Fortrex Technologies - Providing Compliance & Risk Management services since 1997
- VendManage: Fortrex executes your entire third-party risk management program, significantly reducing costs and always being prepared for an exam which reduces the risk of a finding.
- VendSure: Fortrex reduces your risk and cost by completing the heavy lifting analysis of your high risk and critical vendors. The analysis is robust, comprehensive, and thorough, allowing staff to report to your Board of Directors.
- VendorPoint: Fortrex provides a flexible third-party risk management solution, minimizing your labor costs and risk by prompting your staff to complete only and exactly the work they need to complete. Ensure that you are always prepared for a regulatory exam or internal audit.
- Consulting and Advisory Services: Fortrex consults with you to review and update your policies and other areas of your risk program. Reduce audit and exam risk by keeping your policies up to date with current regulations and standards.
- Resiliency as a Service (RaaS) BCP: Fortrex reduces your resiliency risk by ensuring your business continuity, disaster recovery, and third-party risk management programs are in alignment. Knowing how vendors impact your ability to recover from an event and execute business during and immediately after an event provides you with the opportunity to mitigate issues before they cost you time, money, and reputation.
- Breach and Hack Support: For events like SolarWinds and MOVEit, Fortrex reduces your post-breach and post-hack exposure risk by contacting your vendors to determine how they have been impacted and what they are doing to mitigate risk.
- Real-time Scans: Fortrex provides real-time scan information for onboarding and monitoring third parties. The scan includes adverse press coverage, watchlists, blacklists, sanctions, bribery and corruption, litigation, ESG, and more.
- Digital Attack Surface Risk Assessment: Fortrex helps protect you from reputation and operation risk issues by providing comprehensive discovery of your and your vendors’ internet-facing assets in the surface, deep, and dark web. How robust is your trusted vendor’s cyber-hygiene?
- Risk Automation Center/ERM: Fortrex ties together your enterprise risk programs so that you have a comprehensive risk management program. The program is implemented and maintained by regulatory experts, working alongside your staff to preserve the institution’s integrity and reputation while increasing automation and reducing costs.
- Contract Review: Fortrex supports confidence and opportunities for price reductions through contract reviews prior to onboarding. The contract is evaluated against FFIEC guidance, so you are aware of what the vendor has and has not included. With this knowledge you will position your institution for negotiation and require mitigation actions prior to contract execution.
- ESG/Environmental, Social, Corporate Governance: Fortrex provides ESG consulting services including building out risk frameworks based on the upcoming and evolving regulatory environment, finetuning your ESG program.