Vendor Profile: Tiering

The Tiering page in the Vendor Risk Management application [ Vendor Profile ➔ Tiering] allows you to manage vendor tags, which contain requirements for the vendor. Select a vendor from the Vendors List and then use this page to assign requirements to a vendor for Bitsight VRM.

Actions

• Adjust the Trust Score
• Assign a Tag to the Vendor
• Edit the Tag Name

Adjust the Trust Score

1. Select the Adjust Trust Score option in the Manual Trust Score Adjustment card.
2. Set a positive or negative value (e.g., 5 or -5) or set to 0 to remove any adjustments.

   Examples:

   • The discovery of a security breach that is not recorded in the system could necessitate a reduction in the Trust Score to accurately reflect this additional risk factor.
   • If a monitored vendor is subject to sanctions, you might set their Trust Score to 0 to indicate they should no longer be considered for business.

3. Provide a reason for the adjustment (e.g., "External breach reported").
4. Select Confirm the adjustment to save the updated Trust Score.

The adjustment does not establish a fixed score; if changes occur to the Trust Score factors, the adjusted score dynamically reflects those updates.

Assign a Tag to the Vendor

1. Select Edit Tags at the bottom-right of the Tags card.
2. Use the Select Tags dropdown to select tags to apply to the vendor.
3. Select Save Tags.

Edit the Tag Name

1. Select Options at the top-right of the Tags card to open the Manage Tags window.
2. Select Edit to the right of a tag to edit.
3. Use the text field to change the name of the tag (up to 30 characters).
4. Select Confirm Tag Edit.

   You may revert the changes with the Revert Tag Edit button.

5. Select Save Tags.