Registering key companies and partners
Overview
In today's interconnected digital world, an organization's cyber risk extends beyond internal operations to include every company and partner in its business ecosystem. RiskStudio's Companies feature, as part of the asset management, helps you track and manage the cyber health of your external business relations, providing a holistic approach to cybersecurity. These Companies represent vendors, partners, or clients that your organization interacts with, as vulnerabilities in their systems could expose your organization to risks.
Key Actions:
Companies List: The list is compiled manually by users who have access to the workspace. You can sort companies by name, website, operational entity, or country to keep track of all the key players within your ecosystem.
Add a Company: Add companies to your list/overview by searching for their names or manually adding them if they are not in the existing database. Advanced search options are available for filtering by country, and you can even add multiple companies at once.
Archived Companies: Archived companies are those that no longer play an active role in your overview but remain part of the ongoing risk and reporting processes. Archiving helps provide an accurate, up-to-date view of active partners while retaining necessary historical data.
Your Company: The first company in the list is marked as "Your Company" (a.k.a. primary company) This is your own organization, which can be edited by owners, admins, or editors to reflect changes in the primary company information. You can change your company by editing a different company and checking the ‘Primary Company’ box.
Company Details: View detailed information about each company, such as its profile, interrelated risks, operational entities, related risk events, employee alerts, cyber rating, and attack surface. This allows you to have an in-depth understanding of each company’s potential impact on your risk landscape.
Edit, Archive, or Delete a Company: Modify details like the company logo, name, or country, archive a company to move it out of the active list while retaining its information, or delete a company entirely if it is no longer needed.
Maximizing the Potential of 'Companies'
Regularly update your company list to ensure you are accounting for all relevant companies and maintaining an accurate risk profile. Use the gathered data to strategize and mitigate concentrated risks, reducing dependency on a small number of suppliers and enhancing overall risk resilience. Linking these assets to risks, controls, and events helps create valuable dependencies, giving insights into the potential impact of incidents across your business ecosystem.
Tips for Getting Started:
Start by adding all key external partners, vendors, and clients to build a comprehensive view of your business ecosystem.
Use the sorting and advanced search features to organize and manage your company list effectively.
Regularly review and update the companies list to keep it relevant and reflective of current business relationships.