Vendor Risk Register

Maintain a vendor risk register that informs decisions rather than collects dust. Learn the register structure (risk ID, vendor, category, inherent / residual, owner, controls, treatment, status), risk-entry quality standards, ownership, review cadence, the relationship to the enterprise risk register, and how risk register entries feed renewal and exit decisions.