Frank Tiex
Problem
The current Vendors section is limited in scope and suggests that only software vendors should be listed.
In practice, organizations work with different types of third parties, such as:
  • infrastructure providers,
  • partners involved in collaborative development,
  • customers participating in joint projects.
These entities are currently not clearly represented in the Vendors section, although they are relevant from a risk and compliance perspective.
Proposed solution
Rename Vendors to Vendors & Partners, or extend the section to explicitly support different third-party types (e.g. vendor, partner, customer, infrastructure provider).
Benefits
  • More accurate representation of third-party relationships
  • Better coverage of non-software and collaborative partners
  • Improved clarity and usability for customers
Created by Elżbieta Żurakowska