VRM App: Vendors

The menu-vendors.png Vendors page in the Vendor Risk Management application lists your vendors.

Vendors Page Tabs

Once added, vendors are listed in the Managed, Monitored, or Incoming Shares tabs depending on the connection status.

Actions

Add a Vendor by Their Domain

Instructions: See instructions to add a vendor or instructions to add vendors in bulk.

Learn more about the vendor connection workflow.

Customize the Data

Customize fields that are included in the table.

Instructions: Select the columns.png Customize Columns button at the top-right of the table.

Revoke Connection

Revoke a connection with a vendor. This removes them from your Managed or Monitored list.

Instructions:

  1. Hover over a vendor listed in the Managed or Monitored tab.
  2. Select delete-vendor.png Delete.
  3. Select Remove Vendor to confirm.

Fields

Company

The vendor.

Filter: No

Due Date

When the vendor is expected to fulfill the requirements.

Filter: Yes

Life Cycle

The vendor’s progress in the vendor life cycle.

Filter: Yes

Primary Domain

The vendor’s primary domain.

Filter: No

Requirements

The vendor’s progress in meeting requirements.

Filter: Yes

Review Year

The vendor’s review year.

Filter: Yes

Tags

Vendor tags assigned to the vendor.

Filter: Yes

Vendor Score: Impact

A vendor score, which is an objective measurement is important for monitoring third-party security performance across the organization.

The Impact score is based on how much impact your vendor relation has to your company.

Filter: Sort

Vendor Score: Risk

A vendor score, which is an objective measurement is important for monitoring third-party security performance across the organization.

The Risk score indicates the total risk of a vendor.

Filter: Sort

Vendor Score: Risk

A vendor score, which is an objective measurement is important for monitoring third-party security performance across the organization.

The Trust score indicates the trustworthiness of a vendor based on security attributes best associated with their security posture.

Filter: Sort

  • March 14, 2025: Use Continuous Monitoring subscriptions to monitor vendors while adding them.
  • August 23, 2024: Incorporated connection statuses/tab definitions.
  • July 17, 2024: Added Due Date, Life Cycle, Review Year, and Vendor Scores fields.
Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.