Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is a vendor management policy?

A vendor management policy is an important component of an organization’s larger compliance risk management strategy. It is a best practice for any organization that works with sensitive data and customers’ personally identifiable information (PII) to develop a policy to review all vendors — each third-party, contractor, or associate with whom an organization does business — and to establish requirements for the level of information security that vendors should maintain. As an organization outsources to a wider ecosystem of vendors and partners, its risk increases.

A vendor management policy, developed and overseen by a cross-company team, will help an organization evaluate its current vendors according to level of risk, and to assess potential new vendors for adherence to appropriate cybersecurity practices. A successful vendor management policy will also establish processes for the continuous monitoring of third-party and fourth-party service providers to ensure their ongoing adherence to an appropriate level of security.

Organizations maintaining a vendor management policy may have a particular interest in working with vendors who meet security requirements such as SOC 2 compliance.

Additional resources you might like:

Security
Events
Scaling Security in the Age of AI: Lessons from Vanta, Wiz, & Modo Labs

Join Vanta + Wiz + Modo Labs for a fireside chat where they’ll explore key questions about AI’s impact on scaling security programs–what to watch out for, how to adapt, where to adopt AI, and what to focus on next.

Security
Events
From Insights to Action: Measuring and Advancing Security Maturity

Discover how Vanta’s customizable reporting and dashboarding can help you assess and improve security maturity with real-time insights, better risk visibility, and data-driven decision-making.

ISO 42001
Events
Compliance for AI in Europe: Preparing for Emerging AI Laws and Regulation

Explore how ISO 42001 and the EU AI Act help your company stay compliant, secure, and ahead of evolving AI regulations with expert insights and practical strategies.

Additional resources you might like:

Security
Events
Scaling Security in the Age of AI: Lessons from Vanta, Wiz, & Modo Labs

Join Vanta + Wiz + Modo Labs for a fireside chat where they’ll explore key questions about AI’s impact on scaling security programs–what to watch out for, how to adapt, where to adopt AI, and what to focus on next.

Security
Events
From Insights to Action: Measuring and Advancing Security Maturity

Discover how Vanta’s customizable reporting and dashboarding can help you assess and improve security maturity with real-time insights, better risk visibility, and data-driven decision-making.

ISO 42001
Events
Compliance for AI in Europe: Preparing for Emerging AI Laws and Regulation

Explore how ISO 42001 and the EU AI Act help your company stay compliant, secure, and ahead of evolving AI regulations with expert insights and practical strategies.

GRC
Events
Unlocking the ROI of GRC: The Business Value of Vanta

Discover how Vanta empowers organizations to achieve exceptional results in their Governance, Risk, and Compliance (GRC) programs.

GRC
Events
AI & Security Maturity: Navigating Risks Across Every Stage with John Hammond & Vanta

Watch our on-demand webinar with John Hammond—cybersecurity researcher, practitioner, and content creator with nearly two million YouTube subscribers—and Matt Cooper, Vanta’s Director of GRC, for a fireside chat on AI, security maturity, and the top security risks in 2025.

ISO 27001
Events
Live Demo: How to streamline ISO 27001 and SOC 2 compliance with automation

Watch Vanta’s 45-minute demo to see how our platform automates up to 90% of the work for achieving ISO 27001 and SOC 2 compliance, helping you streamline security and move towards continuous compliance.

Compliance
Events
The State of Trust: Top Security & Compliance Trends for 2025

Discover key findings from Vanta’s State of Trust Report, how automation eases the compliance burden, and the role of continuous control monitoring in building real-time trust.

Compliance
Events
Fostering a culture of security in an AI world

Watch our expert-led session to explore strategies for embedding a security-first culture in an AI-driven world. We'll address unique challenges and share actionable insights to help safeguard your organization.

Security
Events
How Trust Centers Help Save Time and Accelerate Sales

Discover how trust centers enhance customer confidence, streamline security processes, and drive sales growth, based on IDC’s latest research.