Supply-chain & third-party security posture for the H&H Nexus estate. Risk scored 0–100 (higher = riskier), mapped to ISO 27001:2022 supplier controls A.5.19–A.5.23. Click any vendor for the full assessment profile.
| Vendor | Category | Risk | Tier | Assessment | Contract |
|---|
2 critical-tier vendors — DataVault Cloud & FinWire Settlement — both carry overdue assessments and contract gaps, and both serve your top two clients (Meridian Bank, GovNet). This is a single point of supply-chain failure feeding directly into client-facing posture. Prioritise reassessment.