The Ultimate Service Provider Due Diligence Checklist

This document outlines best practices for managing third-party and service provider cyber risk, including inventorying providers, collecting corporate and cyber-risk information, classifying providers by risk, calculating risk ratings, and continuously monitoring security posture. It emphasizes due diligence before engaging service providers and describes how SecurityScorecard can help assess security ratings, detect leaked credentials, and streamline risk assessments.