Vendor Management
All questions you face reviewing a Vendor answered. Learn more about Managing and Reviewing vendors here.
10 articles
What do Active, Inactive and Off Boarded mean — and when should I delete a vendor instead?
Assigning a vendor owner and who can manage vendors
Review cadence and 'Due for Review': when the next review starts and why the status changes
Vendor review findings and the Risk Register ('Add to Register')
Collecting vendor security reports (SOC 2, SOC 3, ISO, pentest, service agreement)
Setting the vendor risk level — and when to override the AI
What does a vendor review need before I can complete it?
Answer the questionnaire yourself or send it to the vendor?
What counts as a vendor — and what doesn't
Is your vendor a subprocessor, a reseller or storing PII?