Industry:Healthcare
Company Size: Tens of thousands of suppliers
Challenge: Manual, unsustainable TPRM processes
Solution: Rescana, deployed by Magic Stone
Impact: AI-powered visibility, critical supplier prioritization, real-time vendor communication
Background
A leading Medicare provider managing tens of thousands of suppliers had a strong but lean internal risk team. With only four people responsible for third-party risk, they were limited to manually assessing around 400 vendors per year. Their process relied on traditional questionnaires and spreadsheets—effective within a narrow scope, but difficult to scale in today’s dynamic threat and compliance environment.
Challenges
The organization recognized an opportunity to modernize its vendor risk processes and unlock greater efficiency. While the team was experienced and dedicated, the tools at their disposal made it difficult to scale, prioritize, and stay ahead of evolving risks.
Key areas for improvement included:
- Scalability – The team had capacity to review only a fraction of the supply base
- Visibility – Some third parties might be connected without being formally documented or assessed
- Prioritization – Identifying the 1,500–2,000 critical suppliers required significant manual effort
- Sustainability– Point-in-time assessments didn’t support real-time response
- Compliance Readiness – Regulatory demands (HIPAA, GDPR, NIS2) required a more agile and continuous approach
Solution
To overcome these limitations, the Medicare provider engaged Magic Stone, who recommended Rescana — an autonomous, AI-powered third-party risk management platform.
Rescana introduced a modern, scalable, and intelligent framework for TPRM:
- Autonomous supplier discovery, revealing vendors the organization might not have realized were connected
- AI-based classification to instantly identify business-critical and high-risk suppliers
- Continuous monitoring and real-time risk scoring, replacing one-off assessments
- Ongoing vendor communication powered by AI bots, keeping dialogue active and only involving humans when truly necessary
- Natural Language Processing (NLP) — allowing the team to input and assess any free-form text or vendor-specific data, avoiding rigid rule-based templates
- Near-zero false positives, thanks to contextual and threat-aware scoring
- Automated remediation workflows, reducing operational load
- Compliance alignment with HIPAA, GDPR, NIS2, and other key frameworks
Results
- Discovered and surfaced previously unknown suppliers
- Prioritized and continuously monitored 1,500–2,000 critical vendors
- Reduced manual workload by over 70%
- Onboarded vendors 5× faster with AI workflows
- Maintained real-time risk visibility across a vast supply chain
- Strengthened compliance posture without expanding the internal team
Conclusion
By implementing Rescana through Magic Stone, this Medicare provider transitioned from manual vendor risk management to a truly autonomous, real-time, and scalable model. AI and NLP capabilities provided a smarter way to discover, classify, and engage vendors — freeing the internal team to focus on strategy and resilience. The result: stronger risk posture, reduced overhead, and confident compliance.
