How does a third-party risk assessment actually work and what questions should I be asking our cloud hosting providers
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How does a third-party risk assessment actually work and what questions should I be asking our cloud hosting providers
1 real search · 1 real-search pass
NIST Cybersecurity Framework 2.0 third party risk management cloud service provider due diligence NIST SP 800-161r1 SOC 2 ISO 27001 shared responsibility cloud securityGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 1 queries…
Searches and sources
ChatGPT1 real searches · gpt-6
NIST Cybersecurity Framework 2.0 third party risk management cloud service provider due diligence NIST SP 800-161r1 SOC 2 ISO 27001 shared responsibility cloud security Google ↗
- Guidance on cloud security assessment and authorization - ITSP.50.105 · cyber.gc.ca
- Guidance on cloud security assessment and authorization - ITSP.50.105 · cyber.gc.ca
- SP 800-161 Rev. 1, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations · csrc.nist.gov
- The NIST Cybersecurity Framework (CSF) 2.0 · tsapps.nist.gov
- SP 1326, NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide · csrc.nist.gov
- Risk assessment guide for Microsoft Cloud - Microsoft Service Assurance · learn.microsoft.com
- Cloud Security · cic.gsa.gov
Queries
1 queries · click a column to sort