{"id":"FR2434074613","name":"Third-Party Risk Intelligence System (TRIS)'s","provider":"NormShield, Inc. DBA Black Kite","providerSlug":"normshield-inc-dba-black-kite","status":"FedRAMP Ready","impact":"Moderate","authType":"Agency","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Analytics","Cybersecurity & Risk Management"],"assessor":"Linford & Company","assessorId":"140531","smallBusiness":true,"website":"https://gov.blackkitetech.com/","description":"Black Kite is delivered as a SaaS offering using a multi-tenant public cloud computing environment. It is available to the public, federal, state, local, and tribal governments, as well as research institutions, federal contractors, government contractors etc. Black Kite offers a separate configuration for federal/public sector customers to maintain the highest possible level of information security. Black Kite provides a defensive platform that spans the entirety of the third-party risk management life cycle for cyber risk professionals looking to quantify and maintain visibility of their risk exposure.\nBlack Kite’s core application, is a multi-user, transaction-based application suite that gives a three-dimensional risk picture of a company and its vendors through:\n• A cyber risk technical assessment.\n• A factor analysis of information risk (FAIR) analysis (the probable financial impact of a breach caused by a vendor).\n• An external estimate of compliance (assessing that vendors have appropriate policies and processes in place).\n• Executives get an easy-to-understand “Cyber Risk Report” with letter grade scores.\n• IT security teams can drill down to the technical details behind each risk category.\n• Risks/vulnerabilities are prioritized by severity so that security engineers can quickly identify critical issues and mitigate them.\n• Industry benchmarks and comparisons are provided to help identify trends and pinpoint areas for improvement.\n• Grading is based on industry standards and best practices (NIST, MITRE CVSS, FAIR, etc.)\n","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/TRIS%20Logo.png","inMarketplace":true,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"timeline":[{"date":"2026-03-25","to":"FedRAMP Ready","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Linford & Company"},"trustCenterCheck":null}