Analytics & Reporting
The analytics module provides comprehensive insights into your vendor risk management program. Use it to identify trends, track progress, prioritize remediation efforts, and make data-driven decisions about vendor relationships.
Accessing analytics
Navigate to Third-Party Exposure → Analytics from the sidebar, or use the analytics link from the vendor risk dashboard. The analytics page has five tabs, each providing a different analytical view.
Analytics tabs
Overview dashboard
The overview displays four key metrics at a glance: total vendors in your system, active assessments currently in progress, high-risk vendors with Critical or High risk levels, and open remediations that are in progress or pending. These metrics update in real time based on your current vendor data.
Risk heatmap
The risk heatmap visualizes vendor risk distribution using color coding — red for high risk, yellow for medium risk, and green for low risk. Use it to identify vendors requiring immediate attention, spot risk concentration in specific areas (industry, service type), assess the overall risk profile of your vendor portfolio, and track trends in risk levels over time.
Score distribution
The score distribution dashboard analyzes risk score patterns to help you understand how vendors are distributed across risk score ranges, trends in scores over time, comparison between inherent and residual risk scores, and the effectiveness of risk mitigation efforts. Look for shifts in distribution over time to assess whether your risk management program is working.
Remediation tracking
The remediation tracking view monitors progress on remediation actions across all vendors. It shows total remediation actions, actions broken down by status (Open, In Progress, Completed, Cancelled) and by priority (Critical, High, Medium, Low), overdue actions requiring attention, and completion rates and trends. Focus on critical and high-priority actions that are overdue or stuck in progress.
Vendor aging report
The vendor aging report tracks the assessment lifecycle for each vendor. It helps you identify vendors needing reassessment, track assessment expiration dates, plan assessment schedules proactively, and ensure compliance with periodic review requirements. Review vendors by how long it has been since their last assessment and schedule reassessments before they expire.
Common reporting scenarios
Executive reporting — Use the overview dashboard and risk heatmap to create executive summaries showing overall vendor risk posture, high-risk vendor counts, remediation progress, and trends over time.
Compliance reporting — Use the vendor aging report and remediation tracking to demonstrate periodic assessment completion rates, remediation action status, compliance with assessment schedules, and documentation of risk management activities.
Operational planning — Use score distribution and remediation tracking to plan resource allocation for assessments, remediation priorities, assessment scheduling and capacity, and team workload distribution.
Risk analysis — Use the risk heatmap and score distribution to analyze risk concentration by vendor type, effectiveness of risk mitigation, trends in vendor risk profiles, and correlation between inherent and residual risk.
Best practices
Review analytics regularly (weekly or monthly) to stay informed about your vendor risk posture. Use insights to take action — if you see high-risk vendors or overdue remediations, create action plans. Compare current analytics to previous periods to identify trends and measure improvement. Share insights with stakeholders, executives, and team members to keep everyone aligned on risk priorities.