Vendor Risk Workflows

Tiering, evidence tracking, and risk acceptance management

Vendor Due Diligence Workflows
3 vendors in active workflows
CRITICAL TIERIN-PROGRESS

FIS - Core Banking System

Stage: Ongoing Monitoring

92
Performance
7/7 Evidence
Review: 6/1/2025
92% Score
Compliant
CRITICAL TIERIN-PROGRESS

Cloudflare - CDN & Security

Stage: Evidence Collection

88
Performance
5/7 Evidence
Review: 3/15/2025
88% Score
Compliant
HIGH TIERCOMPLETE

Legacy Systems Inc - Document Management

Stage: Risk Acceptance

75
Performance
4/7 Evidence
Review: 4/1/2025
75% Score
Risk Accepted
Active Risk Acceptance
Expires: 12/31/2025 | Approved by: CISO
Compensating Controls:
  • •Network segmentation
  • •Enhanced monitoring
  • •Quarterly reviews