Whistic Inc.

ACTIVE VENDOR SECURITY

Software as a service (SAAS) services featuring software for a security information exchange that provides a customer of a third-party vendor a current security posture of the third-party vendor;

CONTINUOUS ASSESSMENTS

Software as a service (SAAS) services featuring software for assessing a current security posture of a third-party vendor using up-to-date security information obtained from the third-party vendor;

CONTINUOUS QUESTIONNAIRES

Software as a service (SAAS) services featuring software for obtaining up-to-date security information from a third-party vendor to determine a current security posture of the third-party vendor;

CONTINUOUS VENDOR SECURITY

Software as a service (SAAS) services featuring software for a security information exchange that provides a customer of a third-party vendor a current security posture of the third-party vendor;

CROWDCONFIDENCE

CROWD CONFIDENCE;Software as a service (SAAS) services featuring software for vendor assessment using vendor assessment questionnaires and vendor scores representing a risk potential of a vendor;

THE SINGLE SOURCE OF TRUST FOR BUYERS AND SELLER

Software as a service (SAAS) services featuring software for cybersecurity, evaluating an organization's governance, risk management, and compliance (GRC) practices, vendor assessment, evaluating supplier and vendor management, obtaining and evaluating security questionnaire response data, obtaining and evaluating request for proposal (RFP) and request for information (RFI) response data, integrated risk management, vendor risk management, audit and self-assessment management, risk information exchange, third party risk management, risk assessment, information security and compliance and providing a catalog of vendors with profiles containing security and compliance information for determining vendor compliance requirements;

TRUST CATALOG

CATALOG;Software as a service (SAAS) services featuring software for cybersecurity, governance, risk, and compliance (GRC), vendor assessment, supplier and vendor management, security questionnaire response, request for proposal (RFP) and request for information (RFI) response, integrated risk management, vendor risk management, audit and self-assessment management, risk information exchange, third party risk management, risk assessment, information security and compliance, catalog of vendors with profiles containing security and compliance information for determining vendor compliance requirements;

VENDOR SECURITY NETWORK

SECURITY NETWORK;Software as a service (SAAS) services featuring software for sharing security information contained in vendor security profiles among a network of business customers;

WHISTIC

Software design and development, namely, cybersecurity software, governance, risk, and compliance (GRC) software, vendor assessment software, supplier and vendor management software, security questionnaire response software, request for proposal (RFP) and request for information (RFI) response software, integrated risk management software, vendor risk management software, audit and self-assessment management software, risk information exchange software, third party risk management software, risk assessment software, information security software, and compliance software;

WHISTIC

software as a service (SAAS) services featuring software for cybersecurity, governance, risk, and compliance (GRC), vendor assessment, supplier and vendor management, security questionnaire response, request for proposal (RFP) and request for information (RFI) response, integrated risk management, vendor risk management, audit and self-assessment management, risk information exchange, third party risk management, risk assessment, information security, and compliance;

ZERO-TOUCH ASSESSMENT

ASSESSMENT;Software as a service (SaaS) services featuring software for evaluating a security posture of a third-party vendor, namely, enabling third-party vendors to publish security profiles to a catalog of vendors, and providing interested companies with ondemand access to the security profiles in the catalog of vendors to evaluate the security profiles;