CIS-VRM Certified Implementation Specialist -Vendor Risk Management Questions and Answers

Update answers to returned questionnaires

Communicate or share information with other vendors of the assessing organization

Create new issues and tasks for the vendor risk assessor team

Review and respond to issues created by the assessing organization

Manage vendor contacts and task assignments within the vendor organization

Respond to assessments sent by the assessing organization

GDPR

SOC1 & SOC2

SIG

SOX

Assessments are performed via the Vendor Portal and spreadsheets

More efficiently communicating Assessments with a single contact

Assessments are shared through the Vendor Portal and email

More efficiently completing Assessments via the Vendor Portal

Responses Received

Generating Observations

Submitted to Vendor

Finalizing with Vendor

Vendor Business Owner

Vendor

Primary Contact

Vendor Manager

To help vendors improve their security posture and preparedness

To assess and manage the risk from interactions with vendors and third parties

To help negotiate the best possible price for a product or service from the vendor

To verify that vendors have adequate measures and processes in place to ensure profitability of vendor