How to Review Vendor Risk Scores

How to Review Vendor Risk Scores

Overview

Vendor Pulse shows vendor risk in four places, each answering a different question:

WhereQuestion it answers
Vendors listWhich of my vendors score highest?
Profile tab on a vendorHow risky is this vendor overall?
Manage Risk tab on a vendorWhat specific risks exist, how severe are they, and who is fixing them?
DashboardWhere does risk sit across my whole vendor portfolio?

This guide explains the numbers and bands you will see in each.


Prerequisites

  • At least one vendor on the platform
  • vendor:view for the vendor list and Profile tab
  • vendor:risk:view for the Manage Risk tab
  • dashboard:view for the portfolio view

The Scores and Bands at a Glance

MeasureScaleBands
Vendor risk score (Risk Score, Risk Rating, Average Risk Score)0 to 10Low 0–3, Medium above 3 up to 5, High above 5 up to 7, Critical above 7
Compliance (Compliance Status, Average Compliance Rate)0% to 100%Non-Compliant 25% or below, Partially-Compliant above 25% up to 50%, Compliant above 50%
Risk Exposure on an individual risk0 to 10Low up to 2, Medium above 2 up to 5, High above 5 up to 7, Critical above 7

The vendor risk score and compliance figures are based on the vendor's assessments. The exposure of an individual risk comes from how you score that risk on the Manage Risk tab.


Risk Score in the Vendor List

Navigation: Sidebar → Vendors

  1. Find the Risk Score column. It shows each vendor's score to two decimal places, or a dash if the vendor has none yet.
  2. Click the Risk Score heading to sort by it.
  3. Use Filters → Impact to narrow the list to vendors of a given Impact / Materiality.

The Vendor Profile Summary

Navigation: Sidebar → Vendors → [select a vendor] → Profile

The Profile tab opens by default and carries eight summary cards. Each has an information icon.

CardWhat it shows
Vendor CategoryThe vendor's tier, as Tier 1 to Tier 4
Vendor's IndustryThe vendor's industry
Vendor Onboarding DateThe date the vendor was set to Onboarded
Last Assessment DateThe scheduled date of the latest assessment that has started or completed
Impact / MaterialityLow, Medium, High or Critical
Risk RatingThe vendor's risk band: Low, Medium, High or Critical
Compliance StatusThe vendor's compliance band: Compliant, Partially Compliant or Non Compliant
Total RisksA chart of the vendor's risks by status

Cards with nothing to show say No data found rather than a misleading zero.

The vendor's onboarding status sits to the right of the tab bar. See How to Manage a Vendor Profile and Onboarding Status for how to change it.


Individual Risks on the Manage Risk Tab

Navigation: Sidebar → Vendors → [select a vendor] → Manage Risk

  1. Read the seven status cards across the top — All, Pending, Planning, In Progress, On Hold, Completed and Waived — for a count of risks in each state.
  2. Click a card to filter the table to that status. Click it again, or click All, to clear the filter.
  3. Read the Risk Severity column for each risk's band and the Risk Source column for where it came from: Manual, Assessment or DRM.
  4. Click a risk to open it and see its likelihood, impact and exposure.

A risk shows Not Available under Risk Severity until it has been scored. Scoring, treating and closing risks is covered in How to Manage the Vendor Risk Lifecycle.


Vendor Analysis

Navigation: Sidebar → Vendors → [select a vendor] → Vendor Analysis

The Vendor Analysis tab is an AI-generated external briefing on the vendor. It is background research and does not feed the risk score. See How to Use Vendor Analysis (AI).


Portfolio Risk on the Dashboard

Navigation: Sidebar → Dashboard

Card or panelWhat it tells you about risk
Average Risk ScoreThe 0–10 risk score averaged across onboarded vendors, with its band
Average Compliance RateThe compliance percentage averaged across onboarded vendors, with its band
High Risk VendorsUp to five vendors with the highest risk scores. Click one to open its Manage Risk tab.
Risk MatrixOnboarded vendors counted by Business Impact and Criticality. Click a cell to list the vendors in it.
Open RisksOpen risks against the total, split by severity

See Understanding the Vendor Dashboard for every panel.


Troubleshooting

Risk Rating or Compliance Status shows "No data found" → Those figures come from assessment results. Send the vendor an assessment and review the responses first.

The vendor list shows a dash under Risk Score → The vendor has no assessment results yet.

Last Assessment Date is empty → Only assessments that have started or completed count. A future-dated assessment that has not begun does not.

The Manage Risk tab shows an access-denied screen → Viewing vendor risks requires vendor:risk:view.

A risk shows "Not Available" under Risk Severity → The risk has not been scored. Open it and complete Risk Scoring & Prioritization.

The dashboard average does not match a vendor's Risk Rating → The dashboard averages across all onboarded vendors; the profile card is that single vendor.

A vendor with a high score is missing from the dashboard averages or Risk Matrix → Those only include vendors whose status is Onboarded.

The Vendor Category card shows a tier → That is what the card displays. The product and service category is set and visible in the vendor's edit form.


Need more help? Contact support@zeron.one

    • Related Articles

    • How to Manage the Vendor Risk Lifecycle

      Overview Every vendor has a Manage Risk tab. It is the vendor's risk register: you record a risk, score it, decide how to treat it, and close it, moving through four steps. You can also send risks to the vendor so they respond to them and upload ...
    • Understanding the Vendor Dashboard

      Overview The Vendor Pulse dashboard is your portfolio-level view: how many vendors you have, how their assessments are progressing, where risk is concentrated, and which vendors need attention first. The dashboard comes in two layouts. Dashboard V2 ...
    • How to Generate Vendor Risk Reports

      Overview Vendor Pulse produces two kinds of report, and both are generated per vendor: Report Format How it is produced Executive PDF You add a remark and optional recipients, then generate Detailed Excel workbook Generated immediately, no extra ...
    • Vendor Pulse: Roles & Permissions Reference

      Overview Access to Vendor Pulse is controlled by permission scopes — strings such as vendor:view. Each section of the product checks for its own scope, and a user who lacks it sees an "Unauthorized" screen instead of the page. This page covers Vendor ...
    • Getting Started with Vendor Pulse

      Overview Vendor Pulse is Zeron's third-party risk management product. You add the vendors you work with, send them assessment questionnaires, review what comes back, and track the risks you find through to closure. This guide takes you from your ...