YOUR VENDOR RISK WORKSPACE
Clarity across your vendor ecosystem.
See the exposure. Prioritise the review. Build a more resilient supply chain.
Quick start · Your assessment workflow, explained
1 Inventory: list your vendors and pick four risk factors; the inherent score and tier are computed. 2 Questionnaire: select a vendor and enter the answers; domain scores, overall score, band and residual rating update as you go. 3 Contract: tick the clauses present in the signed contract; missing required clauses are counted per tier. 4 Dashboard: vendors by tier and rating, Tier 1 coverage, overdue reviews. A draft is kept in this browser; export JSON to keep a dated record. The same model drives the Excel workbook in this repository.
Sample data only, to see what a filled assessment looks like.
Vendor inventory
Inherent score = data classification × business criticality × access type × AI use (1–128). Tier 1 from , Tier 2 from , Tier 3 below. AI use doubles the score on purpose.
| Id | Vendor | Service | Category | Owner (role) | Data | Criticality | Access | AI | Score | Tier | Contract end | Status |
|---|
Residual rating
Yes = 1, Partial = 0.5, No = 0, N/A excluded. Strong ≥ 85 %, Adequate ≥ 70 %, Weak ≥ 50 %, Poor below. A Tier 1 vendor never rates Low. Weight-3 questions answered No are highlighted.
| Id | Question | W | Evidence requested | Answer | Comment / evidence reviewed |
|---|
| Id | Clause | Why it matters | Level for this tier | In contract? |
|---|
PORTFOLIO AT A GLANCE
Risk overview
Vendor assessment register
A single view of ratings, review dates and contractual gaps.
| Id | Vendor | Tier | Score | Band | Final rating | Status | Assessed | Next review | Missing required clauses |
|---|
TAKE YOUR WORK WITH YOU