{"id":20440,"date":"2024-10-04T15:32:30","date_gmt":"2024-10-04T13:32:30","guid":{"rendered":"https:\/\/sertalink.com\/?page_id=20440"},"modified":"2024-10-04T16:10:28","modified_gmt":"2024-10-04T14:10:28","slug":"third-party-risk-management","status":"publish","type":"page","link":"https:\/\/sertalink.com\/fr\/third-party-risk-management\/","title":{"rendered":"Third-Party Risk Management"},"content":{"rendered":"[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”4.27.0″ background_color=”#000000″ background_enable_image=”off” custom_margin=”||||true|true” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row admin_label=”row” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text admin_label=”Text” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][\/et_pb_text][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Third-Party Risk Management<\/span><\/h1>\n
\n
\n

Not a fan of risky business? Identify, evaluate, and monitor vendor risk with Drata\u2019s all-in-one third-party risk management (TPRM) so you can be confident in the vendors you work with.<\/span><\/p>\n<\/div>\n<\/div>[\/et_pb_text][et_pb_button button_url=”https:\/\/drata.com\/demo” button_text=”Book Demo” button_alignment=”left” _builder_version=”4.27.0″ _module_preset=”default” background_layout=”dark” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2F5C7Gzqxq5gES1FEPMC6al2%2Fadf1057340efbb4212164602e1fa7727%2FGain_confidence_in_your_vendors__security__1_.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

\n
Stay Informed<\/strong> <\/span><\/div>\n

Gain Confidence in Your Vendors\u2019 Security<\/h2>\n
\n
\n

With 83% of companies facing negative consequences from TPRM processes, it\u2019s crucial to reduce blindspots, know who you\u2019re doing business with, and improve how you manage risk.<\/p>\n

\n

Populate your vendor directory and keep it up to date to have a complete picture of your vendor ecosystem and the risks they pose to your organization so you can make informed decisions.<\/p>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][et_pb_button button_url=”https:\/\/drata.com\/resources\/risk-trends” button_text=”Learn More” button_alignment=”left” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

\n
\n
Simplify Your Process<\/span><\/strong><\/div>\n

Manage All Your Risk, All in One Place<\/h2>\n
\n
\n

With all your vendor information in one place, you can streamline the risk management process and minimize human error.<\/p>\n

<\/p>\n

Automate the way you assess potential impacts of vendors, and easily identify your highest risk vendors. Identify and track Vendor Risks, including impact, likelihood, and treatment plan, as part of your organizational risk management program. Document and report vendor information to auditors without the hassle of managing multiple spreadsheets and tools.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2F1Tq2UnMCCbTyadqyYkRFoR%2Fa205ee4e93dd987cb62dcddad5d14822%2FManage_all_your_risk___all_in_one_place.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ theme_builder_area=”post_content” _builder_version=”4.27.0″ _module_preset=”default” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row column_structure=”3_4,1_4″ _builder_version=”4.27.0″ _module_preset=”default” background_color=”#0580e8″ custom_padding=”15px|15px|15px|15px|true|true” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”3_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]

\n

See Third-Party Risk Trends<\/span><\/h2>\n

Get the 2023 Risk Trends Report to learn trends and pressing issues surrounding third-party risk and processes to manage it.<\/span><\/p>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_button button_url=”https:\/\/drata.com\/resources\/risk-trends” button_text=”Download Now” _builder_version=”4.27.0″ _module_preset=”default” background_layout=”dark” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2F1FNBaliNhNT7bnOxxP7uEe%2Fa6c471499963c2e6d065916ea6853d5e%2FAvoid_surprises_with_proactive_monitoring__1_.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

\n
\n
Gain Peace of Mind<\/span><\/strong><\/div>\n

Avoid Surprises with Proactive Monitoring<\/h2>\n
\n
\n

Risks don\u2019t stop. So neither should your risk management. Proactively address vendor performance by conducting security reviews, sending custom security questionnaires based on vendor impact, and setting reminders for your next security review. With this proactive process, you can quickly spot and mitigate new security gaps before they become more significant issues.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][et_pb_button button_url=”https:\/\/drata.com\/demo” button_text=”Book a Demo” button_alignment=”left” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

\n
\n
\n
Streamline Reviews<\/span><\/strong><\/div>\n

Summarize Vendor Security Questionnaire Responses with Drata AI<\/h2>\n
\n
\n

Risky business has met its match. Use Drata AI to summarize the vendor security questionnaire responses you\u2019ve received\u2014either inside or outside of Drata\u2014to quickly determine whether vendors meet your teams\u2019 security standards and identify potential risk. Then, easily share to communicate your findings with internal stakeholders.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][et_pb_button button_url=”https:\/\/drata.com\/ai-approach” button_text=”Learn More” button_alignment=”left” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2F5DulycXCsBJ1ZMhnCyUIHl%2F51631e0414db4b66b81bf00dd287d2b9%2FSummarize_vendor_security_questionnaires_responses.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_heading title=”Here\u2019s What You Can Do with Third-Party Risk Management” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_heading][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_4,1_4,1_4,1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/2YgW0Q8C8vvchxrqZxwYo2\/b6e06263e2ed3a09d11c330fc1bfd6ec\/HRIS.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Identify Third Parties<\/h3>\n
\n
\n

Using Okta SSO, we populate your Vendor Directory so you have a single source of truth of your vendors’ security information.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/4XBoS6VyYSfJO9ltajsq1j\/1eb0dfc122c855f938e63df6da053491\/Framework_Control_Overlap.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Keep Your Vendor Directory up to Date<\/h3>\n
\n
\n

Bulk Upload quickly adds vendors to your Vendor Directory, while Bulk Update easily populates new info across multiple vendors.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/MFSLhqLGCSnnwXJVfXL3G\/f9b0bf97fe8240d4283dcfbf86bd4ca0\/built-for-you-icon.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″ width=”80px”][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Achieve Compliance<\/h3>\n
\n
\n

Meet compliance requirements by documenting your vendors\u2019 security reports, certifications, and share with auditors.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/3Z9zJCbjUjLbH6k6dbG5wN\/8b9928c496d9f9a4c48e128a13f9a66d\/product-releases-icon.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″ width=”80px”][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″]

Assign Vendor Impact<\/h3>\n
\n
\n

Standardize the way you assess vendor impact and analyze potential security threats with automated impact analysis.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_4,1_4,1_4,1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/4DCxfFdNulj0xwYueW4ylt\/9f20662007e735bfcb9c505a3194aa45\/Compliance.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Send & Review Questionnaires<\/h3>\n
\n
\n

Gain deeper insight into your vendors\u2019 risk posture, then review questionnaire responses and take action on their responses.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/422LF3HadKQ2lVxy1zDqbQ\/12be3078ed88746a47bb1f638cb1469e\/Expedite_Security_Questionnaires.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Use Drata AI-Generated Summaries<\/h3>\n
\n
\n

Quickly understand security questionnaire responses to identify potential vendor risks, and share with internal stakeholders.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/tzDbDsRuyU2uS2EniGFCP\/fe629ed39740bb3747eeb0f5b4aec20b\/150_Pre-mapped_Risks.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″ width=”80px”][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

Evaluate & Manage Risks<\/h3>\n
\n
\n

Monitor vendor risks and track them as part of your organization\u2019s Risk Register.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/images.drata.com\/x3hoqyjm3c27\/4I2TUtl7RlkyprZdeV7hvb\/cbfd64b5f4a9b5de9ca22d5b6beb9603\/compliance-icon.svg” _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″ width=”80px”][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ sticky_enabled=”0″]

Report to Stakeholders<\/h3>\n
\n
\n

Easily interpret and share the current state of your vendor risk management program to your C-suite.<\/p>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ theme_builder_area=”post_content” _builder_version=”4.27.0″ _module_preset=”default” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content”][et_pb_column _builder_version=”4.27.0″ _module_preset=”default” type=”4_4″ theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” hover_enabled=”0″ sticky_enabled=”0″]

\n

Join the Thousands of Companies that Trust Drata<\/strong><\/h2>\n<\/div>\n
See All Case Studies<\/path><\/g><\/rect><\/clippath><\/defs><\/svg><\/a><\/div>\n
\n
<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content”][et_pb_column _builder_version=”4.27.0″ _module_preset=”default” type=”4_4″ theme_builder_area=”post_content”][et_pb_image src=”https:\/\/sertalink.com\/wp-content\/uploads\/2024\/10\/download-1.png” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” title_text=”download (1)” hover_enabled=”0″ sticky_enabled=”0″][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ theme_builder_area=”post_content” _builder_version=”4.27.0″ _module_preset=”default” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content”][et_pb_column _builder_version=”4.27.0″ _module_preset=”default” type=”4_4″ theme_builder_area=”post_content”][et_pb_testimonial author=”Kyle Rockman” portrait_url=”https:\/\/images.drata.com\/x3hoqyjm3c27\/1EUhoomGmpMIYVxCiuQQyf\/7593a2c2fe62c4de9506f9c5d1b55b85\/OpsLevel.svg” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” job_title=”Platform Engineering Manager, OpsLevel” hover_enabled=”0″ sticky_enabled=”0″]

Drata is turn key enough for us to use to operate our security posture without having to be a security expert. Having insights about our vendors enables us to quickly visualize the distribution of vendors across our key business units, where they are in the vendor lifecycle, and take action on most urgent vendor reviews.<\/span><\/p>[\/et_pb_testimonial][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”]

The Latest Resources<\/span><\/h1>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_3,1_3,1_3″ _builder_version=”4.27.0″ _module_preset=”default” link_option_url=”https:\/\/drata.com\/blog\/what-is-shift-left-security” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][et_pb_column type=”1_3″ _builder_version=”4.27.0″ _module_preset=”default” link_option_url=”https:\/\/drata.com\/blog\/vendor-management-policy” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2F4ucd8BFjXcHjXXcTLtwpbd%2F4c9514808c2eb34e7ff4c10a0a3d7ce1%2FCreating___Maintaining_a_Vendor_Management_Policy.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]
\n
\n
\n
\n
\n
\n
Blog<\/h6>\n
\n
\n

Creating + Maintaining a Vendor Management Policy<\/h3>\n
\n
\n

Learn how to control the security and compliance risks of your company\u2019s..<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.27.0″ _module_preset=”default” link_option_url=”https:\/\/drata.com\/blog\/third-party-risk-management” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2F7BAy51z0Ax5WiqKiFxcVIJ%2F4d472f8c10fb1d70395bde750d6a1308%2Fthird-party-risk-management-hero.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

\n
\n
\n
\n
\n
\n
Blog<\/h6>\n
\n
\n

Beginner\u2019s Guide to Third-Party Risk Management<\/h3>\n
\n
\n

Third-party risk management helps bring your external risks under control and lets you address security, fi…<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.27.0″ _module_preset=”default” link_option_url=”https:\/\/drata.com\/blog\/vendor-risk-management” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][et_pb_image src=”https:\/\/drata.com\/_next\/image?url=https%3A%2F%2Fimages.drata.com%2Fx3hoqyjm3c27%2FwaM1eJtBbRl8bqM4DIb6o%2F3cb6c550040d6e7301e8a206548d4e40%2FThird-party_Risk_Management.png&w=1920&q=75″ _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″][\/et_pb_image][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” sticky_enabled=”0″]

\n
\n
\n
\n
\n
\n
Blog<\/h6>\n
\n
\n

Understanding Vendor Risk Management (VRM) + Best Practices<\/h3>\n
\n
\n

As boundaries between company and vendor systems blur, exposure…<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ theme_builder_area=”post_content” _builder_version=”4.27.0″ _module_preset=”default” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row column_structure=”3_4,1_4″ _builder_version=”4.27.0″ _module_preset=”default” background_color=”#0580e8″ custom_padding=”15px|15px|15px|15px|true|true” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”3_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]

\n

Be Confident with Your Vendors<\/span><\/h2>\n

Identify, evaluate, and monitor third-party risk with Drata<\/span><\/p>\n<\/div>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_button button_url=”https:\/\/drata.com\/demo” button_text=”Book Demo” _builder_version=”4.27.0″ _module_preset=”default” background_layout=”dark” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ theme_builder_area=”post_content” _builder_version=”4.27.0″ _module_preset=”default” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on” da_disable_devices=”off|off|off”][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content”][et_pb_column _builder_version=”4.27.0″ _module_preset=”default” type=”4_4″ theme_builder_area=”post_content”][et_pb_heading title=”Frequently Asked Questions About Third Party Risk Management” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” hover_enabled=”0″ sticky_enabled=”0″ title_text_align=”center”][\/et_pb_heading][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content”][et_pb_column _builder_version=”4.27.0″ _module_preset=”default” type=”4_4″ theme_builder_area=”post_content”][et_pb_accordion _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” hover_enabled=”0″ sticky_enabled=”0″][et_pb_accordion_item title=”What is third-party risk management?” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” open=”on” hover_enabled=”0″ sticky_enabled=”0″]

Third-party risk management is the process of identifying and mitigating risks created when working with outside organizations. It is a proactive solution to risk control, which provides the framework, policies, and procedures you need to evaluate new and existing third-party partnerships. <\/span><\/p>[\/et_pb_accordion_item][et_pb_accordion_item title=”How do I get started with building a third-party risk management program?” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” open=”off” hover_enabled=”0″ sticky_enabled=”0″]

Here’s a simple three-step TPRM process to ensure your company is mitigating third-party risk when possible:<\/p>\n

 <\/p>\n

    \n
  1. \n

    Review and revise existing risk policies. Keep third-party exposure in mind.\u00a0 Be sure to consider how third parties can impact regulatory and other compliance requirements.<\/p>\n<\/li>\n

  2. \n

    Conduct an audit of third-party relationships. Extend this review beyond your formal purchasing contracts. Consider open-source dependencies, workgroup-level relationships, and shadow IT. Understand the risks created by these relationships.<\/p>\n<\/li>\n

  3. \n

    Draft internal and external TPRM policies. Supplement these policies with compliance expectations for specific business units.<\/p>\n<\/li>\n<\/ol>[\/et_pb_accordion_item][et_pb_accordion_item title=”What are the stages of third party risk management?” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” open=”off” hover_enabled=”0″ sticky_enabled=”0″]

    \n
      \n
    1. \n

      Evaluation: Assess a third party\u2019s ability to manage and mitigate risk.<\/p>\n<\/li>\n

    2. \n

      Onboarding: Obtain formal agreements with specific compliance expectations.<\/p>\n<\/li>\n

    3. \n

      Monitoring: Evaluate third-party security and risk management systems regularly.<\/p>\n<\/li>\n

    4. \n

      Maintenance: Update policies and respond to risks as they are identified.<\/p>\n<\/li>\n

    5. \n

      Offboarding: Sever system integrations and destroy or return business records.<\/p>\n<\/li>\n<\/ol>\n<\/div>[\/et_pb_accordion_item][et_pb_accordion_item title=”How do you mitigate vendor risk?” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” open=”off” hover_enabled=”0″ sticky_enabled=”0″]

      \n
        \n
      1. \n

        Vendor risk can be mitigated by having a third-party risk management program. An effective third-party risk management program reduces:\u00a0<\/p>\n

        \n

          \n
        • \n

          Cost: Organizations develop proactive measures to prevent or mitigate financial risks.\u00a0<\/p>\n<\/li>\n

        • \n

          Compliance risks: A TPRM framework identifies legal risks and helps develop controls and contingencies.<\/p>\n<\/li>\n

        • \n

          Confusion: Risk management increases organizational visibility across all relationship stages.\u00a0<\/p>\n<\/li>\n<\/ul>\n

          \n

          In addition, an effective TPRM program increases security, trust and reporting capabilities.<\/p>\n<\/li>\n<\/ol>\n<\/div>[\/et_pb_accordion_item][et_pb_accordion_item title=”How do you determine vendor risk?” _builder_version=”4.27.0″ _module_preset=”default” theme_builder_area=”post_content” open=”off” hover_enabled=”0″ sticky_enabled=”0″]

          \n

          The risks associated with your vendors would be any that you have discovered during your security review process of the vendor that you are monitoring, tracking, treating or accepting as you are in business with this vendor. These typically fall into the categories of Profiled Risk, Inherent Risk, or Residual Risk. For example: \u201cVendor has a password policy that does not meet our internal policy requirements for passwords.\u201d<\/p>\n

          \n

          Once a risk is identified, determine the appropriate treatment plan. In the example above, this might be: \u201cVendor will implement stronger password policy by Q1\/Q2.<\/p>\n<\/div>[\/et_pb_accordion_item][\/et_pb_accordion][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.27.0″ _module_preset=”default” background_color=”#000000″ da_disable_devices=”off|off|off” global_colors_info=”{}” da_is_popup=”off” da_exit_intent=”off” da_has_close=”on” da_alt_close=”off” da_dark_close=”off” da_not_modal=”on” da_is_singular=”off” da_with_loader=”off” da_has_shadow=”on”][et_pb_row _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”]

          Automate Your Journey<\/span><\/h2>\n
          \n

          Drata’s platform experience is designed by security and compliance experts so you don’t have to be one.<\/span><\/p>\n<\/div>[\/et_pb_text][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]

          \n

          See Third-Party Risk Trends<\/span><\/h2>\n

          Get the 2023 Risk Trends Report to learn trends and pressing issues surrounding third-party risk and processes to manage it.<\/span><\/p>\n<\/div>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_3,1_3,1_3″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_3″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” custom_padding=”15px|15px|15px|15px|true|true” border_radii=”on|5px|5px|5px|5px” border_width_all=”1px” border_color_all=”#0C71C3″ global_colors_info=”{}”]

          Connect<\/span><\/h2>\n

          Easily integrate your tech stack with Drata.<\/span><\/h4>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” custom_padding=”15px|15px|15px|15px|true|true” border_radii=”on|5px|5px|5px|5px” border_width_all=”1px” border_color_all=”#0C71C3″ global_colors_info=”{}”]

          Configurer<\/span><\/h2>\n

          Pre-map auditor validated controls.<\/span><\/h4>[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.27.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.0″ _module_preset=”default” custom_padding=”15px|15px|15px|15px|true|true” border_radii=”on|5px|5px|5px|5px” border_width_all=”1px” border_color_all=”#0C71C3″ global_colors_info=”{}”]

          Comply<\/span><\/h2>\n

          Begin automating evidence collection.<\/span><\/h4>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]","protected":false},"excerpt":{"rendered":"

          Third-Party Risk Management Not a fan of risky business? Identify, evaluate, and monitor vendor risk with Drata\u2019s all-in-one third-party risk management (TPRM) so you can be confident in the vendors you work with. Stay Informed Gain Confidence in Your Vendors\u2019 Security With 83% of companies facing negative consequences from TPRM processes, it\u2019s crucial to reduce […]<\/p>","protected":false},"author":29,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"class_list":["post-20440","page","type-page","status-publish","hentry"],"yoast_head":"\nThird-Party Risk Management | Sertalink Belgium & Luxembourg<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sertalink.com\/fr\/third-party-risk-management\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Third-Party Risk Management | Sertalink Belgium & Luxembourg\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sertalink.com\/fr\/third-party-risk-management\/\" \/>\n<meta property=\"og:site_name\" content=\"Sertalink Belgium & Luxembourg\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sertalink\/\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-04T14:10:28+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@sertalink_bnlx\" \/>\n<meta name=\"twitter:site\" content=\"@sertalink_bnlx\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Organization\",\"Place\"],\"@id\":\"https:\/\/sertalink.com\/fr\/#organization\",\"name\":\"Sertalink Belgium\",\"url\":\"https:\/\/sertalink.com\/fr\/\",\"sameAs\":[\"https:\/\/www.facebook.com\/sertalink\/\",\"https:\/\/www.linkedin.com\/company\/sertalink\/\",\"https:\/\/twitter.com\/sertalink_bnlx\"],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/sertalink.com\/fr\/#logo\",\"inLanguage\":\"fr-FR\",\"url\":\"https:\/\/sertalink.com\/wp-content\/uploads\/2016\/09\/sertaLinkLogo.png\",\"width\":90,\"height\":112,\"caption\":\"Sertalink Belgium\"},\"image\":{\"@id\":\"https:\/\/sertalink.com\/fr\/#logo\"},\"location\":{\"@id\":\"https:\/\/sertalink.com\/third-party-risk-management\/#local-place\"},\"address\":{\"@id\":\"https:\/\/sertalink.com\/third-party-risk-management\/#local-place-address\"},\"email\":\"sales@sertalink.com\",\"telephone\":\"+3293109351\",\"areaServed\":\"Benelux\",\"vatID\":\"BE 0632.806.125\"},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/sertalink.com\/fr\/#website\",\"url\":\"https:\/\/sertalink.com\/fr\/\",\"name\":\"Sertalink Belgium & Luxembourg\",\"description\":\"Your link to a safe environment\",\"publisher\":{\"@id\":\"https:\/\/sertalink.com\/fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/sertalink.com\/fr\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/sertalink.com\/third-party-risk-management\/#webpage\",\"url\":\"https:\/\/sertalink.com\/third-party-risk-management\/\",\"name\":\"Third-Party Risk Management | Sertalink Belgium & Luxembourg\",\"isPartOf\":{\"@id\":\"https:\/\/sertalink.com\/fr\/#website\"},\"datePublished\":\"2024-10-04T13:32:30+00:00\",\"dateModified\":\"2024-10-04T14:10:28+00:00\",\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/sertalink.com\/third-party-risk-management\/\"]}]},{\"@type\":\"Place\",\"@id\":\"https:\/\/sertalink.com\/third-party-risk-management\/#local-place\",\"address\":{\"@type\":\"PostalAddress\",\"@id\":\"https:\/\/sertalink.com\/third-party-risk-management\/#local-place-address\",\"streetAddress\":\"Gentse Steenweg 47\",\"addressLocality\":\"Lokeren\",\"postalCode\":\"9160\",\"addressRegion\":\"Oost-Vlaanderen\",\"addressCountry\":\"BE\"},\"geo\":{\"@type\":\"GeoCoordinates\",\"latitude\":\"\",\"longitude\":\"\"},\"openingHoursSpecification\":[{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Monday\",\"Tuesday\",\"Wednesday\",\"Thursday\",\"Friday\"],\"opens\":\"09:00\",\"closes\":\"17:30\"},{\"@type\":\"OpeningHoursSpecification\",\"dayOfWeek\":[\"Saturday\",\"Sunday\"],\"opens\":\"00:00\",\"closes\":\"00:00\"}],\"telephone\":\"+3293109351\"}]}<\/script>\n<meta name=\"geo.placename\" content=\"Lokeren\" \/>\n<meta name=\"geo.region\" content=\"Belgique\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","_links":{"self":[{"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/pages\/20440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/users\/29"}],"replies":[{"embeddable":true,"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/comments?post=20440"}],"version-history":[{"count":8,"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/pages\/20440\/revisions"}],"predecessor-version":[{"id":20452,"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/pages\/20440\/revisions\/20452"}],"wp:attachment":[{"href":"https:\/\/sertalink.com\/fr\/wp-json\/wp\/v2\/media?parent=20440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}