How to Create a Vendor Risk Management Process | UpGuard

**Executive summary:** This document presents a Vendor Risk Management (VRM) framework and UpGuard product overview that outlines a four-stage lifecycle—secure vendor onboarding and due diligence, vendor risk assessment and continuous monitoring (including attack surface management and security ratings), efficient vendor collaboration (questionnaire automation and Trust Exchange), and secure offboarding—to help organizations manage third-party and supply chain cyber risk and streamline remediation and compliance efforts.