Skip to content
  • There are no suggestions because the search field is empty.

Conduct classifications of vendors and their assets

Understanding the risk your vendors pose is critical to maintaining a secure and compliant operation. Our Vendor Management Module enables you to classify vendors based on risk levels within various compliance areas, ensuring that you can focus your efforts on managing high-risk vendors.

Once your classification template is activated, it can be added to any relevant vendor in the Privacy module. To activate a template, go to Settings > Classifications, select the template, and set its status to Active. Then follow these steps to add it to a vendor:

  1. Go to Legal entities > Vendors in the menu.
  2. Select the specific vendor from the list.
  3. On the vendor page, open the Classifications tab.

Click Add classification. A dropdown will display all active classification templates created by your administrator under Settings > Classifications. Select the template you wish to apply to the vendor. Only active classification templates will be shown in the dropdown. Optionally, if you want to answer the template in relation to a specific asset provided by the vendor, select that asset from the dropdown. Only assets already linked to the vendor appear here; you can review them under the Assets tab on the vendor page. 

The added classification now appears in the list under the Classifications tab. To complete it:

  1. Click Answer classification to open the classification form.
  2. Fill in your answers, then click Submit.
  3. The risk level, score, submission date, and submitting user are now visible in the list.
  4. To add a note, open the overflow menu on the classification row and select Add note.
 

Based on the risk level and score, take action if any answers do not meet your compliance requirements. If further steps are needed to ensure compliance and improvement goals are met, document them in the notes on the classification. You can also use task management to create and follow-up on tasks related to the the classification. 


Related Articles