I work for a financial institution and the board of directors would like to engage with a vendor for their use. Would we need to include this vendor is our program?
Hi Anonymous,
We have a vendor we use their services for surrounding our board meeting. Based on the service they are providing we did include them in our vendor program as a tech vendor. I think this will depend on how your institution structures your VMP, what level of criticality you manage for vendors and what the service is they are providing. Do you have a formal VM policy that you can reference for guidance from your institution?