Each vendor/supplier can be assessed within the TPRM system for risk and determination of capability to serve the client safely and securely.  This article will help you understand how the process is done.


1. After you have created a vendor/supplier in the system click on that organization to view their proflie



2. Once in the profile click on the GRC Assess button.



3. You will be prompted to Add a Template. Select that option



4. Add your program which can be selected from your template library.  These can be either full compliance assessments (NIST CSF, CIS v.8, ISO 27001, etc.) or our Vendor Risk Assessment template.



5. At this stage you will be brought to the assessment and can get started.  If you want to delegate questions to the vendor/supplier that can be done at the question level (specific questions) or the full assessment (the entire document) for vendor/supplier contribution.



If you have additional questions after reviewing this document please contact support@vciotoolbox.com