VISO TRUST Delivers 3rd Party Cyber Risk Assessments in Minutes

Oct 25, 2023 | News

New updates to VISO TRUST’s patented AI-driven third-party risk management (TPRM) platform promise to fundamentally transform the reach, effectiveness, operational efficiency and economics of TPRM programs.  

The Company said its VISO TRUST platform now identifies high-risk vendors with 500% greater accuracy, advancing TPRM program effectiveness and eliminating bottlenecks, while delivering near real-time cybersecurity control detection/analysis. It lets organizations identify high-risk vendors with new speed and precision, providing substantial market agility advantages.

James Nelson, VP of Information Security at Illumio, said: “VISO TRUST has enabled us to bring the security staff time per relationship down from more than 8 hours to only 30 minutes—for us that’s gold.”

New VISO TRUST features include:

– Rapid Risk Analysis:  Assessment time is reduced to minutes, allowing organizations to make swift, informed decisions with 5x more relevant findings than are typically found with manual and alternative automated approaches.

– Infinite Potential Risk Network Ecosystem: The VISO TRUST Risk Network fosters collaboration and information sharing among organizations, strengthening collective security and resilience across growing third and Nth party relationships.

– Expansion of New Controls Detection: VISO TRUST’s “Risk Dimensions” extends coverage across various risk areas, including AI trust, cyber insurance, resilience, privacy, relevant regulatory compliance and product security, providing a comprehensive view of vulnerabilities. This next-level visibility empowers organizations to proactively identify and mitigate risks across a wide spectrum of security domains.

– Expansion of Artifact Intelligence: The platform leverages generative AI to enable unprecedented use cases, seamlessly translating security control information between questionnaires and diverse source artifacts and evidence.

– Cumulative Impacts: The impacts of these technological advancements is staggering. Organizations can now achieve a reduction in third-party security risk exceeding 95%, spend less than 5 minutes to assess a vendor, and are 5 times more likely to identify high-risk vendors, setting a new industry standard for security, risk management and compliance teams and leaders.

VISO TRUST’S patented Artifact Intelligence TPRM process translates security control information, and is backed by an exceptional assurance and risk modeling accuracy rate exceeding 98%. It derives information from an extensive range of public and private sources, including policies, standards, trust portals, trust reports (such as SOC, ISO, and PCI reports), penetration test reports, and automated compliance platforms.

The Company notes that the mass migration of data onto third and Nth party SaaS, PaaS, and IaaS platforms has put sensitive data at unprecedented risk. VISO TRUST’s accuracy and near real-time vendor risk analysis sharply lowers risk assessment costs and improves accuracy of cyber threat detection.

Paul Valente, CEO of VISO TRUST, said: “VISO TRUST’s AI-driven breakthrough heralds a paradigm shift that will redefine third-party risk management effectiveness. By translating complex security information into actionable insights sourced from diverse artifacts and evidence, we empower organizations to make informed decisions with unparalleled precision and timeliness.”

“VISO TRUST’s continued innovation represents a quantum leap in third-party risk management,” said Enrique Salem, Partner at Bain Capital Ventures. “The ability to harness AI for synthesizing information from diverse sources into actionable insights is a game-changer for third-party and cyber risk.”

A self-guided interactive demo of VISO’s AI platform and free AI cyber risk assessment are available.

Register as an ITBriefcase.net member to unlock exclusive access to a treasure trove of premium IT content and stay ahead in the fast-paced world of technology.

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more
Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

Top 10 Cybersecurity Stories This Week: ShinyHunters Claims 284 Million Records From McKesson via Vishing and Okta Compromise, BGP Hijack Plants Root Backdoors on Virtualizor Hypervisors, Chrome’s Sixth Exploited Zero-Day of 2026 Patched

September 4, 2026 | ITBriefcase.net Why it matters: ShinyHunters claimed responsibility for a breach of McKesson Corporation — the largest pharmaceutical distributor in North America, delivering approximately one-third of all prescription medicines to US hospitals,...

read more
Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

Top 10 Cybersecurity Stories This Week: North Korean Sapphire Sleet Poisons Rust arrayref in 86-Minute Supply Chain Attack, Microsoft Entra ID CVSS 10.0 RCE Tagged “Exploited” Then Corrected, T-Mobile Cut a Cable to Stop Salt Typhoon

August 28, 2026 | ITBriefcase.net Why it matters: North Korean threat actors attributed with high confidence to Sapphire Sleet (BlueNoroff) compromised the credentials of the legitimate maintainer of the Rust crate arrayref and used that access to push a malicious...

read more