Classic+ Vendor Management Policy Template

Organizations typically take one of two routes to approaching Vendor Management, either collecting as much information as possible about the third party and holding vendors to InfoSec standards they likely won’t meet, or attempting to understand all the actions a vendor takes on an organization’s behalf, allowing risk to directly align to the vendor relationship.

This Guide breaks the classic+ approach to vendor management, enabling your organization to draw from the benefits of the classic and modern approach that is less likely to trigger objections and concerns from others.