Resources [Blog ](/blog)[Events ](/events)[Breaches ](/breaches)[Resources ](/resources)[News](/news) # UpGuard Resources UpGuard’s library of ebooks, whitepapers, and reports to help you improve your security posture and keep your data secure. Resources * [Featured](#featured) * [eBooks](#ebooks) * [Guides](#guides) * [Research reports](#research-reports) * [Whitepapers](#whitepapers) * [Checklists](#checklists) * [Templates](#templates) * [Datasheets](#datasheets) * [Brochures](#brochures) * [Infographics](#infographics) * [Spreadsheets](#spreadsheets) ## Featured Whitepaper The Lean Security Team's Playbook for Dark Web incident Response ### The Lean Security Team's Playbook for Dark Web incident Response An operational blueprint for shutting down data leak on the dark web in 60 minutes. [Download](/resources/the-lean-security-teams-playbook-for-dark-web-incident-response) Template Vendor Risk Assessment Template ### Vendor Risk Assessment Template Download this template toolkit to guide your vendor risk assessment efforts. [Download](/resources/vendor-risk-assessment-template) Report The Shadow Supply Chain ### The Shadow Supply Chain Your shortlist isn't your inventory. Download The Shadow Supply Chain report to see how Shadow IT expands your vendor footprint beyond your visibility. [Download](/resources/user-risk-supply-chain) Report G2 Fall 2026 Report: Third Party & Supplier Risk Management ### G2 Fall 2026 Report: Third Party & Supplier Risk Management Read the report to learn why G2 named UpGuard a leading solution for Third Party & Supplier Risk Management. [Download](/resources/g2-report) Report ASX 200 Cybersecurity Report ### ASX 200 Cybersecurity Report The ASX 200 is shifting from ratings to posture. Our report explains the need for this transition and how to meet the new Australian standard for resilience. [Download](/resources/asx-200-cybersecurity-report) Report The Context Gap ### The Context Gap Investigating alerts across your security operations is par for the course. But when your team spends more time hunting for context than actually neutralizing threats, it’s no longer just a time drain—it’s a critical exposure gap. [Download](/resources/the-context-gap) Report The State of Shadow AI - Trends, Insights & Statistics ### The State of Shadow AI - Trends, Insights & Statistics Explore UpGuard’s 2025 “State of Shadow AI” report to uncover trends, insights, and data on how unauthorized AI use is rising in workplaces and increasing risk. [Download](/resources/the-state-of-shadow-ai) Template ISO 27001 Vendor Questionnaire Template ### ISO 27001 Vendor Questionnaire Template Download this template to track vendor compliance with ISO 27001. [Download](/resources/iso-27001-vendor-questionnaire-template) ## eBooks eBook The Education Sector’s Preferred TPRM Platform, Validated by Internet2 ### The Education Sector’s Preferred TPRM Platform, Validated by Internet2 Discover why Internet2 selected UpGuard as its preferred platform to help higher education institutions manage decentralized third-party risk. [Download](/resources/why-internet2-selected-upguard-tprm) eBook Vendor Risk Management for the Decentralized Campus ### Vendor Risk Management for the Decentralized Campus Learn how higher education institutions can accelerate HECVAT assessments, continuously monitor third-party risk, and secure decentralized campuses. [Download](/resources/vendor-risk-management-for-the-decentralized-campus) eBook Higher Education Buyers Guide ### Higher Education Buyers Guide What to look out for when comparing cyber-focused TPRM software for higher education. [Download](/resources/higher-ed-buyers-guide) eBook The Best-Practices Guide: Tiering and Classifying Vendors by Inherent Risk ### The Best-Practices Guide: Tiering and Classifying Vendors by Inherent Risk Learn how to tier and classify vendors by inherent risk using clear criteria, weighted scoring, and override triggers. Build a defensible third-party risk program. [Download](/resources/vendor-tiering-guide) eBook Competitor Comparison Guide: A transparent comparison of top solutions ### Competitor Comparison Guide: A transparent comparison of top solutions A side-by-side comparison of UpGuard with its main competitors in 2025. [Download](/resources/competitor-comparison-guide) eBook 5 Major Third-Party Risk Management Challenges Fixed with AI ### 5 Major Third-Party Risk Management Challenges Fixed with AI Navigate this crowded landscape by diving into the top five challenges in third-party risk management and explaining how the right AI-driven solution can make all the difference. [Download](/resources/5-major-tprm-challenges-fixed-with-ai) eBook Artificial Intelligence and the Future of TPRM ### Artificial Intelligence and the Future of TPRM We break down the differences between various AI technologies, explain how AI provides value in the TPRM workspace, and go under the hood of UpGuard’s advanced AI-powered TPRM solution: Vendor Risk. [Download](/resources/artificial-intelligence-and-the-future-of-tprm) eBook PCI Compliance Without the Headache ### PCI Compliance Without the Headache Learn about how to remain PCI DSS compliant with this in-depth eBook [Download](/resources/pci-compliance-without-the-headache) eBook How to Communicate Third-Party Risk to the Board ### How to Communicate Third-Party Risk to the Board Download this eBook to learn how to communicate TPR to the board. [Download](/resources/communicating-third-party-risk-to-the-board) eBook Top Security Misconfigurations Causing Data Breaches ### Top Security Misconfigurations Causing Data Breaches Download this eBook to learn about the top misconfigurations causing data breaches. [Download](/resources/top-security-misconfigurations-causing-data-breaches) eBook Solving data and identity breaches in India ### Solving data and identity breaches in India Discover how to protect your business in one of the world’s most breached countries. [Download](/resources/solving-data-and-identity-breaches-in-india) eBook A Beginner's Guide to Cybersecurity Insurance ### A Beginner's Guide to Cybersecurity Insurance Learn the basics of cybersecurity insurance with this in-depth eBook. [Download](/resources/a-beginners-guide-to-cybersecurity-insurance) eBook A Quick Guide to Third-Party Cyber Risk in Healthcare ### A Quick Guide to Third-Party Cyber Risk in Healthcare Gain a fundamental understanding of the major third-party risks affecting the healthcare sector, and learn what you can do to mitigate them. [Download](/resources/a-quick-guide-to-third-party-cyber-risk-in-healthcare) eBook APRA CPS 230: A Practical Guide to Third-Party Cyber Risk Management ### APRA CPS 230: A Practical Guide to Third-Party Cyber Risk Management Download this ebook for insights on aligning your TPRM program to the standards of CPS 230. [Download](/resources/apra-cps-230-a-practical-guide-to-tprm) eBook Assessing Vendors Without A SOC Report ### Assessing Vendors Without A SOC Report Download this eBook to learn how to assess vendors that don't have a SOC report. [Download](/resources/assessing-vendors-without-a-soc-report) eBook Attack Surface Reduction Examples to Improve Cybersecurity ### Attack Surface Reduction Examples to Improve Cybersecurity Download this eBook for tips on reducing your attack surface. [Download](/resources/attack-surface-reduction-examples) eBook The Buyer's Guide to Third Party Risk Management ### The Buyer's Guide to Third Party Risk Management Learn about the capabilities you need to understand your third-party risk, manage your vendors, and avoid data breaches. [Download](/resources/buyers-guide-to-third-party-risk-management) eBook Can You Adjust Vendor Security Ratings? ### Can You Adjust Vendor Security Ratings? Download this eBook to learn whether vendor security ratings can be adjusted. [Download](/resources/can-you-adjust-vendor-security-ratings) eBook A Complete Guide to Attack Surface Management ### A Complete Guide to Attack Surface Management Download this eBook to learn how Attack Surface Management helps you monitor and secure your most critical data and assets. [Download](/resources/complete-guide-to-attack-surface-management) eBook A Complete Guide to Cybersecurity ### A Complete Guide to Cybersecurity Download this eBook to learn how to protect your business with an effective cybersecurity program. [Download](/resources/complete-guide-to-cybersecurity) eBook A Complete Guide to Data Breaches ### A Complete Guide to Data Breaches Download this eBook to learn how to avoid a costly data breach with a comprehensive prevention strategy. [Download](/resources/complete-guide-to-data-breaches) eBook A Complete Guide to Third-Party Risk Management ### A Complete Guide to Third-Party Risk Management Download this eBook to learn how to better manage vendor risk with an effective Third-Party Risk Management Program. [Download](/resources/complete-guide-to-third-party-risk-management) eBook A Comprehensive Guide to Preventing Supply Chain Attacks ### A Comprehensive Guide to Preventing Supply Chain Attacks Organizations need detailed visibility into their vendor ecosystems to identify and remediate supply chain vulnerabilities before cybercriminals exploit them. Learn more. [Download](/resources/comprehensive-guide-to-preventing-supply-chain-attacks) eBook Critical cybersecurity threats and KPIs for every business ### Critical cybersecurity threats and KPIs for every business Know the critical cyber threats and KPIs to your business in this digital age. [Download](/resources/critical-cybersecurity-threats-and-kpis-for-every-business) eBook Cyber Resilience Crash Course ### Cyber Resilience Crash Course Get a cyber resilience crash course with this in-depth eBook. [Download](/resources/cyber-resilience-crash-course) eBook Cyber Resilience for the C-Suite ### Cyber Resilience for the C-Suite Learn about how to build a cyber-resilient organization as an executive with this in-depth guide. [Download](/resources/cyber-resilience-for-the-c-suite) eBook Cyber Risk Guide to Vendor Questionnaires ### Cyber Risk Guide to Vendor Questionnaires Learn how to automate the questionnaire process and ensure that the right questions are asked and answered. [Download](/resources/cyber-risk-guide-to-vendor-questionnaires) eBook Debunking Third-Party Cyber Risk Management Myths ### Debunking Third-Party Cyber Risk Management Myths Learn the top myths potentially limiting the impact of your TPCRM efforts. [Download](/resources/debunking-third-party-cyber-risk-management-myths) eBook How to Detect Internet-Facing Assets ### How to Detect Internet-Facing Assets Download this eBook to learn how to detect internet-facing assets. [Download](/resources/detecting-internet-facing-assets) eBook HIPAA and Third-Party Risk Management: A Practical Guide For Healthcare Organizations ### HIPAA and Third-Party Risk Management: A Practical Guide For Healthcare Organizations Learn how healthcare organizations can manage third-party compliance risks in this informative eBook. [Download](/resources/hipaa-and-third-party-risk-management-a-practical-guide-for-healthcare-organizations) eBook HIPAA Compliance Without the Headache ### HIPAA Compliance Without the Headache Learn about how to remain HIPAA compliant without the headache with this in-depth eBook. [Download](/resources/hipaa-compliance-without-the-headache) eBook How to Comply with Australia's CIRMP Rules ### How to Comply with Australia's CIRMP Rules This eBook outlines how to implement a CIRMP-compliant cybersecurity framework and strengthen your risk management program. [Download](/resources/how-to-comply-with-cirmp-rules) eBook How to Implement the Adobe Common Controls Framework ### How to Implement the Adobe Common Controls Framework Download this ebook for guidance on implementing the Adobe Common Controls Framework. [Download](/resources/how-to-implement-the-adobe-common-controls-framework) eBook How To Perform A Cybersecurity Risk Assessment ### How To Perform A Cybersecurity Risk Assessment Cybersecurity risk assessments help organizations understand, control, and mitigate all forms of cyber risk. It is a critical component of risk management strategy and data protection efforts. [Download](/resources/how-to-perform-a-cybersecurity-risk-assessment) eBook India's DPDP Act: A Guide to Third-Party Cyber Risk Management ### India's DPDP Act: A Guide to Third-Party Cyber Risk Management Discover the DPDP Act's key compliance requirements and how to improve your third-party cyber risk management program. [Download](/resources/indias-dpdp-act-a-guide-to-third-party-cyber-risk-management) eBook Is Cybersecurity Hard? ### Is Cybersecurity Hard? Cybersecurity is one of the fastest-growing and most in-demand fields in the tech world, but is cybersecurity hard to learn? [Download](/resources/is-cybersecurity-hard) eBook IT Compliance Risk Management for Banking and Financial Services ### IT Compliance Risk Management for Banking and Financial Services Learn about IT compliance risk management for banking and financial services organizations. [Download](/resources/it-compliance-risk-management-for-banking-and-financial-services) eBook NIST Compliance Guide ### NIST Compliance Guide Learn how the NIST guidelines can help your organization improve its security posture, develop better security controls, and maintain regulatory compliance. [Download](/resources/nist-compliance-guide) eBook Optimizing Third Party Cyber Risk in the Enterprise ### Optimizing Third Party Cyber Risk in the Enterprise Learn about how to optimize third-party cyber risk management program for Enterprises with this eBook. [Download](/resources/optimizing-third-party-cyber-risk-in-the-enterprise) eBook Quick Guide to TPRM in the Financial Sector ### Quick Guide to TPRM in the Financial Sector Get a quick overview of how third-party risk management (TPRM) works in the financial sector. [Download](/resources/quick-guide-to-tprm-in-the-financial-sector) eBook Scaling Third-Party Risk Management Despite the Odds ### Scaling Third-Party Risk Management Despite the Odds Download this eBook guide for tips and strategies on how to scale third-party risk management effectively. [Download](/resources/scaling-tprm-despite-the-odds) eBook The Corporate Consequences of Cyber Crime: Who's Liable? ### The Corporate Consequences of Cyber Crime: Who's Liable? Learn the corporate consequences of cybercrime and who is liable with this in-depth post. [Download](/resources/the-corporate-consequences-of-cyber-crime-whos-liable) eBook The Executive Guide to Third-Party Cyber Risk ### The Executive Guide to Third-Party Cyber Risk Learn about how you, as an executive, can manage your organization's third-party risk. [Download](/resources/the-executive-guide-to-third-party-cyber-risk) eBook The ITIL Guide to Cyber Resilience ### The ITIL Guide to Cyber Resilience Learn about how you can use ITIL to develop a cyber-resilient organization with this in-depth eBook. [Download](/resources/the-itil-guide-to-cyber-resilience) eBook The Ultimate Ransomware Defense Guide ### The Ultimate Ransomware Defense Guide Download this guide for tips on defending against ransomware attacks. [Download](/resources/the-ultimate-ransomware-defense-guide) eBook TPRM Compliance Guide ### TPRM Compliance Guide This TPRM Compliance Guide explores third-party risk management, how it helps you comply, and how to implement an effective third-party risk management program into your existing cybersecurity regimen. [Download](/resources/tprm-compliance-guide) eBook Transforming Third-Party Cyber Risk: From Cumbersome to Constant Vigilance ### Transforming Third-Party Cyber Risk: From Cumbersome to Constant Vigilance Learn why manual TPCRM methods are no longer acceptable. [Download](/resources/transforming-third-party-cyber-risk-from-cumbersome-to-constant-vigilance) eBook Understanding Vendor Risk: Types and Threats ### Understanding Vendor Risk: Types and Threats Learn the different types of vendor risk and the possible threats faced by your vendors and, by extension, your organization. [Download](/resources/understanding-vendor-risk) eBook What is Cyber Risk Quantification? ### What is Cyber Risk Quantification? Download this eBook to learn about CRQ. [Download](/resources/what-is-cyber-risk-quantification) eBook What is Third-Party Risk Management? ### What is Third-Party Risk Management? Third-Party Risk Management (TPRM) is the process of analyzing and minimizing risks associated with outsourcing to third-party vendors or service providers. [Download](/resources/what-is-third-party-risk-management) eBook Why is Executive Reporting in Cybersecurity Important? ### Why is Executive Reporting in Cybersecurity Important? Learn how to deliver an impactful cybersecurity report that drives executive decision-making. [Download](/resources/why-is-executive-reporting-in-cybersecurity-important) ## Guides Guide Top Use Cases for Breach Risk ### Top Use Cases for Breach Risk Learn how teams use UpGuard Breach Risk to monitor attack surfaces, prioritize threats, and detect brand and identity risks. Explore six top use cases in this technical guide. [Download](/resources/top-use-cases-for-breach-risk) ## Research reports Report 2026 Higher Education Third-Party Cyber Risk Report ### 2026 Higher Education Third-Party Cyber Risk Report UpGuard analyzed 515 US universities to map the third-party visibility gap. Discover what’s expanding cyber risk across higher education’s vendor ecosystem. [Download](/resources/2026-higher-education-third-party-cyber-risk-report) Report The Shadow Supply Chain ### The Shadow Supply Chain Your shortlist isn't your inventory. Download The Shadow Supply Chain report to see how Shadow IT expands your vendor footprint beyond your visibility. [Download](/resources/user-risk-supply-chain) Report G2 Fall 2026 Report: Third Party & Supplier Risk Management ### G2 Fall 2026 Report: Third Party & Supplier Risk Management Read the report to learn why G2 named UpGuard a leading solution for Third Party & Supplier Risk Management. [Download](/resources/g2-report) Report ASX 200 Cybersecurity Report ### ASX 200 Cybersecurity Report The ASX 200 is shifting from ratings to posture. Our report explains the need for this transition and how to meet the new Australian standard for resilience. [Download](/resources/asx-200-cybersecurity-report) Report ASX 200 State of Cybersecurity 2024 ### ASX 200 State of Cybersecurity 2024 We analyze the security postures of the top 200 Australian companies in 2024. [Download](/resources/asx-200-state-of-cybersecurity-2024) Report ASX 200 State of Cybersecurity 2025 ### ASX 200 State of Cybersecurity 2025 We analyze the security postures of the top 200 Australian companies in 2025. [Download](/resources/asx-200-state-of-cybersecurity-2025) Report The Context Gap ### The Context Gap Investigating alerts across your security operations is par for the course. But when your team spends more time hunting for context than actually neutralizing threats, it’s no longer just a time drain—it’s a critical exposure gap. [Download](/resources/the-context-gap) Report The State of Shadow AI - Trends, Insights & Statistics ### The State of Shadow AI - Trends, Insights & Statistics Explore UpGuard’s 2025 “State of Shadow AI” report to uncover trends, insights, and data on how unauthorized AI use is rising in workplaces and increasing risk. [Download](/resources/the-state-of-shadow-ai) Report The State of AI Data Leaks: 2025 ### The State of AI Data Leaks: 2025 In this report we analyze how data leaks occur throughout the AI supply chain. [Download](/resources/the-state-of-ai-data-leaks-2025) Report S\&P 500 State of Cybersecurity 2025 ### S\&P 500 State of Cybersecurity 2025 We analyze the impact of key security trends that will affect the S\&P 500 in 2025. [Download](/resources/s-p-500-state-of-cybersecurity-report) Report ASX 200 Security Report (Updated for 2023) ### ASX 200 Security Report (Updated for 2023) We analyze the 2023 security posture of the top 200 Australian companies. [Download](/resources/asx-200-security-report) Report Cybersecurity Spending Survey 2022 ### Cybersecurity Spending Survey 2022 In 2022, we ran an anonymous survey asking cybersecurity industry leaders how they’re preparing their budgets for 2022 and beyond. [Download](/resources/cybersecurity-spending-survey-2022) Report FTSE 100 Security Report (Updated 2023) ### FTSE 100 Security Report (Updated 2023) This report analyzes the security performance of the FTSE 100 index, the top 100 companies trading on the London Stock Exchange (LSE). [Download](/resources/ftse-100-security-report) Report How public documents can be used for attack reconnaissance ### How public documents can be used for attack reconnaissance We analyze Fortune 500 risk profiles, revealing how metadata in public PDFs can be used for attack reconnaissance. [Download](/resources/research-report-public-documents-used-for-attack-reconnaissance) ## Whitepapers Whitepaper The Lean Security Team's Playbook for Dark Web incident Response ### The Lean Security Team's Playbook for Dark Web incident Response An operational blueprint for shutting down data leak on the dark web in 60 minutes. [Download](/resources/the-lean-security-teams-playbook-for-dark-web-incident-response) Whitepaper The State of University Cybersecurity ### The State of University Cybersecurity Learn about the state of cybersecurity in education and what should be done to increase cyber threat resilience in the industry. [Download](/resources/the-state-of-university-cybersecurity) Whitepaper A Guide to Completing Vendor Questionnaires Faster ### A Guide to Completing Vendor Questionnaires Faster Download this whitepaper for tips about getting vendor questionnaires completed faster. [Download](/resources/a-guide-to-completing-vendor-questionnaires-faster) Whitepaper Whitepaper: The State of Cybersecurity in Healthcare ### Whitepaper: The State of Cybersecurity in Healthcare Download this exclusive whitepaper to uncover the leading cybersecurity threats in healthcare and develop essential strategies to protect your organization. [Download](/resources/whitepaper-cybersecurity-in-healthcare) Whitepaper Whitepaper: Data Leak Detection ### Whitepaper: Data Leak Detection Know the difference between traditional and superior Digital Risk Protection Services. [Download](/resources/whitepaper-data-leak-detection) Whitepaper Whitepaper: Risk Remediation Planning ### Whitepaper: Risk Remediation Planning Learn how to intelligently prioritize and remediate cyber risks. [Download](/resources/whitepaper-risk-remediation-planning) Whitepaper Whitepaper: The Ultimate Guide to Cybersecurity Vendor Risk Assessments ### Whitepaper: The Ultimate Guide to Cybersecurity Vendor Risk Assessments Learn how an effective Vendor Risk Assessment process can help your organization to effectively identify vendor security gaps and improve your security posture. [Download](/resources/whitepaper-the-ultimate-guide-to-cybersecurity-vendor-risk-assessments) Whitepaper Whitepaper: Third-Party Risk Management Services ### Whitepaper: Third-Party Risk Management Services Read how to effectively implement third-party risk management (TPRM) framework. [Download](/resources/whitepaper-third-party-risk-management-services) Whitepaper Whitepaper: Ultimate Guide to Security Questionnaires ### Whitepaper: Ultimate Guide to Security Questionnaires With security questionnaires, accurately evaluate vendor security in an age of accelerating digital transformation. [Download](/resources/whitepaper-ultimate-guide-to-security-questionnaires) ## Checklists Checklist 23 NY CRR Checklist ### 23 NY CRR Checklist Download this editable checklist to track your compliance efforts against the 23 NYCRR 500. [Download](/resources/23-ny-crr-checklist) Checklist CISO Checklist: Vendor Risk Management ### CISO Checklist: Vendor Risk Management A checklist outlining the essential components of Vendor Risk Management [Download](/resources/ciso-checklist-vendor-risk-management) Checklist Essential Cybersecurity Metrics Checklist ### Essential Cybersecurity Metrics Checklist Unlock 14 key metrics + bonus Vendor Risk Management KPIs to strengthen your cyber defense strategy. [Download](/resources/essential-cybersecurity-metrics-checklist) Checklist Free Vendor Risk Assessment Questionnaire Template ### Free Vendor Risk Assessment Questionnaire Template A vendor risk management questionnaire is designed to help your organization identify potential weaknesses among your third-party vendors and partners that could result in a data breach, data leak or other type of cyber attack. [Download](/resources/free-vendor-risk-assessment-questionnaire-template) Checklist GDPR Compliance Checklist ### GDPR Compliance Checklist Download this free checklist to track your GDPR compliance efforts. [Download](/resources/gdpr-compliance-checklist) Checklist HIPAA Compliance Checklist ### HIPAA Compliance Checklist Monitor your HIPAA compliance with this 9-step checklist. [Download](/resources/hipaa-compliance-checklist) Checklist HITECH Checklist ### HITECH Checklist Download this free checklist to track your HITECH compliance efforts. [Download](/resources/hitech-checklist) Checklist ISO 27001 Implementation Checklist ### ISO 27001 Implementation Checklist Download this free guide to track your ISO 27001 implementation efforts. [Download](/resources/iso-27001-implementation-checklist) Checklist NIS2 Compliance Checklist ### NIS2 Compliance Checklist Prepare for the updated Network and Information Security Directive with our comprehensive NIS2 compliance checklist. [Download](/resources/nis2-compliance-checklist) Checklist NIST 800-53 Checklist ### NIST 800-53 Checklist Download this editable checklist to track your compliance efforts against NIST 800-53. [Download](/resources/nist-800-53-checklist) Checklist NY SHIELD Act Checklist ### NY SHIELD Act Checklist Download this checklist to track compliance against the NY SHIELD Act [Download](/resources/ny-shield-act-checklist) Checklist SOX Compliance Checklist ### SOX Compliance Checklist Prepare for SOX audits and assess the effectiveness of your security controls using this quick checklist. [Download](/resources/sox-compliance-checklist) Checklist The Email Security Checklist ### The Email Security Checklist Learn about how to prevent email spoofing and other email-based cyber attacks with this in-depth eBook. [Download](/resources/the-email-security-checklist) Checklist The Password Security Checklist ### The Password Security Checklist Learn about how to create a secure password with this in-depth eBook. [Download](/resources/the-password-security-checklist) Checklist The Server Checklist ### The Server Checklist Learn how to create a secure server with this in-depth checklist eBook. [Download](/resources/the-server-checklist) Checklist The Website Security Checklist ### The Website Security Checklist Learn about how to create a secure website with this in-depth checklist. [Download](/resources/the-website-security-checklist) Checklist Third-Party Risk Management Checklist ### Third-Party Risk Management Checklist Download this 5-step third-party risk management checklist to help you implement and maintain a robust TPRM program. [Download](/resources/third-party-risk-management-checklist) Checklist Third-Party Risk Management Metrics Checklist ### Third-Party Risk Management Metrics Checklist Download this Third-Party Risk Management Metrics Checklist to unlock 15 KPIs to track for your TPRM program. [Download](/resources/third-party-risk-management-metrics-checklist) Checklist Vendor Due Diligence Checklist ### Vendor Due Diligence Checklist Use this free vendor due diligence checklist to help streamline your vendor risk assessment process. [Download](/resources/vendor-due-diligence-checklist) ## Templates Template Vendor Risk Assessment Template ### Vendor Risk Assessment Template Download this template toolkit to guide your vendor risk assessment efforts. [Download](/resources/vendor-risk-assessment-template) Template Vendor Tiering Toolkit ### Vendor Tiering Toolkit Launch vendor tiering with a repeatable toolkit: intake questionnaire, risk-to-assessment mapping, weighted scoring, and override protocols. Automate it in UpGuard Vendor Risk. [Download](/resources/vendor-tiering-toolkit) Template ISO 27001 Vendor Questionnaire Template ### ISO 27001 Vendor Questionnaire Template Download this template to track vendor compliance with ISO 27001. [Download](/resources/iso-27001-vendor-questionnaire-template) Template DORA Gap Analysis Template Workbook ### DORA Gap Analysis Template Workbook Use this DORA gap analysis template workbook to map relevant controls from the NIST CSF and ISO 27001 frameworks to the five main pillars of the Digital Operational Resilience Act. [Download](/resources/dora-assessment-workbook) Template PCI DSS Vendor Questionnaire Template ### PCI DSS Vendor Questionnaire Template Download this template to track your vendor's compliance against PCI DSS. [Download](/resources/pci-dss-vendor-questionnaire-template) Template Template: NIST CSF Questionnaire ### Template: NIST CSF Questionnaire Download this template to track your vendor's compliance against NIST CSF. [Download](/resources/template-nist-csf-questionnaire) ## Datasheets Datasheet Brand Protection & Digital Defense ### Brand Protection & Digital Defense Discover how UpGuard Breach Risk protects against brand impersonation, credential leaks, and phishing infrastructure. Monitor threats and respond with guided workflows. [Download](/resources/brand-protection-digital-defence) Datasheet Visibility & Vulnerability Detection ### Visibility & Vulnerability Detection See how UpGuard Breach Risk delivers continuous asset discovery and high-frequency vulnerability scanning. Prioritize exploitable risks and reduce exposure with automated workflows. [Download](/resources/visibility-vulnerability-detection) Datasheet Vendor Risk Datasheet ### Vendor Risk Datasheet Confidence starts with TPRM that never stops [Download](/resources/vendor-risk-datasheet) ## Brochures Brochure General Customer Support Brochure ### General Customer Support Brochure Learn about UpGuard's industry-leading customer success and support service in this brochure. [Download](/resources/general-customer-support-brochure) ## Infographics Infographic 5 Ways to Reduce Third-Party Risk in Healthcare ### 5 Ways to Reduce Third-Party Risk in Healthcare The healthcare industry faces significant third-party risk. Download this infographic to learn key statistics and mitigation strategies. [Download](/resources/5-ways-to-reduce-third-party-risk-in-healthcare) Infographic 4 Ways to Reduce Third-Party Risk in Finance ### 4 Ways to Reduce Third-Party Risk in Finance Download this infographic to get quick tips on how to reduce third-party risks in finance. [Download](/resources/4-ways-to-reduce-third-party-risk-in-finance) ## Spreadsheets Spreadsheet Companies Impacted By CrowdStrike ### Companies Impacted By CrowdStrike To help organizations navigate the CrowdStrike Falcon incident we’ve compiled this list of companies reported to have been impacted by the outage. [Download](/resources/companies-impacted-by-crowdstrike) Spreadsheet Healthcare Top 100 Security Score Index 2024 ### Healthcare Top 100 Security Score Index 2024 We ranked the security of the top 100 healthcare companies. See how you compare. [Download](/resources/healthcare-top-100-security-score-index-2024) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?) Sign up for UpGuard's monthly newsletter