Skip to main content

Add a third party (vendor)

Where: Trust Management → Third-Party Risk Management → Third Parties, or open Third Parties.

Who: admins, or members whose department has access to the TPRM module.

Steps​

  1. Click Create Third Party, or open the create form directly.
  2. Fill in the required fields:
    • Company name
    • Contact name and Contact email: the person who will receive assessments.
    • Inherent Risk Rating: Critical, High, Medium, Low or Not rated.
    • Data Sensitivity: Public (no confidential data shared), Internal (internal-only business data), Confidential (customer or commercial data) or Restricted (PII, PHI, payment or credentials).
  3. Optionally add the Contact Phone, Address, Website and Description.
  4. Click Create.

The inherent risk rating sets the default reassessment cadence: Critical every 3 months, High every 6 months, Medium every 12 months, Low every 24 months, and Not rated has no automatic schedule.

Edit, delete or reactivate​

  • Use the row actions (Edit, Delete) in the Current tab.
  • Deleted third parties move to the History tab, where Reactivate brings them back.

Next step​

Send an assessment to the third party.