A free Excel vendor risk register that follows the seven-step process in our vendor risk assessment guide. Fill in the yellow cells and the workbook does the scoring for you.

What's inside

  • Vendor register: one row per vendor with owner, service, data shared, system access, contract dates, spend and sub-processors. Score five inherent risk factors from 0 to 3 and the sheet calculates the total, applies the tier override rules and assigns Tier 1 to 4.
  • Control assessment: rate seven control domains from 1 to 4. The sheet calculates the weighted control score, the residual risk decision for the vendor's tier, and the next reassessment date.
  • Settings: change tier thresholds, reassessment intervals and domain weights to match your TPRM policy.
  • Worked example: the payroll provider from the guide, so you can see the expected format.

Submit the form to download it.

When you outgrow a spreadsheet, the Privacy Risk & Compliance Suite runs the same process with vendor registers, assessments, a respondent portal and tracked issues.