Vendor Tiering
Official TPRM workflow analysis
An UpGuard vendor tier needs a dated relationship rubric
UpGuard describes vendor tiers as classifications of inherent risk that can determine assessment depth and can be assigned manually or through rules based on relationship-questionnaire responses. A tier can organize diligence, but it remains defensible only when the relationship facts, rubric version, evidence, reviewer, effective period, and prior classification stay reconstructable.
Vendor Tiering
7 min read
7 min read