Prerequisites
A vendor with a valid domain configured
SaaS plan with DRM feature enabled
Accessing Digital Risk
Navigation: Sidebar → Vendors → [Select Vendor] → Digital Risk Tab
Click on a vendor in the vendor list.
Navigate to the Digital Risk tab.
The DRM view loads with the vendor's external risk data.
What DRM Shows
Risk Overview and Metrics
| Metric | Description |
|---|
| Risk Score | Overall external risk rating for the vendor |
| Likelihood Score | Probability of exploitation based on external exposure |
| Total Assets | Number of internet-facing assets discovered |
| Findings | Security issues found (pie chart by severity) |
Five Analysis Tabs
| Tab | What It Shows |
|---|
| Overall Sections | Summary of risk across all categories |
| Asset Wise Risk Breakdown | Risk analysis per discovered asset |
| Exposed Secrets Found | Leaked credentials or secrets detected on vendor infrastructure |
| All Security Findings | Complete list of vulnerabilities and misconfigurations |
| Graph Analysis | Visual relationship graph of vendor assets and their connections |
Cross-Product Risk Creation
If you identify a critical finding in the DRM view, you can create a risk entry directly from the DRM interface. This risk will be tracked in the vendor's Manage Risk tab.
How DRM Complements Questionnaires
| Assessment Type | Data Source | Strength |
|---|
| Questionnaires | Vendor self-reported | Detailed internal controls and process information |
| Digital Risk (DRM) | External scanning | Objective, real-time external security posture |
> Tip: Use DRM data to validate vendor questionnaire responses. If a vendor claims strong security but DRM shows critical vulnerabilities, investigate further.
Troubleshooting
| Issue | Solution |
|---|
| Digital Risk tab not visible | DRM is a SaaS feature. Verify your plan includes DRM. |
| No data in DRM view | The vendor needs a valid domain. DRM scans internet-facing infrastructure. |
| DRM data seems outdated | DRM data refreshes periodically. The most recent scan date is displayed on the page. |
| Cannot create risk from DRM | Verify your role has Risk Create permission. |