Understanding Notifications in VRM and TMH (A Guide for Customers & Vendors)

Notifications help you and your vendors stay on top of tasks that need to be done in Vendor Risk Management (VRM) and Trust Management Hub (TMH). While some notifications are automated, others can be configured to support specific processes.

Connection Notifications

When sending connection requests to invite vendors to collaborate in Bitsight, notifications are sent to multiple parties:

• Sender: Receives a confirmation email once the request is sent.
• Vendor Contacts: Receive a notification email with instructions to log in and access the TMH dashboard.
• Admin/Operations Users: Notified if a connection request is waiting or if new contacts require account approval.

Please note that notifications are also triggered when:

• A connection is accepted
• A security profile is shared (after signing an NDA)
• Or when a connection is revoked.

Today's Notifications

Bitsight VRM generates daily summary emails for Admin and Operations users at your company to keep users informed of portfolio updates, including:

• Requirements: Status changes (completed or incomplete) and upcoming review deadlines (i.e. 30-day warnings).
• Artifacts: Notifications regarding the addition, update, or expiration of certifications, insurances, and audits.
• Surveys: Alerts when vendors start/complete surveys
• Findings: Alerts indicate remediation plans for findings.
• Invites: Connection requests are accepted or denied
• Internal Documents: Notification regarding expiring tiering documents.

Email notifications from TMH go to all Admin and Operations users at the vendor company across their connected customers, including: 

• Requirements: Status changes to requirements and review cycles.
• Findings: Notifications issued regarding finding activity or status changes.
• Artifacts: Notifications regarding the expiration of certifications, insurances, and audits.
• Surveys: Notifications are issued when a customer sends a message about a survey.
• Invites: Notifications of connection request status updates
• Due Date: Reminders of due dates.

Daily notifications from VRM and TMH all have a button at the bottom of the email that you can select to login to the respective application.

Custom Notifications

Custom notifications allow you to personalize communication with vendors to explain the legitimacy and importance of your VRM requests.

Email Templates

Templates ensure consistent messaging and can be customized based on vendor type or specific regulations. To create an email template:

1. Navigate to Assessment Setup > Messaging.
2. Select Add Template and provide a descriptive name.
3. Enter the email subject and body content.
4. Select Create Template. Your template will now be available to choose from when you’re sending a connection request.

Due Date and Finding Notifications

Admins can also define specific alerts for findings and due dates. These are sent as part of the Today’s Notifications summary based on specified intervals (e.g., a set number of days before or after a requirement is due).

To create a finding notification:

1. Navigate to Assessment Setup > Messaging.
2. Under the Finding Notifications section, select Add Notification.
3. Enter a title and a message for your notification.
4. Select how long after a finding is reported the message should be sent.
5. Select Set Up Notification.

To create a due date notification:

1. Navigate to Assessment Setup > Messaging.
2. Select Add Notification.
3. Enter a title and a message for your notification.
4. Select how long before or after the due date the message should be sent.
5. Select Set Up Notification.