Would you consider conducting due diligence on vendor’s vendor (4th party vendor to you) as part of your vendor risk management program?

Risk ManagementProcurement

Yes, if the services are in scope40%

Yes, irrespective of scope of agreement29%

May be23%

No4%

Not sure2%

558 PARTICIPANTS
22.7k viewscircle icon13 Upvotes

Content you might like

When two Service Provider Companies come together in one, but they both have different procedures and processes, what are the best practices to consider?

Has anyone successfully negotiated a Price Hold clause in a SaaS agreement and willing to share?

Thinking about non-optimal technology solutions your organization uses today, what are their most common shortcomings?

Insufficient integrations34%

Valuable features are complex to use37%

Rigid and non-customizable/configurable48%

Support and service are hard to access / benefit from34%

Expensive compared to alternatives20%

Other (please comment)7%

View Results

How is the current geopolitical climate impacting identity security risks in your industry? What’s your approach to assessing potential risks associated with geopolitical instability?

How many hours a day do you spend online/on a Zoom call?

1-2 hours32%

2-5 hours48%

5-8 hours15%

I lost count3%

View Results
Would you consider conducting due diligence on vendor’s vendor (4th party vendor to you) as part of your vendor risk management program? | Gartner Peer Community