{"id":522,"date":"2026-11-05T11:40:17","date_gmt":"2026-11-05T11:40:17","guid":{"rendered":"https:\/\/cgcspain.com\/servicios\/grc-cumplimiento-normativo\/gestion-riesgos-terceros\/"},"modified":"2026-11-06T10:20:36","modified_gmt":"2026-11-06T10:20:36","slug":"gestion-riesgos-terceros","status":"publish","type":"page","link":"https:\/\/cgcspain.com\/en\/servicios\/grc-cumplimiento-normativo\/gestion-riesgos-terceros\/","title":{"rendered":"Third-party and supplier risk management"},"content":{"rendered":"\n<style id=\"cgc-svc-css\">\n\/* CGC \u00b7 Plantilla de p\u00e1gina de servicio (estilos de p\u00e1gina, usan los tokens --cgc-* del tema) *\/\n.cgc-svc-card{border:1px solid var(--cgc-line);border-radius:16px;background:#fff;transition:transform .2s ease,border-color .2s ease,box-shadow .2s ease}\n.cgc-svc-card:hover,.cgc-svc-card:focus-within,a.cgc-svc-card:focus-visible{transform:scale(1.015);border-color:var(--cgc-teal-bright);box-shadow:0 0 0 1px var(--cgc-teal-bright)}\na.cgc-svc-card{display:block;color:inherit;text-decoration:none}\n[class*=\"cgc-svc\"] :focus-visible,a.cgc-svc-card:focus-visible,.cgc-svc-float:focus-visible{outline:3px solid var(--cgc-teal-bright);outline-offset:3px}\n.cgc-svc-onDark :focus-visible,.cgc-svc-band :focus-visible,a.cgc-svc-feat:focus-visible{outline-color:var(--cgc-sky)}\n.cgc-pg h2 em,.cgc-svc-h2 em{font-style:normal;font-weight:400;color:var(--cgc-teal-bright)}\n.cgc-svc-h2{margin:0 0 clamp(28px,3.4vw,56px);max-width:24ch}\n.cgc-svc-h3,.cgc-svc-scope__body h3,.cgc-svc-step h3{font-family:var(--cgc-font-display);font-weight:300;font-size:clamp(21px,2vw,30px);line-height:1.1;color:var(--cgc-teal-deep);margin:0}\n.cgc-svc-link a,a.cgc-svc-link{font-family:var(--cgc-font-display);font-weight:500;font-size:14px;letter-spacing:.2em;text-transform:uppercase;color:var(--cgc-teal-dark);text-decoration:underline;text-decoration-thickness:1px;text-underline-offset:6px}\n.cgc-svc-link a::after,a.cgc-svc-link::after{content:\" \u2192\";letter-spacing:0}\n\/* Propuesta de valor *\/\n.cgc-svc-value{display:flex;flex-wrap:wrap;gap:clamp(32px,5vw,96px);align-items:center}\n.cgc-svc-value__txt{flex:1 1 520px;min-width:0}\n.cgc-svc-value__txt p{font-size:clamp(20px,1.65vw,26px);line-height:1.55;color:var(--cgc-muted);margin:0 0 1em;max-width:60ch}\n.cgc-svc-value__txt .cgc-svc-h2{max-width:20ch;margin-bottom:clamp(24px,2.6vw,40px)}\nfigure.cgc-svc-value__pic{flex:1 1 380px;min-width:0;max-width:640px;margin:0;aspect-ratio:4\/5;border-radius:16px;overflow:hidden;border:1px solid var(--cgc-line)}\n.cgc-svc-value__pic img,.cgc-svc-case__pic img{width:100%;height:100%;object-fit:cover;display:block}\n\/* Alcance *\/\n.cgc-svc-scope{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,480px),1fr));gap:clamp(16px,1.8vw,28px)}\n.cgc-svc-scope__item{display:flex;gap:clamp(16px,1.8vw,26px);align-items:flex-start;padding:clamp(22px,2.4vw,36px)}\n.cgc-svc-check{flex:0 0 56px;width:56px;height:56px;border-radius:50%;background:var(--cgc-stone);display:grid;place-items:center;color:var(--cgc-teal-deep)}\n.cgc-svc-check svg{width:24px;height:24px}\n.cgc-svc-scope__body{flex:1 1 auto;min-width:0}\n.cgc-svc-scope__body h3{margin:6px 0 10px}\n.cgc-svc-scope__body p,.cgc-svc-step p{color:var(--cgc-muted);margin:0}\n\/* CTA intermedio *\/\n.cgc-svc-band{position:relative;isolation:isolate;overflow:hidden;background:var(--cgc-gradient);border-radius:16px;padding:clamp(32px,4.4vw,72px) clamp(24px,4.4vw,80px);display:flex;flex-wrap:wrap;gap:clamp(24px,3vw,48px);align-items:center;justify-content:space-between}\n.cgc-svc-band>.cgc-art{z-index:-1;opacity:.55}\n.cgc-svc-band__txt{flex:1 1 480px;min-width:0;margin:0;font-family:var(--cgc-font-display);font-weight:200;font-size:clamp(26px,2.7vw,44px);line-height:1.15;color:#fff;max-width:28ch}\n.cgc-svc-band .wp-block-buttons{margin:0}\n.cgc-svc-btn-white .wp-block-button__link{background:#fff;color:var(--cgc-teal-deep);border-radius:8px;font-family:var(--cgc-font-display);font-weight:500;font-size:14px;letter-spacing:.2em;text-transform:uppercase;line-height:1.2;padding:16px clamp(18px,1.6vw,26px);text-decoration:none}\n.cgc-svc-btn-white .wp-block-button__link::after{content:\" \u2192\";letter-spacing:0}\n.cgc-svc-btn-white .wp-block-button__link:hover{background:var(--cgc-stone)}\n\/* C\u00f3mo trabajamos *\/\n.cgc-svc-steps{display:grid;gap:14px}\n.cgc-svc-step{display:flex;flex-wrap:wrap;gap:8px clamp(24px,4vw,72px);align-items:baseline;padding:26px clamp(22px,2.6vw,40px)}\n.cgc-svc-step h3{flex:1 1 260px;min-width:0}\n.cgc-svc-step p{flex:2 1 420px;min-width:0}\n\/* Casos *\/\n.cgc-svc-cases__head{display:flex;flex-wrap:wrap;gap:16px 32px;align-items:flex-end;justify-content:space-between;padding-bottom:clamp(20px,2vw,32px);border-bottom:1px solid var(--cgc-ink)}\n.cgc-svc-cases__head .cgc-svc-h2{margin:0;max-width:20ch}\n.cgc-svc-cases__head p{margin:0}\n.cgc-svc-carousel{position:relative}\n.cgc-svc-case{display:flex;flex-wrap:wrap;flex-direction:row-reverse;background:var(--cgc-paper);border:1px solid var(--cgc-line);border-top:0;margin:0}\n.cgc-svc-case[hidden]{display:none}\nfigure.cgc-svc-case__pic{position:relative;flex:1 1 380px;min-height:clamp(240px,30vw,560px);margin:0}\n.cgc-svc-case__pic img{position:absolute;inset:0}\n.cgc-svc-case__txt{flex:1 1 480px;min-width:0;padding:clamp(28px,3.6vw,64px);padding-bottom:calc(clamp(28px,3.6vw,64px) + 48px);display:flex;flex-direction:column;gap:18px}\n.cgc-svc-case__txt>*{margin:0}\n.cgc-svc-case__txt h3{font-family:var(--cgc-font-display);font-weight:300;font-size:clamp(24px,2.2vw,34px);line-height:1.1;color:var(--cgc-teal-deep);max-width:26ch;padding-bottom:22px;border-bottom:1px solid var(--cgc-line)}\n.cgc-svc-case__k{display:flex;align-items:center;gap:14px;font-family:var(--cgc-font-display);font-size:13.5px;letter-spacing:.28em;text-transform:uppercase;color:var(--cgc-teal-deep)}\n.cgc-svc-case__k::before{content:\"\";width:36px;height:1px;background:currentColor}\n.cgc-svc-case__result{font-family:var(--cgc-font-display);font-weight:300;font-size:clamp(24px,2.4vw,38px);line-height:1.2;color:var(--cgc-teal-dark);max-width:24ch}\n.cgc-svc-case__desc{color:var(--cgc-muted);max-width:56ch}\n.cgc-svc-dots{position:absolute;left:clamp(28px,3.6vw,64px);bottom:clamp(20px,2.6vw,44px);display:flex;gap:4px;margin-left:-5px}\n.cgc-svc-dot{width:24px;height:24px;padding:0;border:0;background:none;cursor:pointer;display:grid;place-items:center;border-radius:50%}\n.cgc-svc-dot::before{content:\"\";width:14px;height:14px;border-radius:50%;border:1px solid var(--cgc-ink);transition:background .2s}\n.cgc-svc-dot[aria-selected=\"true\"]::before{background:var(--cgc-ink)}\n.cgc-svc-dot:not([aria-selected=\"true\"]):hover::before{background:var(--cgc-line)}\n\/* FAQ *\/\n.cgc-svc-faq{border-top:1px solid var(--cgc-line)}\n.cgc-svc-faq details{border-bottom:1px solid var(--cgc-line);margin:0}\n.cgc-svc-faq summary{list-style:none;cursor:pointer;display:flex;justify-content:space-between;align-items:center;gap:24px;padding:clamp(20px,2vw,30px) 4px;font-family:var(--cgc-font-display);font-weight:300;font-size:clamp(20px,1.7vw,27px);line-height:1.3;color:var(--cgc-teal-deep)}\n.cgc-svc-faq summary::-webkit-details-marker{display:none}\n.cgc-svc-faq summary::marker{content:\"\"}\n.cgc-svc-faq summary::after{content:\"+\";flex:0 0 auto;font-weight:200;font-size:1.5em;line-height:.8;transition:transform .2s ease}\n.cgc-svc-faq details[open]>summary::after{transform:rotate(45deg)}\n.cgc-svc-faq details>:not(summary){color:var(--cgc-muted);margin:0;padding:0 4px clamp(22px,2.2vw,32px);max-width:80ch}\n\/* Otros servicios *\/\n.cgc-svc-others{display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,440px),1fr));gap:clamp(16px,1.8vw,28px)}\na.cgc-svc-feat{min-height:400px;background:var(--cgc-ink);color:#fff;padding:clamp(28px,3.2vw,52px);display:flex;flex-direction:column;gap:18px}\n.cgc-svc-feat .cgc-label{color:var(--cgc-sky);margin:0}\n.cgc-svc-feat__t{font-family:var(--cgc-font-display);font-weight:200;font-size:clamp(30px,3vw,48px);line-height:1.1;color:#fff;margin:0;max-width:18ch}\n.cgc-svc-feat__d{color:var(--cgc-mist);margin:0;max-width:44ch}\n.cgc-svc-feat__btn{margin-top:auto;align-self:flex-end;background:var(--cgc-sky);color:var(--cgc-ink);border-radius:8px;padding:16px 24px;font-family:var(--cgc-font-display);font-weight:500;font-size:14px;letter-spacing:.2em;text-transform:uppercase;line-height:1.2}\n.cgc-svc-stack{display:grid;gap:clamp(16px,1.8vw,28px)}\na.cgc-svc-mini{display:flex;background:var(--cgc-stone);overflow:hidden;min-height:190px}\n.cgc-svc-mini__txt{flex:1 1 54%;min-width:0;padding:clamp(22px,2.4vw,36px);display:flex;flex-direction:column;gap:12px}\n.cgc-svc-mini__txt .cgc-label{margin:0;color:var(--cgc-muted)}\n.cgc-svc-mini__txt h3{font-family:var(--cgc-font-display);font-weight:300;font-size:clamp(21px,1.8vw,28px);line-height:1.1;color:var(--cgc-teal-deep);margin:0}\n.cgc-svc-mini__pic{flex:0 0 46%;width:46%;object-fit:cover;align-self:stretch;height:auto;min-height:100%}\n\/* CTA flotante *\/\n.cgc-svc-float{position:fixed;z-index:60;left:0;right:0;bottom:0;display:flex;justify-content:center;align-items:center;gap:.7em;padding:16px 20px calc(16px + env(safe-area-inset-bottom));background:var(--cgc-teal-deep);color:#fff;font-family:var(--cgc-font-display);font-weight:500;font-size:14px;letter-spacing:.2em;text-transform:uppercase;text-decoration:none;transition:opacity .2s,visibility .2s,transform .2s}\n.cgc-svc-float::after{content:\"\u2192\";letter-spacing:0}\n.cgc-svc-float:hover{background:var(--cgc-teal-dark);color:#fff}\n.cgc-svc-float.is-hidden{opacity:0;visibility:hidden;transform:translateY(8px)}\nbody.cgc-svc-has-float{padding-bottom:58px}\n@media (min-width:720px){.cgc-svc-float{left:auto;right:24px;bottom:24px;padding:13px 22px;border-radius:999px}body.cgc-svc-has-float{padding-bottom:0}}\n@media (prefers-reduced-motion:reduce){.cgc-svc-card,.cgc-svc-float,.cgc-svc-faq summary::after{transition:none}.cgc-svc-card:hover,.cgc-svc-card:focus-within,a.cgc-svc-card:focus-visible{transform:none}}\n\/* Ajustes de flujo: sin m\u00e1rgenes heredados del layout de bloques dentro de rejillas y flex *\/\n.cgc-svc-value>*,.cgc-svc-scope>*,.cgc-svc-scope__item>*,.cgc-svc-steps>*,.cgc-svc-step>*,.cgc-svc-band>*,.cgc-svc-cases__head>*,.cgc-svc-carousel>*,.cgc-svc-case>*,.cgc-svc-case__txt>*,.cgc-svc-faq>*{margin-block:0}\n.cgc-svc-cases__head+.cgc-svc-carousel{margin-top:0}\n.cgc-svc-scope__body p,.cgc-svc-step p,.cgc-svc-case__desc,.cgc-svc-feat__d,.cgc-svc-faq details>:not(summary){font-size:clamp(18px,.3vw + 16.5px,21px);line-height:1.6}\n\/* Sin separadores entre secciones *\/\n.cgc-svc-sec,.cgc-pg.cgc-svc-sec+.cgc-pg{border-top:0}\n\/* T\u00edtulos a ancho completo *\/\n.cgc-svc-h2,.cgc-svc-value__txt .cgc-svc-h2,.cgc-svc-cases__head .cgc-svc-h2{max-width:none}\n.cgc-svc-cases__head .cgc-svc-h2{flex:1 1 480px;min-width:0}\n\/* Ajustes v3 *\/\n.cgc-svc-sec:has(.cgc-svc-carousel){padding-bottom:clamp(20px,2.4vw,40px)}\n.cgc-svc-sec:has(.cgc-svc-carousel)+.cgc-svc-sec{padding-top:clamp(20px,2.4vw,40px)}\n.cgc-svc-faq details>:not(summary){max-width:none}\na.cgc-svc-mini{background:var(--cgc-paper)}\n\/* Espaciado entre secciones (m\u00e1s compacto en esta p\u00e1gina) *\/\n.cgc-pg.cgc-svc-sec{padding-top:clamp(48px,5.4vw,80px);padding-bottom:clamp(48px,5.4vw,80px)}\n.cgc-pg.cgc-svc-sec:has(.cgc-svc-carousel){padding-bottom:clamp(20px,2.4vw,40px)}\n.cgc-pg.cgc-svc-sec:has(.cgc-svc-carousel)+.cgc-svc-sec{padding-top:clamp(20px,2.4vw,40px)}\n<\/style>\n\n\n\n<section class=\"wp-block-group cgc-pagehead cgc-art--rings cgc-seed-2 cgc-svc-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-pagehead__txt is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"cgc-crumbs wp-block-paragraph\"><a href=\"\/\">Inicio<\/a> \/ <a href=\"\/servicios\/\">Servicios<\/a> \/ <a href=\"\/servicios\/grc-cumplimiento-normativo\/\">Compliance &amp; Strategy<\/a> \/ Gesti\u00f3n de riesgos de terceros y proveedores<\/p>\n\n\n\n<p class=\"cgc-label wp-block-paragraph\">Compliance &amp; Strategy<\/p>\n\n\n\n<h1 class=\"wp-block-heading cgc-display\">Gesti\u00f3n de riesgos de terceros <em>sin puntos ciegos<\/em><\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Definimos criterios para evaluar y seguir los riesgos de tus proveedores seg\u00fan su criticidad, con responsables, controles y revisiones durante todo su ciclo de vida, alineados con DORA, NIS2 y las exigencias de tus supervisores.<\/p>\n\n\n\n<div class=\"wp-block-buttons cgc-linkwrap cgc-pagehead__cta is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-cgc-link\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/contacto\/?motivo=negocio&amp;servicio=gestion-riesgos-terceros\">Habla con un experto<\/a><\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-svc-sec is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-svc-value is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-svc-value__txt is-layout-flow wp-block-group-is-layout-flow\">\n<h2 class=\"wp-block-heading cgc-sh cgc-svc-h2\">Proveedores cr\u00edticos de los que se sabe poco: <em>riesgos visibles y controlados<\/em><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sin una gesti\u00f3n de riesgos de terceros estructurada, la organizaci\u00f3n depende de proveedores tecnol\u00f3gicos cuyo nivel de seguridad, continuidad o solvencia desconoce. Un fallo o un incidente en uno de ellos puede detener servicios cr\u00edticos y, en sectores regulados, convertirse en un incumplimiento.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Los cuestionarios anuales enviados a todos los proveedores por igual generan mucho trabajo y poca informaci\u00f3n \u00fatil. Sin criterios de criticidad, cl\u00e1usulas contractuales adecuadas ni seguimiento continuo, el riesgo real queda oculto hasta que aparece un problema.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">En CGC definimos c\u00f3mo clasificar a los proveedores seg\u00fan su criticidad y conectamos cada relaci\u00f3n con responsables, controles y revisiones proporcionadas al riesgo. Tu organizaci\u00f3n sabe de qu\u00e9 terceros depende, cu\u00e1nto riesgo asume y c\u00f3mo demostrarlo ante el supervisor.<\/p>\n<\/div>\n\n\n\n<figure class=\"wp-block-image size-full cgc-svc-value__pic\"><img decoding=\"async\" width=\"900\" height=\"1300\" src=\"https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-01.jpg\" alt=\"Gesti\u00f3n de riesgos de terceros: equipo revisando el inventario de proveedores cr\u00edticos\" class=\"wp-image-59\" srcset=\"https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-01.jpg 900w, https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-01-208x300.jpg 208w, https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-01-709x1024.jpg 709w, https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-01-768x1109.jpg 768w\" sizes=\"(max-width: 900px) 100vw, 900px\" \/><\/figure>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-svc-sec is-layout-flow wp-block-group-is-layout-flow\">\n<h2 class=\"wp-block-heading cgc-sh cgc-svc-h2\">Control de proveedores <em>en todo su ciclo<\/em><\/h2>\n\n\n\n<div class=\"wp-block-group cgc-svc-scope is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-svc-card cgc-svc-scope__item is-layout-flow wp-block-group-is-layout-flow\">\n<span class=\"cgc-svc-check\" aria-hidden=\"true\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 12.5l4.5 4.5L19 7.5\"\/><\/svg><\/span>\n\n\n\n<div class=\"wp-block-group cgc-svc-scope__body is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Inventario y criticidad de proveedores<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Construimos el inventario de proveedores y servicios, identificamos los que sostienen funciones cr\u00edticas y definimos criterios de clasificaci\u00f3n seg\u00fan su impacto y su riesgo.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group cgc-svc-card cgc-svc-scope__item is-layout-flow wp-block-group-is-layout-flow\">\n<span class=\"cgc-svc-check\" aria-hidden=\"true\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 12.5l4.5 4.5L19 7.5\"\/><\/svg><\/span>\n\n\n\n<div class=\"wp-block-group cgc-svc-scope__body is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Evaluaci\u00f3n antes de contratar<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Definimos c\u00f3mo evaluar la seguridad, la continuidad y la solvencia de un proveedor antes de contratarlo, con cuestionarios y evidencias proporcionados a su criticidad.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group cgc-svc-card cgc-svc-scope__item is-layout-flow wp-block-group-is-layout-flow\">\n<span class=\"cgc-svc-check\" aria-hidden=\"true\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 12.5l4.5 4.5L19 7.5\"\/><\/svg><\/span>\n\n\n\n<div class=\"wp-block-group cgc-svc-scope__body is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Cl\u00e1usulas y requisitos contractuales<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Revisamos que los contratos incluyan los requisitos de seguridad, auditor\u00eda, notificaci\u00f3n de incidentes y salida que exigen la regulaci\u00f3n y tu propia pol\u00edtica.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group cgc-svc-card cgc-svc-scope__item is-layout-flow wp-block-group-is-layout-flow\">\n<span class=\"cgc-svc-check\" aria-hidden=\"true\"><svg viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 12.5l4.5 4.5L19 7.5\"\/><\/svg><\/span>\n\n\n\n<div class=\"wp-block-group cgc-svc-scope__body is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Seguimiento y registro de informaci\u00f3n<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Establecemos revisiones peri\u00f3dicas, indicadores y planes de salida, y mantenemos el registro de informaci\u00f3n de proveedores TIC que exige DORA a las entidades financieras.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-svc-sec is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-svc-band cgc-art--rings cgc-seed-7 is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"cgc-svc-band__txt wp-block-paragraph\">Cu\u00e9ntanos de qu\u00e9 proveedores depende tu negocio y te ayudamos a controlar su riesgo.<\/p>\n\n\n\n<div class=\"wp-block-buttons cgc-svc-band__cta is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button cgc-svc-btn-white\"><a class=\"wp-block-button__link wp-element-button\" href=\"\/contacto\/?motivo=negocio&amp;servicio=gestion-riesgos-terceros\">Habla con un experto<\/a><\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-svc-sec is-layout-flow wp-block-group-is-layout-flow\">\n<h2 class=\"wp-block-heading cgc-sh cgc-svc-h2\">C\u00f3mo trabajamos para <em>conocer tu dependencia<\/em><\/h2>\n\n\n\n<div class=\"wp-block-group cgc-svc-steps is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-svc-card cgc-svc-step is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Inventario y clasificaci\u00f3n<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Recopilamos la informaci\u00f3n de proveedores y contratos dispersa entre compras, tecnolog\u00eda y negocio, y clasificamos cada relaci\u00f3n seg\u00fan su criticidad.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group cgc-svc-card cgc-svc-step is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Dise\u00f1o del modelo de gesti\u00f3n<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Definimos la pol\u00edtica de terceros, los roles, los criterios de evaluaci\u00f3n y los controles para cada nivel de criticidad, alineados con la regulaci\u00f3n aplicable.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group cgc-svc-card cgc-svc-step is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Evaluaci\u00f3n y puesta en marcha<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Evaluamos a los proveedores prioritarios, revisamos sus contratos y ponemos en marcha el seguimiento, empezando por los que sostienen funciones cr\u00edticas.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group cgc-svc-card cgc-svc-step is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Documentaci\u00f3n y acompa\u00f1amiento<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Documentamos el modelo y acompa\u00f1amos a compras, tecnolog\u00eda y riesgos en sus primeros ciclos de evaluaci\u00f3n, para que lo mantengan con autonom\u00eda.<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-svc-sec is-layout-flow wp-block-group-is-layout-flow\">\n<h2 class=\"wp-block-heading cgc-sh cgc-svc-h2\">Preguntas frecuentes para <em>controlar a tus proveedores<\/em><\/h2>\n\n\n\n<div class=\"wp-block-group cgc-svc-faq is-layout-flow wp-block-group-is-layout-flow\">\n<details class=\"wp-block-details cgc-svc-faq__item is-layout-flow wp-block-details-is-layout-flow\"><summary>\u00bfQu\u00e9 es la gesti\u00f3n de riesgos de terceros y por qu\u00e9 importa?<\/summary>\n<p class=\"wp-block-paragraph\">La gesti\u00f3n de riesgos de terceros es el proceso para identificar, evaluar y seguir los riesgos que introducen los proveedores y socios en la organizaci\u00f3n. Importa porque gran parte de los servicios cr\u00edticos dependen hoy de terceros, y un fallo suyo puede afectar a la operaci\u00f3n, la seguridad o el cumplimiento normativo.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details cgc-svc-faq__item is-layout-flow wp-block-details-is-layout-flow\"><summary>\u00bfQu\u00e9 exige DORA sobre los proveedores de servicios TIC?<\/summary>\n<p class=\"wp-block-paragraph\">DORA exige a las entidades financieras gestionar el riesgo de sus proveedores TIC con una estrategia definida, mantener un registro de informaci\u00f3n de todos los acuerdos, evaluar a los proveedores antes de contratar, incluir cl\u00e1usulas contractuales m\u00ednimas y contar con planes de salida para los servicios cr\u00edticos o importantes.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details cgc-svc-faq__item is-layout-flow wp-block-details-is-layout-flow\"><summary>\u00bfC\u00f3mo se determina si un proveedor es cr\u00edtico?<\/summary>\n<p class=\"wp-block-paragraph\">Un proveedor es cr\u00edtico cuando su fallo afectar\u00eda de forma grave a un proceso o servicio esencial para la organizaci\u00f3n. Se valora el impacto de su interrupci\u00f3n, la dificultad de sustituirlo, los datos a los que accede y las exigencias regulatorias. Con esos criterios definimos el nivel de control necesario.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details cgc-svc-faq__item is-layout-flow wp-block-details-is-layout-flow\"><summary>\u00bfHay que evaluar a todos los proveedores con el mismo nivel de detalle?<\/summary>\n<p class=\"wp-block-paragraph\">No. La evaluaci\u00f3n debe ser proporcional a la criticidad del proveedor. Los cr\u00edticos requieren an\u00e1lisis detallados, evidencias y seguimiento frecuente; los de bajo riesgo, controles b\u00e1sicos. As\u00ed el esfuerzo se concentra donde est\u00e1 el riesgo real y no se satura a compras ni a los propios proveedores.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details cgc-svc-faq__item is-layout-flow wp-block-details-is-layout-flow\"><summary>\u00bfAfecta NIS2 a la gesti\u00f3n de proveedores de nuestra empresa?<\/summary>\n<p class=\"wp-block-paragraph\">S\u00ed. NIS2 incluye la seguridad de la cadena de suministro entre las medidas obligatorias, por lo que las entidades afectadas deben valorar los riesgos de sus proveedores directos. Adem\u00e1s, muchas empresas que no est\u00e1n obligadas por NIS2 reciben requisitos de sus clientes que s\u00ed lo est\u00e1n.<\/p>\n<\/details>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-svc-sec is-layout-flow wp-block-group-is-layout-flow\">\n<h2 class=\"wp-block-heading cgc-sh cgc-svc-h2\">Otros servicios para <em>reducir tu exposici\u00f3n<\/em><\/h2>\n\n\n\n<div class=\"cgc-svc-others\"><a class=\"cgc-svc-card cgc-svc-feat\" href=\"\/servicios\/grc-cumplimiento-normativo\/cumplimiento-dora\/\"><p class=\"cgc-label\">Servicio destacado<\/p><h3 class=\"cgc-svc-feat__t\">Cumplimiento del reglamento DORA<\/h3><p class=\"cgc-svc-feat__d\">Adaptamos tu entidad a DORA: gesti\u00f3n del riesgo TIC, incidentes, pruebas de resiliencia y gesti\u00f3n de proveedores TIC con su registro de informaci\u00f3n.<\/p><span class=\"cgc-svc-feat__btn\" aria-hidden=\"true\">Explorar \u2192<\/span><\/a><div class=\"cgc-svc-stack\"><a class=\"cgc-svc-card cgc-svc-mini\" href=\"\/servicios\/grc-cumplimiento-normativo\/consultoria-grc\/\"><div class=\"cgc-svc-mini__txt\"><p class=\"cgc-label\">Servicio<\/p><h3>Consultor\u00eda de gobierno, riesgos y cumplimiento<\/h3><\/div><img decoding=\"async\" class=\"cgc-svc-mini__pic\" src=\"https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-21.jpg\" alt=\"\" loading=\"lazy\"><\/a><a class=\"cgc-svc-card cgc-svc-mini\" href=\"\/servicios\/grc-cumplimiento-normativo\/adaptacion-nis2\/\"><div class=\"cgc-svc-mini__txt\"><p class=\"cgc-label\">Servicio<\/p><h3>Adaptaci\u00f3n a la directiva NIS2<\/h3><\/div><img decoding=\"async\" class=\"cgc-svc-mini__pic\" src=\"https:\/\/cgcspain.com\/wp-content\/uploads\/2026\/10\/cgc-ai-foto-33.jpg\" alt=\"\" loading=\"lazy\"><\/a><\/div><\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group cgc-cta__in cgc-reveal is-layout-flow wp-block-group-is-layout-flow\">\n<h2 class=\"wp-block-heading\">Hablemos de <em>los proveedores cr\u00edticos<\/em> de tu organizaci\u00f3n<\/h2>\n\n\n\n<p class=\"cgc-cta__intro wp-block-paragraph\">Cu\u00e9ntanos cu\u00e1ntos proveedores tecnol\u00f3gicos gestion\u00e1is, c\u00f3mo los evalu\u00e1is hoy y qu\u00e9 normas os aplican. Un consultor revisar\u00e1 tu caso y te propondr\u00e1 una primera sesi\u00f3n para priorizar los proveedores con m\u00e1s riesgo.<\/p>\n\n\n\n<form class=\"cgc-cta__form\" action=\"\/contacto\/\" method=\"get\" aria-label=\"Contacto r\u00e1pido\"><input type=\"hidden\" name=\"motivo\" value=\"negocio\"><input type=\"hidden\" name=\"servicio\" value=\"gestion-riesgos-terceros\"><div class=\"cgc-select-wrap\"><select class=\"cgc-select\" name=\"sector\" required aria-label=\"Industria\"><option value=\"\">Selecciona tu industria<\/option><option>Banca<\/option><option>Seguros<\/option><option>Fondos de inversi\u00f3n y mercados de capitales<\/option><option>Sector p\u00fablico<\/option><option>Energ\u00eda y utilities<\/option><option>Salud y farmac\u00e9utico<\/option><option>Industria y manufactura<\/option><option>Retail y consumo<\/option><option>Telecomunicaciones<\/option><option>Transporte y log\u00edstica<\/option><option>Tecnolog\u00eda<\/option><option>Otra<\/option><\/select><\/div><button type=\"submit\">Consultar mi proyecto<\/button><p class=\"cgc-cta__note\">Al contactar aceptas la <a href=\"\/privacidad\/\">pol\u00edtica de privacidad<\/a>.<\/p><p class=\"cgc-cta__msg\" role=\"status\"><\/p><\/form>\n<\/div>\n<\/section>\n\n\n\n<section class=\"wp-block-group cgc-pg cgc-certs is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"cgc-crt2\" role=\"list\" aria-label=\"Certificaciones\"><p class=\"cgc-crt2__l\">Certificaciones<\/p><div class=\"cgc-crt2__b\" role=\"listitem\"><span class=\"cgc-crt2__ic\"><svg viewBox=\"0 0 24 24\" width=\"26\" height=\"26\" aria-hidden=\"true\"><path d=\"M12 3l7 3v5c0 4.5-3 8.3-7 10-4-1.7-7-5.5-7-10V6l7-3z\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.5\"\/><path d=\"M8.5 12l2.5 2.5 4.5-5\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.6\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/><\/svg><\/span><span><strong>ISO 27001<\/strong><em>Certificado por Adok<\/em><\/span><\/div><div class=\"cgc-crt2__b\" role=\"listitem\"><span class=\"cgc-crt2__ic\"><svg viewBox=\"0 0 24 24\" width=\"26\" height=\"26\" aria-hidden=\"true\"><rect x=\"5\" y=\"10\" width=\"14\" height=\"10\" rx=\"2\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.5\"\/><path d=\"M8 10V7a4 4 0 018 0v3\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.5\"\/><circle cx=\"12\" cy=\"15\" r=\"1.4\" fill=\"currentColor\"\/><\/svg><\/span><span><strong>GDPR<\/strong><em>Certificado por Prodat<\/em><\/span><\/div><div class=\"cgc-crt2__b\" role=\"listitem\"><span class=\"cgc-crt2__ic\"><svg viewBox=\"0 0 24 24\" width=\"26\" height=\"26\" aria-hidden=\"true\"><path d=\"M7 3h7l4 4v14H7z\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linejoin=\"round\"\/><path d=\"M14 3v4h4M9.5 12h6M9.5 15.5h6\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\"\/><\/svg><\/span><span><strong>LOPD<\/strong><em>Certificado por Prodat<\/em><\/span><\/div><\/div>\n<\/section>\n\n\n\n<a class=\"cgc-svc-float\" id=\"cgc-svc-float\" href=\"\/contacto\/?motivo=negocio&amp;servicio=gestion-riesgos-terceros\">Habla con un experto<\/a>\n<script>\n(function(){\ndocument.body.classList.add('cgc-svc-has-float');\n\/* Carrusel de casos: un caso visible, puntos accesibles por teclado *\/\ndocument.querySelectorAll('.cgc-svc-carousel').forEach(function(c,ci){\n var panels=[].slice.call(c.querySelectorAll(':scope > .cgc-svc-case'));\n if(panels.length<2)return;\n var list=document.createElement('div');list.className='cgc-svc-dots';list.setAttribute('role','tablist');list.setAttribute('aria-label','Seleccionar caso');\n var tabs=panels.map(function(p,i){\n  p.id=p.id||('cgc-svc-caso-'+ci+'-'+i);p.setAttribute('role','tabpanel');p.setAttribute('aria-roledescription','caso');\n  var t=document.createElement('button');t.type='button';t.className='cgc-svc-dot';t.setAttribute('role','tab');\n  t.id=p.id+'-tab';t.setAttribute('aria-controls',p.id);t.setAttribute('aria-label','Caso '+(i+1)+' de '+panels.length);\n  p.setAttribute('aria-labelledby',t.id);list.appendChild(t);return t;});\n c.appendChild(list);\n function show(i,f){tabs.forEach(function(t,j){var on=i===j;t.setAttribute('aria-selected',on);t.tabIndex=on?0:-1;panels[j].hidden=!on;});if(f)tabs[i].focus();}\n tabs.forEach(function(t,i){t.addEventListener('click',function(){show(i)});t.addEventListener('keydown',function(e){var n=tabs.length,k=e.key,to=null;\n  if(k==='ArrowRight'||k==='ArrowDown')to=(i+1)%n;else if(k==='ArrowLeft'||k==='ArrowUp')to=(i-1+n)%n;else if(k==='Home')to=0;else if(k==='End')to=n-1;\n  if(to!==null){e.preventDefault();show(to,true);}});});\n show(0);\n});\n\/* FAQPage (JSON-LD) generado a partir del acorde\u00f3n *\/\nvar qs=[].slice.call(document.querySelectorAll('.cgc-svc-faq details')).map(function(d){var s=d.querySelector('summary');var a=[].slice.call(d.children).filter(function(x){return x!==s}).map(function(x){return x.textContent.trim()}).join(' ');return {'@type':'Question',name:s.textContent.trim(),acceptedAnswer:{'@type':'Answer',text:a}};});\nif(qs.length){var ld=document.createElement('script');ld.type='application\/ld+json';ld.textContent=JSON.stringify({'@context':'https:\/\/schema.org','@type':'FAQPage',mainEntity:qs});document.head.appendChild(ld);}\n\/* CTA flotante: oculto mientras se ven el hero o el contacto *\/\nvar f=document.getElementById('cgc-svc-float');var tg=[document.querySelector('.cgc-svc-hero'),document.querySelector('.cgc-cta')].filter(Boolean);\nif(f){if(tg.length){if('IntersectionObserver' in window){var v=new Set();var io=new IntersectionObserver(function(es){es.forEach(function(e){e.isIntersecting?v.add(e.target):v.delete(e.target)});f.classList.toggle('is-hidden',v.size>0);},{threshold:.15});tg.forEach(function(t){io.observe(t)});}}}\n})();\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>Inicio \/ Servicios \/ Compliance &amp; Strategy \/ Gesti\u00f3n de riesgos de terceros y proveedores Compliance &amp; Strategy Gesti\u00f3n de riesgos de terceros sin puntos ciegos Definimos criterios para evaluar y seguir los riesgos de tus proveedores seg\u00fan su criticidad, con responsables, controles y revisiones durante todo su ciclo de vida, alineados con DORA, NIS2 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":16,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-522","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/pages\/522","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/comments?post=522"}],"version-history":[{"count":4,"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/pages\/522\/revisions"}],"predecessor-version":[{"id":799,"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/pages\/522\/revisions\/799"}],"up":[{"embeddable":true,"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/pages\/16"}],"wp:attachment":[{"href":"https:\/\/cgcspain.com\/en\/wp-json\/wp\/v2\/media?parent=522"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}