Supplier risk management

The supplier risk management (SRM) add-on allows you to record the basic data of your suppliers in supplier profiles and to send them assessments and thus involve them in your audit processes.

The following menu items are enabled with this add-on:

• Suppliers

Under Administration > Suppliers you can create suppliers and record their basic data, such as name, address, and contact details. For every supplier you can create one or more supplier users for your contact persons in the supplier company, who are then provided a special login for HITGuard. Find out more in the article on suppliers.

You receive the following new options in the gap analysis with this add-on:

• Send gap analysis to supplier

With the Add-on you can mark a gap analysis as a supplier assessment. For this you need to first activate the checkbox "Supplier evaluation" under Risk management > Settings. If you then create an analysis, you find a checkbox above the field "Interview partner". Activating this, you can enter suppliers as interview partners. If you then send out the analysis as a self assessment, the supplier users are sent the analysis for answering. Find more on gap analyses in the article on reviews.

You can allow suppliers to login to their own supplier portal with this add-on. This allows the supplier users to create a password in order to then access HITGuard and respond to the analysis.

Find out more in the article on the HITGuard portal for suppliers.

You can share this help page with supplier users and it is also linked in the welcome e-mail.

Finally, you can configure security settings under Administration > Global settings in order to determine how long supplier users have access to the portal and whether they need to configure a two-factor-authentication for it. Find more in the article on Global settings.

How is the supplier risk management activated?

After licensing the SRM, we enable it for you. Then you must take the following steps in order to be able to use the SRM:

1. Assign the role expert, professional, or observer for "SRM" under Administration > User roles.
2. Record a company name under Administration > Global settings.
3. Create suppliers and their users under Administration > Suppliers.
4. Activate the checkbox "Supplier evaluation" under Risk management > Settings.