Legacy Bitsight VRM: Building Requirements

Legacy Bitsight VRM tools are designed to help you collect the right information and ask the most appropriate questions based on the vendors’ risk to the organization - that’s why requirements are so important.

Requirements are developed through rules and allow you to request vendors specific information based on your needs.

Create New Requirement

1. Select Settings on the left bar on your dashboard.

   If you do not see the Settings icon, it means you do not have the right access level.

2. Go to the Requirements tab.
3. Select + Add to open the requirement builder and generate a new requirement.

Requirement Builder - Steps 1 to 3

Step 1 of 3

1. Select + Rule to include documents and start by defining your Default Requirement.
   
2. Check the corresponding boxes based on the required documentation you wish to include (Certifications, Insurances, Audits, Questionnaires).

   For each type of documentation, you can determine if All documents are required or Any (at least one) document of that kind is to be provided.

   
3. As you click on each, all the available selections will appear below for you to pick.
   
4. Once you complete the Default requirement, the +Alternate button will be enabled. If applicable, select the +Alternate button to add Alternate Requirements. Add up to 2 Alternate requirements.

   In order for +Alternate to be enabled and triggered, the default rule must contain at least one assurance type. Only Assurance Programs documents (certificates, insurances and audits) can be marked as not available by vendors. If the default rule contains only surveys, alternate requirements WILL NOT BE AVAILABLE.

5. Once the documentation has been selected, select Next.

Step 2 of 3

Choose the criteria that will be used to assign these requirements to your vendors.

Once done, select Next.

Step 3 of 3

1. Review and confirm the information that you have entered. If you need to make any changes, you can go back to a previous step and update as needed.
2. Define a name to identify this requirement rule.
3. Select Confirm to save.