ProcessUnity Introduces AI for Third-Party Risk Management

ProcessUnity has introduced a new generative AI tool called Evidence Evaluator, designed to enhance third-party risk management. Announced in a press release, this tool aims to reduce the manual effort involved in assessing and validating third-party security controls by automating the review of certifications, policies, and other assessment-related documentation.

Evidence Evaluator is integrated into ProcessUnity's Third-Party Risk Management (TPRM) Platform and is built on a large language model specifically trained for cybersecurity. It automatically reviews third-party evidence, generates responses to questionnaires, and flags discrepancies in controls, providing a faster and more accurate alternative to manual assessments.

The tool is designed to handle various documents, including SOC reports, ISO certifications, and compliance attestations, and is adaptable to different standards and regulations. By embedding this AI directly into their platform, ProcessUnity aims to provide immediate benefits to risk management teams, enhancing the efficiency and accuracy of vendor assessments.