Committed to Security (CTS)

A smarter, more consistent approach to vendor risk management for the creditors rights community.

Creditor expectations are rising, and more organizations now require third-party vendors demonstrate their security posture through certifications such as SOC 2 or CTS. The NCBA Committed to Security (CTS) program offers a trusted, cost-effective way for law firms, vendors, and clients to meet those expectations. By completing a single security assessment each year, organizations can help strengthen the security of the broader ecosystem and supply chain.

For Law Firms

For Vendors

For Clients

Core Benefits

Stronger Supply Chain

Meet Client & Member Requirements With Confidence

Reduce Redundant Audits

Get Informative, Risk-Based Reports

Streamline Vendor Oversight

Key Value Drivers of CTS

	Vendor	Member	Client
Save Time: Less Redundancy & Simplified Submission Process CTS minimizes repeat requests and paperwork by focusing only on relevant frameworks and controls, saving vendors time and frustration. No more long-form questionnaires. Our goal is to address 80% or more of the due diligence requirements clients expect from third-party vendors.	✓	✓
Cut Costs: Dynamic Assessment Scope One size does not fit all. Assessments automatically scale based on vendor type, organization size, and risk posture. Pay only for what’s relevant. Avoid over-assessing. Minimize compliance fatigue.	✓	✓
Gain Clarity: Risk-Based Ratings No guesswork, no generic results. Every vendor receives a risk report tailored to their operational context. Make informed, confident decisions backed by transparent data.	✓	✓	✓
Stay in Sync: Centralized, Strategic Access All vendor security insights in one place. Creditors, law firms, and vendors access the secure Sanctum platform to track, evaluate, remediate, and collaborate. Unify workflows, streamline oversight, and share information seamlessly.	✓	✓	✓
Remain Compliant: Continuously Updated Controls Security threats evolve. So do we. The program adjusts with industry regulations and emerging risks to stay current and effective. Stay protected, aligned, and audit-ready year after year.	✓