Overview

Third party risk management (TPRM) involves identifying, assessing, and mitigating risks that arise from working with external vendors, partners, suppliers, or service providers. These third parties can introduce risks to an organization, such as data breaches, compliance violations, financial instability, or operational disruptions.

With Secureframe, customers receive access to the standard version of Third Party Risk Management (TPRM) with the Comply Fundamentals plan. If you are using our Complete plans customers will have access to Secureframe's Advanced TPRM offering by default.

How to Add Vendors

By adding vendors, you are formalizing and documenting the relationship, allowing for better monitoring of their compliance with your security, privacy, and operational standards.

Head to the Vendors page using the left navigation, then in the top right corner you can add vendors in the following ways:

• Click Add Single Vendor - will only require the Vendors name to continue
• Click Import Vendors from CSV CSV will require name, website and include optional columns like Department, Owner, Risk Level, Vendor Status, Last Reviewed, and more.

Viewing Vendors

Vendors can be searched, filtered, and sorted in many different ways. 

Editing Vendor Details

If you need to update an existing vendor’s information, you can do so easily from the vendor details page.

1. Navigate to the vendor’s profile.

2. Click the Edit button at the top of the Vendor details section.

3. A modal will appear allowing you to update fields such as:

   • Website

   • Trust Center / Security URL

   • Services provided

   • Owner

   • Contract dates

   • Authentication type

   • Tags

   • categories - Supply Chain, Technology, Strategic, Legal, and more

4. Make the necessary changes and click Save.

⚠️ Note: Required fields (marked with a red asterisk *) must be filled out before saving changes.

This allows you to keep vendor records accurate as business relationships evolve.

Working with Tags

Tags help you organize and filter vendors more easily. You can add tags in two ways:

Add Tags from the Vendor Details Page

To tag a single vendor:

1. Click the Edit button on the vendor's details page.

2. Scroll to the Tags field.

3. Begin typing to search for an existing tag or create a new one.

4. Check the box next to the tag name.

5. Click Save to apply the tag.

✅ Once saved, the tag will appear on the vendor’s profile and in the vendor table view.

Add Tags in Bulk from the Vendor Table View

To apply a tag to multiple vendors at once:

1. From the Vendors list, select the checkboxes next to each vendor.

2. Click the Property dropdown and select Edit tags.

3. Choose either:

   • Add to existing to preserve current tags, or

   • Overwrite to replace them.

4. Type and select the desired tag(s).

5. Click Apply to X vendors to save.

💡 Use bulk tagging for quick classification of vendor risk levels, ownership, or priority status.

Manipulating the Vendors Table

Vendors can be filtered and sorted in the table by:

• Categories (not sortable)
• Contract start date
• Contract end date
• Departments (not sortable)
• Name
• Owner
• Review status (not sortable)
• Tags (not sortable)
• Risk level
  

To see our Full Guide on Third Party Risk Management click here

Frequently Asked Questions (FAQ)

How do I add a tag to a vendor?

• Click Edit on the vendor details page.

• Scroll to the Tags field.

• Begin typing your desired tag (e.g., “High Risk”).

• When the matching suggestion appears, check the box next to it.

• Click Save and the tag will now be associated with the vendor and appear in the vendor list view.