domains / families / security / vendor-management

vendor-management

authentic

Implement vendor risk management programs. Assess third-party security and maintain vendor inventory. Use when managing supplier security.

When to use

• Onboarding new vendors that will access company data or systems
• Conducting annual vendor risk assessments and reassessments
• Negotiating security requirements in vendor contracts
• Monitoring vendor SLA compliance and security posture
• Preparing vendor management evidence for SOC 2 or ISO 27001 audits

Skill page

Source