-vendor evaluation template with automatic weighting calculator
- Risk Mitigation Playbook: Action plans and remediation strategies for each risk category
- Decision Documentation Sheet: Record assessment, scores, rationale, and approval chain
Who It's For
- Procurement managers — Vet vendors before contract negotiations and onboarding
- Risk managers — Conduct vendor risk assessments for compliance, audit, and governance
- Supply chain directors — Evaluate critical vendor partnerships, redundancy, and alternatives
- Compliance officers — Ensure vendors meet regulatory, security, and industry requirements
- Finance teams — Assess financial viability, creditworthiness, and long-term stability
Best For
- Onboarding new vendors or evaluating major suppliers
- Periodic vendor health checks and re-certification cycles
- Comparing multiple vendors for strategic procurements
- Risk-based vendor tiering and portfolio categorization
- Security audits, compliance reviews, and due diligence
You might also like
You'll structure high-stakes architectural decisions using a proven enterprise framework that systematically evaluates options, assesses risks, aligns stakeholders, and documents trade-offs. This skill guides you through decision matrices, financial impact analysis, implementation planning, and post-decision reviews—ensuring your organization makes defensible architectural choices that scale.
by nakano1122
Claude systematically analyzes production incidents to identify root causes, contributing factors, and systemic vulnerabilities in your infrastructure. You'll receive structured postmortems that guide your team through incident timelines, pinpoint what actually failed, and prioritize infrastructure improvements that prevent recurrence. The skill also detects patterns across your incident history—revealing repeated failures that point to deeper architectural weaknesses.
by nakano1122
You can rapidly map your security controls to major regulatory frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS), automatically identify compliance gaps, and generate audit-ready evidence packages. The skill analyzes your control inventory against framework requirements, flags missing or inadequate controls, and produces structured documentation that accelerates compliance reviews and audit preparation.
by nakano1122
This skill generates comprehensive, personalized buyer education and real-time guidance tailored to each client's experience level and concerns. You'll handle objections with empathy and data-backed responses, guide clients through every transaction stage with clear next steps, and build buyer confidence that turns hesitation into action. It creates customized scripts, educational resources, and FAQ compilations that work across real estate, automotive, insurance, and B2B sales.
by nakano1122
Create comprehensive digital transformation roadmaps that span 3-5 years with phased initiatives, business cases, and risk mitigation strategies. This skill helps you align technology investments with business objectives, prioritize competing initiatives by impact and effort, and communicate transformation plans clearly to executive stakeholders. You'll generate ROI projections, resource requirements, and success metrics for each phase.
by nakano1122
Perform comprehensive financial analysis on multifamily acquisitions, from pro forma development to underwriting memoranda. Generate sensitivity analyses, cash flow projections, and investment metrics (IRR, CoC, NOI) that help you evaluate deal quality and portfolio performance. Create institutional-grade reports with rent rolls, expense breakdowns, and risk assessments for due diligence, lender presentations, or investor pitch decks.
by nakano1122
You get immediate structured incident assessment and response coordination. Claude analyzes incident severity, impact scope, and escalation requirements—then generates decision trees, stakeholder communication templates, and post-incident review guides. This skill accelerates your response from triage through resolution to after-action review.
by nakano1122
You can systematically identify performance bottlenecks in your frontend application across React, Vue, and Angular frameworks. This skill analyzes your codebase for common anti-patterns, runtime behavior, and bundle metrics to pinpoint the slowest components and queries. You'll receive a data-driven optimization roadmap prioritized by impact and implementation effort, complete with specific code examples and effort estimates your team can execute immediately.
by nakano1122