Free working resource
AEGITz Vendor Risk Register
Small business breaches increasingly arrive through a vendor with legitimate access. A right-sized third-party risk program, including the register and contract language.
XLSX
Ready to use
The resource is available without a form.
- Download without an email gate
- Formula cells checked for errors
- Designed for executive and operator use
- Connected to the method behind it
How to use it
Start with evidence. Finish with a decision.
- 01Download and save a working copy.
- 02Complete the inputs with the people who own the process.
- 03Review gaps, assumptions, and scores together.
- 04Turn the result into named actions and owners.
The decision this supports
Use the completed resource to make the next conversation specific.
When a small business is breached through a vendor, no security tooling fires, because nothing malicious happened: somebody with permission used their permission. A right-sized program starts with an inventory pulled from accounts payable, your identity platform, and your remote access tool, then tiers vendors into three levels.
The connected guide explains the reasoning behind the questions, the evidence worth keeping, and the tradeoffs leadership should review before approving work.