With the increased connectivity of supply chains, a modern and efficient third-party risk management programme is necessary to identify and remediate issues before they become an incident or breach. Proactive tools such as security ratings cannot mitigate this risk alone, but they are a necessary component of good cybersecurity programmes and governance. Creating an automated security incident workflow is common via a security, orchestration, automation and response (SOAR) solution. However, the cost of integrating and implementing this with traditional solutions for managing vulnerability to cyberattack is prohibitive because licence costs increase with the number of suppliers. Security assessments are combined with continuous monitoring of the internet to deliver automated “event-based” evaluations. Vulnerabilities discovered by scanning then link with third-party threat feeds to enable automated rules that trigger the sending of an assessment questionnaire immediately after a potential threat is detected. This event-based approach improves on the usual method of periodically sending questionnaires by: – Enabling immediate reassessment of a vendor with no input required by the cybersecurity team – Scaling to thousands of continuously monitored companies instead of choosing only a select few – Providing score-drop events, breach events and individual security vulnerabilities and exposures to trigger an assessment – Tailoring the assessment sent based on the vendor portfolio to specific standards and frameworks – Maintaining a small vendor risk management team while providing expanded coverage Learning that a vendor experienced a data breach 11 months ago when reading its annual response to your questionnaire is definitely not adequate. Cybersecurity monitoring needs to follow the continuous evolution of cyber threats with the addition of automation at scale.