Inside ProcessUnity Risk Index: What Makes Up the Rating and How to Use It
ProcessUnity research conducted by our data science team recently found that third parties with weak ProcessUnity Risk Index scores are 47 times more likely to experience a breach. That finding raises a fair follow-up question for any risk team: What exactly goes into a ProcessUnity Risk Index score, and how much weight should you put […]
Third Parties Rated Very Weak by ProcessUnity Risk Index are 47 Times More Likely to Suffer Publicly Reported Breach, ProcessUnity Research Finds
ProcessUnity Research Shows Controls-Based Risk Index Rating Predicts Third-Party Breaches CONCORD, Mass., October 19, 2026 – ProcessUnity, the Third-Party Risk Management (TPRM) company, today released new research showing that third parties rated Very Weak by ProcessUnity Risk Index went on to experience publicly evidenced breaches at 47 times the rate of third parties rated Strong. […]
ProcessUnity Earns ISO/IEC 42001:2023 Certification for Responsible, Human-Guided AI in Third-Party Risk Management
Independent certification from DEKRA validates how ProcessUnity governs the AI behind ProcessUnity Risk Index, giving customers confidence in the AI that powers their TPRM programs. Concord, MA — October 14, 2026 — ProcessUnity, the Third-Party Risk Management (TPRM) company, today announced it has received certification to ISO/IEC 42001:2023 Artificial Intelligence Management System, the international standard […]
Vendor Risk Analysis: How to Prioritize High-Risk Vendors (Without the Guesswork)
In our inherent risk series, we’ve explored what an inherent risk rating is and how to build an effective vendor risk tiering model. But once that baseline is established, a new question emerges: Which high-risk vendors require attention first? It’s a pressing question. ProcessUnity’s State of Third-Party Risk Assessments 2026 report found that organizations assess […]
TPRM AI Agent: Issue Remediator
Writing clear remediation instructions takes time. When language varies by analyst or leaves requirements open to interpretation, vendors may challenge the request instead of addressing the issue, further delaying remediation and leaving issues unresolved.
TPRM AI Agent: Executive Risk Reporter
When leadership asks for a clear view of vendor risk, it can take analysts hours to assemble information from a sprawling record. Inconsistent formats and narratives make it difficult to compare vendors or present a coherent picture of portfolio risk.