S&P Global KY3P® Assessments

S&P Global KY3P Assessments

Third parties deliver business-critical services and goods, but they also introduce risk.

S&P Global KY3P® Assessments facilitates the efficient exchange of standardized and fully validated risk data between service providers and their customers. Our widely adopted methodology gives businesses greater visibility into their supply chain risk while enabling third parties to streamline their risk assessment processes and focus on their customers. Developed in partnership with a consortium of leading global financial institutions, KY3P® Assessments are designed to benefit all market participants.

S&P Global KY3P® Assessments originated as TruSight Solutions, an innovative industry utility built by a consortium of leading financial services companies. Through the acquisition, TruSight was combined with S&P Global KY3P® by S&P Global and integrates into the Market Intelligence division. The acquisition further expands the breadth and depth of S&P Global’s third party vendor risk management solutions by offering high-quality validated assessment data to clients designed to reduce further the vendor due diligence burden on service providers to the financial services industry.

Our Approach

Our methodology was developed to not only align with regulatory requirements and industry standards, but to evaluate how third parties follow global best practices around critical control domains like cloud computing, global data protection, and privacy requirements.

• Methodology
  • Transparent and aligned to regulations, S&P Global KY3P® Assessments covers 27 control domains including cyber, information security, business continuity and operational.
• Access
  • Our consortium model improves operational efficiency and allows businesses to focus high-value resources on strategizing, managing and mitigating risk.
• Easy to Consume
  • Our API service seamlessly integrates with established third-party risk management systems and processes, allowing businesses to consume our validated data in whatever way makes sense for them.
• Improved Third-Party Relationships
  • S&P Global KY3P® Assessments reduces redundant supply chain risk activities - facilitating more collaborative and partnership-based relationships with third parties.

An overview of our assessment products:

• Comprehensive Assessments

  • A comprehensive and holistic validated data set focused on the broadest set of a third party’s control environment.

• Key Controls Assessments

  • A validated data set focused on the most critical controls of a third-party.

• Express Assessments

  • Completed by a recognized audit firm, based upon publicly available attestations (find sample report on AWS marketplace).