DevOps Articles

What is Vendor Tiering? | UpGuard

Learn about new features, changes, and improvements to UpGuard: Vendor tiering is a method of classifying vendors based on the level of security risk they introduce to an organization. The basic vendor tiering structure consists of three levels - Tier 1, Tier 2, Tier 3, where Tier 1 represents high-risk vendors.

Applying the same level of risk assessment to each vendor is difficult to maintain, and in most cases, unnecessary.

This is the objective of vendor tiering - to streamline the vendor risk management process so that security teams are able to manage third-party risks more intelligently.

Vendor tiering helps security teams adjust the level of risk assessments performed at each vendor tier, rather than applying the same effort across all vendors.