Notes on vendor risk. In plain words.
Short pieces on vendors, compliance and why we built Vendorapp.
Why vendor trust is the new attack surface.
Hackers no longer break in. They log in through the people you already trust. Here is why vendor access is the fastest-growing risk inside modern enterprises.
Read itWhat Smart Lookup actually does.
A quick tour under the bonnet of Vendorapp Smart Lookup: how one click brings sanctions, exposure risk and ESG checks into a single assessment.
Read itInherent exposure risk, explained.
Inherent risk is what a vendor brings before any controls are applied. Understanding it properly is the difference between real risk management and a compliance theatre.
Read itAutomating the contract lifecycle.
Contracts do not live in a filing cabinet any more. They live in the workflows that depend on them, and the moments when they quietly expire.
Read itESG is a vendor risk problem.
You cannot report credibly on environmental, social and governance metrics while ignoring the long tail of third parties in your operation. Here is how we think about it.
Read itWhy we built Vendorapp.
A short note on the problem we kept seeing at every company we worked with, and why we decided the tools available were not good enough to solve it.
Read it