Vendor Risk: Non-Monitored Vendors

• Overview
• Non-monitored vs. monitored vendors
• Lifecycle stage
• Stop monitoring vs. delete
• Work with not-monitored vendors

Overview

Non-monitored vendors are the vendors you’ve added to Vendor Risk, but aren’t in your Monitored tab. Instead, they sit in your Not monitored tab.

Monitoring a vendor gives you continuous monitoring and alerts about its security posture, along with questionnaires, risk assessments, and remediation. However, this level of oversight isn’t needed for every vendor.

Non-monitored vendors let you keep track of vendors such as:

• prospective vendors
• low-risk vendors
• vendors you no longer use.

They don't use a monitoring slot, and you can classify them with the same tiers, labels, portfolios, and custom attributes as monitored vendors.

For how they differ from monitored vendors, see Non-monitored vs. monitored vendors.

Non-monitored vendors are available on all paid Vendor Risk plans, and there's no limit to how many you can add.

How it works:

• Add a vendor without monitoring it, or move a vendor from Monitored to Not monitored to stop monitoring a vendor you no longer need to track.
• Classify it with a tier, labels, portfolios, custom attributes, and a lifecycle stage.
• Start monitoring a vendor when you need its security rating, questionnaires, risk assessments, or remediation. Work you did on the vendor before you stopped monitoring it is still there.
• Stop monitoring a vendor when you're done. It moves back to the Not monitored tab and frees up its monitoring slot.

Non-monitored vs. monitored vendors

When you stop monitoring a vendor, UpGuard keeps its questionnaires, risk assessments, and other records. Monitor the vendor again to get access to them.

Lifecycle stage

Lifecycle stage records where a vendor is in its relationship with your organization. You can set it for any vendor, monitored or not. The stages are:

• Procurement
• Onboarding
• In use
• Offboarding
• Archived

These stages are fixed and can't be renamed, removed, or added to. To clear a vendor's stage, choose No stage set.

Stop monitoring vs. delete

Stop monitoring turns off monitoring and moves the vendor to the Not monitored tab. It keeps its tier, labels, portfolios, custom attributes, contacts, and lifecycle stage, and stops using a monitoring slot. Delete vendor turns off monitoring and removes the vendor from your vendor list.

Stop monitoring vendors you want to keep a record of, such as a vendor you've assessed as low risk or no longer use. Delete vendors you don't need on your list at all, such as a vendor added by mistake.

To learn more, see Stop monitoring or delete a vendor.

Work with not-monitored vendors

• Add a vendor without monitoring it
• Start monitoring a vendor you're not monitoring
• Stop monitoring or delete a vendor
• Import Vendors, Tiers, Labels, Portfolios, and Custom Attributes
• Vendor Risk: Monitoring Slots and Change Limit