Can you assess thousands of third parties?

Yes — tiered. Automated resolution and scoring across the full population, with human investigation reserved for the tail that matters.

Brief / CIG-SVC-05

Enterprise, geopolitical and third-party risk

Risk is a portfolio, not a checkbox. We help clients understand where exposure concentrates across counterparties, jurisdictions, sectors and time.

Concentration is the risk that balance sheets miss. We map exposure across the whole book — supplier, customer, jurisdiction, currency, sector and political dependency — and identify the single points whose failure would propagate.

§ 01Method

DOMAIN / RSK

REVIEW / HUMAN-ADJUDICATED

01
Exposure mapping at portfolio scale
Third parties are resolved to their true ownership and operating footprint, then aggregated to reveal shared dependencies: a common upstream supplier, a single sanctioned-adjacent shareholder, one jurisdiction underwriting a disproportionate share of revenue.
02
Sanctions and cross-border analysis
Direct listings are the easy part. We assess ownership-and-control thresholds, secondary sanctions reach, diversion and transshipment patterns, and the licensing posture of each relevant regime.
03
Geopolitical and country assessment
Country briefings are written by analysts with regional depth, covering regulatory trajectory, enforcement behaviour, expropriation and capital-control precedent, and the political economy that determines how rules are actually applied.
04
Scoring you can defend
Methodologies are transparent, weighted deliberately and back-tested. A risk score that cannot be explained to a board or an auditor is not a control.

// Scope of work

01Geopolitical risk analysis and country risk briefings
02Sanctions exposure, secondary sanctions and cross-border risk
03Third-party and vendor risk assessments at scale
04Sector-specific risk scoring methodologies
05Cyber-adjacent business intelligence and threat context
06Reputational risk analysis and stakeholder mapping

// Deliverables

D01Third-party risk portfolio assessment with concentration analysis
D02Sanctions exposure review including ownership-and-control testing
D03Country and geopolitical risk briefings
D04Sector risk scoring methodology and documentation
D05Stakeholder and reputational exposure map

§ 02When to engage

// Trigger

Rapid supplier or distributor expansion into higher-risk markets

// Trigger

Revenue concentration in a jurisdiction facing sanctions or capital controls

// Trigger

Vendor base too large for manual review but too risky to leave unscored

// Trigger

Board asking for a defensible view of aggregate exposure

// Outcome

"A clear-eyed view of where the next problem is likely to originate."

§ 03Questions

Can you assess thousands of third parties?: Yes — tiered. Automated resolution and scoring across the full population, with human investigation reserved for the tail that matters.