Orgvue Supplier and Third-Party Management

Are new suppliers subject to information security risk assessments?

Yes, new suppliers are subject to information security risk assessments as part of the onboarding process. Ongoing assessments for existing suppliers are performed annually. A third-party risk and attack surface management platform is used to manage and monitor all suppliers.