Verolara › Vendor evaluation, RFI/RFP and selection advisory
Vendor evaluation, RFI/RFP and selection advisory
Help choosing the right provider: building the RFI or RFP, defining evaluation criteria, performing due diligence, and recommending a selection, with security, privacy, and third-party risk built in from the start.
Why this is being asked
Breaches involving a third party have risen about 60% in a year, and the share varies widely by sector: manufacturing 61%, small and midsize businesses 55%, education 40%, public administration 36%, financial services 34%, healthcare 32%. A questionnaire is a snapshot, so we evaluate vendors for how they govern, monitor, and fix, including how they use AI.
Source: Verizon, 2026 Data Breach Investigations Report, May 19, 2026.
What is included
- RFI/RFP development: requirements, questionnaires, and scoring criteria
- Vendor and provider evaluation, shortlisting, and reference checks
- Security and third-party risk due diligence
- Contract security and privacy requirements review
- Selection recommendation and executive decision summary
Typical situations
Selecting a managed security provider, a cloud or AI platform, or a compliance tool; replacing an underperforming provider; or putting a defensible process around a purchase your board, customers, or auditors will ask about.
Related
See also AI governance readiness and support for portfolio companies.