Vendor Risk Management Application

The Vendor Risk Management application is optimized for Bitsight VRM. It is a centralized repository of your vendors’ ecosystem and their security posture.

Use the App Switcher, located at the top of the left navigation menu, to toggle between applications.

Navigation Menu

Use the toggle, on the bottom left, to expand or collapse the menu at any time to get a wider view of the data.

Menu Section		Description
Vendors		Get a summary of your managed and monitored vendors.
Vendor Profile		Vendor details.
	Overview	Get an overview of a selected vendor.
	Tiering	Manage vendor tags.
	Internal Questionnaires	Scope vendors during intake, manage assessments, and onsite assessments.
	Requirements	Get a summary of a vendor’s requirements and their progress in completing assessments.
	Findings	See a selected vendor’s findings.
	Security Profile	Check the latest versions of security reviews, including questionnaires, certifications, insurance policies, external audits, and assessments.
	Contacts	Assign collaborators to oversee your vendor risk management program and ensure the completion of vendor risk management tasks.
	Internal Documents	Upload and manage internal documents, such as vendor contracts and non-disclosure agreements.
	Audit Trail	See a log of actions users have taken.
Findings		A vendor's findings.
Assessment Setup		Manage your vendor assessment settings.
	Requirements	Manage requirements for your vendors.
	Scoring	Set up the Trust Score, which is a measure of the trustworthiness of a vendor based on security attributes best associated with good security posture, and Impact Score weights.
	Due Date	When a new vendor is invited to connect, automatically set a due date for requirements.
	Messaging	Manage email templates for sending an invitation to connect with a vendor.
	Life Cycle	Configure your life cycle settings.
	Findings	Assessment setup findings.
	Tag Management	Manage vendor tags and document tags.