GRC third-party risk diagram

Use this skill to structure the GRC content and visual pattern for vendor intake, tiering, questionnaires, security/privacy/legal review, contracting, and ongoing monitoring. Then use the drawio skill to generate the native editable .drawio file and optional PNG/SVG/PDF export.

Common Requests

• new vendor intake
• security questionnaire workflow
• vendor tiering
• DPIA handoff
• continuous vendor monitoring

Recommended Elements

Include these when relevant: