Vendor risk assessments in Diri help you identify and manage security and compliance risks related to external suppliers. Vendors often provide or manage IT systems, process sensitive data or support critical business operations. Their weaknesses can directly affect your organisation.
Vendor risk assessments allow you to:
Modern organisations rely on many external parties. Without structured assessments, vendor-related risks may go unnoticed — leading to compliance gaps, security incidents or operational disruptions.
By registering and assessing vendors in Diri, you get:
Several attributes help define vendor risk:
These factors help you prioritise assessments and apply the right level of control.
Start with the vendor's pre-assessment (supplier security assessment). It scores the vendor and suggests treatments, and for many vendors a pre-assessment with its treatments and a signed approval is enough. When the score is high, Diri recommends a full risk assessment. See Pre-assessments. To see which suppliers your operations depend on most, use the supplier concentration analysis in Dependencies.
Vendors are registered under Vendors in the Vendors, Systems & Processes group in the left menu. See also Parties and customers.