The Vendor Risk Management (VRM) module in KnowBe4's KCM Governance, Risk, and Compliance (GRC) platform lets you centralize your third-party risk management processes. You can prequalify risk, assess your vendors, and conduct remediation efforts all in one platform. The VRM module is available to Platinum subscriptions.
For an overview of the VRM module, please see this article: Vendor Risk Management: Introduction Guide.
This article goes over your Vendor Dashboard, which is found under your Vendor Risk Management module. The Vendor Dashboard provides an overview of the levels of risk inherited when working with your vendors, as well as the current status of your questionnaires and questionnaire issues.
There are five sections that make up the vendor dashboard. Use the jump links below to learn more about each section.
The Vendor Score section of the dashboard consists of a table and a bar graph displaying all of the vendors you've added to your Vendor List and their associated vendor score. The vendor score is the average score of all questionnaires that the vendor has completed. This score is also displayed on each vendor profile (Vendor Details page).
For more information about the Vendor List, vendor profiles, and vendor scores, please see our Working with the Vendor List article.
The Vendor Status section of the dashboard consists of a table and pie chart displaying the status of each of the vendor profiles you've added to your Vendor List. The vendor profile must be in "Active" status before you can send questionnaire assessments to the vendor contact. The vendor profile status can be Active, Inactive, Pending Approval, Rejected, or Incomplete.
The Vendor Issues section of the dashboard provides a central repository of the "issues" you've created in response to the questionnaire answers you've received. If your vendor submitted an undesirable answer to one or more questions, you'll create an issue for each question from your VRM module. For more information about issues, please see this article: Reviewing Questionnaires and Creating Issues.
Outstanding Vendor Questionnaires
This section of the dashboard provides a central repository of all of the questionnaire assessments that have been sent to your vendors and are currently in progress, finalized and awaiting review, or currently under review.
If the questionnaire has been finalized by your vendor contact, you can use the blue link under the Questionnaire column to navigate directly to the Questionnaire Review page.
For more information about reviewing questionnaires, please see this article: Vendor Risk Management: Reviewing Questionnaires and Creating Issues.
This section of the dashboard is calendar displaying all of the questionnaires you've already sent and will send on a recurring schedule.
Each iteration of a questionnaire–whether it is sent one-time or on a recurring frequency–will have one calendar entry. The calendar entries are listed on the date that the questionnaire was sent or is scheduled to be sent.
The color of each calendar entry represents the current status of the questionnaire (the colors change dynamically, as changes occur):
- Sent: The questionnaire has been sent to the vendor and the vendor user has not yet finalized the questionnaire. If the vendor has started the questionnaire, their progress is displayed in their vendor profile, under the Issues tab.
- Pending Review: The questionnaire has been finalized by the vendor user, but the KCM administrator has not begun the review process.
- In Review: The KCM administrator has begun, but not finished the review process for this questionnaire.
- Reviewed: The KCM administrator has completed reviewing this questionnaire.
If the questionnaire has been finalized by the vendor user, click the questionnaire name to open the Questionnaire Review page. Click the user icon on the right side of the calendar entry to open the vendor profile that is associated with this questionnaire instance.
To learn more about reviewing questionnaires, please see this article: Vendor Risk Management: Reviewing Questionnaires and Creating Issues.