Vendor Controls

Vendor Control Categories are groups of Vendor Controls that address similar risks, which helps organize Controls in Vendor Reviews. Vendor Controls are the basic security and HR measures that a Vendor has in place to maintain security, integrity, and confidentiality. The Reviewer marks these Controls as In Place or Audited based on provided documentation in a Vendor Review.

Create a Vendor Control Category Template — The User can create a new Vendor Control Category Template in the Platform. A Vendor Control Category Template consists of multiple Sub Controls. When starting a Vendor Review, all Control Category Templates are copied into the fresh Vendor Review. When updated, a Control Category Template will NOT automatically update the Control Categories in existing Vendor Reviews

Create a Vendor Sub-Control — The User can create a new Sub-Control attached to a Vendor Control Category Template. A Vendor Control Category Template consists of multiple Sub Controls. When starting a Vendor Review, all Control Category Templates and corresponding Sub-Controls are copied into the fresh Vendor Review. Updated a Control Category Template Sub-Control will NOT automatically update the Control Categories in existing Vendor Reviews

Vendor Sub Controls and Risk Sub Controls can be linked, so changes to a Vendor Control can change the Rating of a Risk Sub Control automatically. Link to Article