7. Working With << vendors >>

The vendors module is used to perform security risk assessment on third-party (vendor) products. It can be used to conduct targeted risk assessments to assess compliance with specific laws and regulations or industry standard recommendations such as HECVAT. The vendors module allows you to create and fill out vendor surveys, view previously submitted and stored vendor assessments, and share them across your organization. This allows you to avoid having to repeat assessments which have already been performed by other organizational units.

To access the vendors module, click the link on the Isora GRC toolbar.

Open

Use the tabs to access both open and complete assessments. Open assessments include those that have been created by your organization, but not yet launched (submitted to vendors). As long as an assessment has not yet been launched, you can still edit it. Open assessments also include those that have been launched, but the vendor has not yet completed them. Completed assessments have been filled out and submitted by the vendors.

Next: 7.1 Creating a vendor assessment