Vendor Policies Ghertner Form

Instructions and help about Vendor Policies Ghertner

a third-party vendor risk management policy is a subset of an overall risk management process it checks up and verifies the compliance level of the third parties you work with whether they are contractors Associates or any other entities if you handle sensitive customer information other businesses you work with must have strong data protection policies since they'll be handling this data as well your policy should mandate measures such as data and network security Disaster Recovery protocols and access controls a vendor management policy allows you to identify which suppliers are risky and Implement controls to help you minimize that risk the exact details of your vendor management policy come down to your own preferences and the nature of your business here are some steps to get you started first Define your list of vendors which can include any third party you work with then you must analyze the risk level of each entity and prioritize them by how critical they are to your company's