Bitsight VRM: Connecting With Vendors Workflow

Refer to the following workflow for connecting with vendors (connection request) and building your vendor inventory (add vendor).

1. Establish a list of all your vendors.
2. Use the Search Vendor or Domain search bar at the top of the Vendor Risk Management application to search for the vendor.
3. Select the Request Connection button at the top-right of the vendor’s Overview page. The following information is needed when requesting a connection:

   By requesting a connection, you agree that you are responsible for ensuring the recipients are not subject to any sanctions administered and enforced by the Office of Foreign Assets Control ("OFAC"), including, without limitation, the Specially Designated Nationals list.

   See the Bitsight Privacy Policy for more information about how we use personal data.

   • Contact Email: The vendor’s email address. Separate addresses using a comma to add multiple vendors.
   • Email Template: Apply an email template.
   • Subject: Enter an email subject.
   • Message: Include a message for the vendor outlining your requirements. See examples of a standard introduction and learn about regulation message compliance.
4. Select Send Request at the bottom-right of the Request Access to Your Vendor(s) Security Profile window. The vendor is emailed and prompted to complete their security profile.
5. Once added, vendors are listed in the following tabs of the Vendors page depending on the connection status:
   • Managed: Vendors that you are actively collaborating with. They have accepted your connection request. Use this tab to evaluate them as part of your due diligence process.
   • Monitored: Vendors that you are monitoring and manually added to your ecosystem. They have not yet accepted your invitation to connect so your request is pending.
   • Incoming Shares: Shares coming from vendors using Beacon or Trust Management Hub. Use this tab to view, accept (and sign non-disclosure agreements), or reject pending invites.