AI tool to create flowcharts

1. BU confirms vendors
2. Cyber TPRM Team assesses vendor suitability for TPRM (must staify 1 of the selection criteria)
3. Cyber TPRM team confirms details for the assessment
a. Relationship manager and third party contact
b. Service description
c. Risk criteria
4. Cyber TPRM team sends details to EY to conduct a COI check
5. COI Check result
a. If COI check passes:
i. Introduce vendor to EY via email in templates folder
ii. EY will schedule scoping call with vendor and RM
b. Fails:
i. Introduce vendor to the assessment that Optus will perform
ii. Optus to schedule the scoping call
6. Assessment initiated
7. Vendor submits initial assessment
8. Assess responses and issue follow up questions where required
9. Issue assessment report
10. No findings – assessment closed
11. Findings identified –
a. RM to decide accept risk or remediate.
b. If remediate, goes into remediation tracking
c. Closer to remediation due date, follow up to get remediation evidence from vendor
d. Assess evidence
e. Mark finding as closed
12. End of process for the year