Designation Of A Vendor Manager

摘要

Determining vendor management requirements comprises identifying a plurality of risk elements associated with a vendor that supplies one or more products to an entity. Any completed management actions for the vendor that mitigate risk associated with any of the identified risk elements are identified. A residual risk is determined for at least one of the identified risk elements according to a completed management action that reduces risk associated with the at least one of the identified risk elements. A determination is made as to whether to assign a vendor manager to the vendor according to the residual risk for the at least one of the identified risk elements.

主权项

1. A management server, comprising:
a memory comprising rules for determining vendor management requirements; and a processor communicatively coupled to the memory and operable to:
identify a plurality of risk elements associated with a vendor that supplies one or more products to an entity;identify any completed management actions for the vendor that mitigate risk associated with any of the identified risk elements;determine a residual risk for at least one of the identified risk elements according to a completed management action that reduces risk associated with the at least one of the identified risk elements; anddetermine whether to assign a vendor manager to the vendor according to the residual risk for the at least one of the identified risk elements.