Classify Vendor Risk

Who can use this feature?

	All Account Owners and Security Admins
	Any End Users assigned as an owner to one or more vendors
	Available on the Free, Core and Business plans

Vendor risk is determined based on the types of data a vendor can access or process.

Open Vendor Management

Navigate to Vendor Management from the left-hand menu.

Select Vendor

Click the vendor card you want to classify.

Edit Vendor Details

Open the vendor details or edit view.

Select Data Types

Choose Accessed Data Types that the vendor handles.

Save Changes

Save the vendor to apply the risk classification.

What Happens Next

The vendor risk level is determined based on selected data types.

Higher sensitivity data increases vendor risk classification.

Risk classification influences assessment and monitoring requirements.

Updated classifications are reflected immediately in the vendor record.

Cannot Update Data Types

If you cannot update data types:

Ensure you have the Account Owner or Security Admin role

Verify the vendor is editable

Refresh the page and try again

Risk Classification Not Updating

Incorrect Risk Level Displayed