# Classify Vendor Risk

<div style="
  background: rgba(128,128,128,0.08);
  border: 2px solid rgba(128,128,128,0.25);
  border-radius: 10px;
  padding: 20px 20px 0px 20px;
">
  <div style="font-weight:700; margin-bottom:20px;">Who can use this feature?</div>

  <table style="border-collapse:collapse;">
    <tr>
      <td style="vertical-align:top; padding:0 8px 10px 0;">
        <Icon icon="material-filled-person" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0 0 10px 0;">
        All <span style="color:#d760f9; font-weight:600;">Account Owners</span> and <span style="color:#d760f9; font-weight:600;">Security Admins</span>
      </td>
    </tr>

    <tr>
      <td style="vertical-align:top; padding:0 8px 10px 0;">
        <Icon icon="material-filled-person" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0 0 10px 0;">
        Any <span style="color:#d760f9; font-weight:600;">End Users</span> assigned as an owner to one or more vendors
      </td>
    </tr>

    <tr>
      <td style="vertical-align:top; padding:0 8px 0 0;">
        <Icon icon="material-filled-flag" color="#d760f9"/>
      </td>
      <td style="vertical-align:top; padding:0;">
        Available on the <span style="color:#d760f9; font-weight:600;">Free</span>, <span style="color:#d760f9; font-weight:600;">Core</span> and <span style="color:#d760f9; font-weight:600;">Business</span> plans
      </td>
    </tr>
  </table>
</div>

---

## Classify Vendor Risk

:::info[]
Vendor risk is determined based on the types of data a vendor can access or process.
:::

<Steps>

<Step title="Sign in to WatchDog Security">
  Sign in to the [**WatchDog Security Platform**](app.watchdogsecurity.io).
</Step>

<Step title="Open Vendor Management">
  Navigate to **Vendor Management** from the left-hand menu.
</Step>

<Step title="Select Vendor">
  Click the vendor card you want to classify.
</Step>

<Step title="Edit Vendor Details">
  Open the vendor details or edit view.
</Step>

<Step title="Select Data Types">
  Choose **Accessed Data Types** that the vendor handles.
</Step>

<Step title="Save Changes">
  Save the vendor to apply the risk classification.
</Step>

</Steps>

---

## What Happens Next

<TipInfo>The vendor risk level is determined based on selected data types.</TipInfo>
<TipInfo>Higher sensitivity data increases vendor risk classification.</TipInfo>
<TipInfo>Risk classification influences assessment and monitoring requirements.</TipInfo>
<TipInfo>Updated classifications are reflected immediately in the vendor record.</TipInfo>

---

## Troubleshooting

<AccordionGroup>

<Accordion title="Cannot Update Data Types" defaultOpen>
If you cannot update data types:

- Ensure you have the **Account Owner** or **Security Admin** role  
- Verify the vendor is editable  
- Refresh the page and try again  
</Accordion>

<Accordion title="Risk Classification Not Updating">
If the risk level does not change:

- Ensure **Accessed Data Types** were updated and saved  
- Verify at least one data type is selected  
- Refresh the vendor page to see updates  
</Accordion>

<Accordion title="Incorrect Risk Level Displayed">
If the risk level seems incorrect:

- Review selected **Accessed Data Types** for accuracy  
- Ensure high-risk data types (e.g., financial, PHI) are correctly assigned 
- Update and save the vendor again  
</Accordion>

</AccordionGroup>
