“We check the dashboard daily. Our score reflects how well we are doing. The higher the score, the more confident we are in our security posture.”

"If a vendor score drops below 600, we know there is a security issue with that vendor and we work with them to remediate that."

“We’re stewards of public funds, When we choose a vendor, we need to justify that decision. Now, if anyone questions why we selected a particular provider, we can point to an independent, third-party assessment. That transparency is crucial.”

"Before UpGuard, our vendor risk management activities were less effective and comprehensive, even began after a vendor was onboarded. Now it's easy to monitor them via the dashboard, and it starts before they even sign the agreement."

“You see relevant information about a vendor in one place, including their location, security score.”

"We’re not just asking our vendors security questions. We’re also performing scans to confirm there are no security concerns. This helps us automate the security questionnaire process."

“We used UpGuard because it was an easily-delegated, easily-deployed product which did what we needed it to do."

"Vendor Risk helps us manage vendor security performance across a diverse client base. It’s easy to use, and the vendor security questionnaire module helps us track workflows, surface security and prioritise specific risks for remediation."

"Before UpGuard, conducting proper research for each vendor would eat up a lot of time – Does it comply with our requirements? Where is their data located? Do they have privacy policies."

"Upguard has helped us de-risk our organisation, with solutions that are both reliable and accurate in producing fact-based information about our key suppliers, that we can proactively act on in order to help keep our platforms secure and stable."

"We now have an automated, robust process for validating that planned changes are made correctly. That reduces regulatory and operational risk, lowers costs, and allows us to drive continuous improvement."

"We can now get comprehensive vulnerability reports, tied directly to specific CIs. Because of this, we’ll also be able to drive end-to-end remediation processes within ServiceNow, and tie this directly back into other areas such as GRC.”

“Before UpGuard, we had to juggle the vendors we could monitor due to our limited-licensing structure. If we partnered with a new vendor, we had to evaluate which vendors to remove to make room.”

"Having an automated way to look at the attack surface is a great way to flag things like unmanned pages or EOL apps. It’s a low-hanging fruit to improve our security."

"Our complicated environment requires attention to detail when reviewing security risks. We have many cloud-first vendors so the UpGuard platform allows us to be granular and gives us an interesting layered insight on our supply chain that could have a critical impact on our operation. As a telecommunications company providing …