Skip to content

Vendor Management

Building a strong vendor management program can take a lot of time, resources, and upkeep. Boost Vendor Management pairs you with an experienced consultant who develops your program with you and makes it as efficient as possible. CoNetrix Security has developed information security programs since 2001, and our experts hold CISSP, CRISC, CISM, CISA, and CRVPM certifications.

Boost-VendorManagement

Guided Development, Ongoing Documentation

Your consultant imports your vendors into Tandem Vendor Management and assists with organizing and associating services, due diligence document types, and renewal dates. Next, they perform a review of your existing program and help establish strategic goals for improvement. Your consultant then customizes the program to fulfill regulators’ expectations while keeping it manageable. Optional document analysis adds a review of SOC reports and other information-security-specific documentation.

The entire program will be documented as work is completed, including high-level Vendor Oversight summaries, vendor risk assessments, and individual vendor summaries. Throughout the engagement, your consultant is your dedicated partner in your vendor management program.

Service Features

Boost Vendor Management is built from three parts: vendor importing, program guidance, and optional document analysis. Engagements run six-month or annual terms, and onsite consulting is available. Your consultant works in Tandem Vendor Management with you and provides training on the software. Programs follow federal guidance and draw from industry best practices, such as GLBA, HIPAA, and guidance from the FFIEC, FDIC, OCC, Federal Reserve, and NCUA. Vendor Management is also part of VISO Consulting, pairs well with Business Continuity Planning, and can integrate with Risk Assessment.

Request More Information Back to Boost Consulting Services

  • Import of your vendors and services into Tandem Vendor Management

  • Optional import of existing vendor documents

  • Analysis of your existing program and strategic goals for improvement

  • Customized vendor criticality questions, risk categories, and rating definitions

  • Notifications, reviews, and document requests in Tandem

  • Optional review of SOC reports and other information-security-specific documentation

  • Vendor Oversight summaries, vendor risk assessments, and individual vendor summaries