“I don't care about 80% of my vendors… the 20% I assess, I'm going to actually assess.”

The GRC Engineering Club's AntiCheckBox Podcast · GRC Is Broken. The Buyer Is The Bigger Problem | Guest: Jake Bernardes

Play from 17:32
17:32

Audio streams from the publisher’s own feed. Verbatim does not host or copy it.

What was described

Assess only the top 20% of vendors that are critical to the business and ignore the other 80% of vendors

20% assessed, 80% ignored

Said nearby on the same subject

“It's a vanity metric that I've cataloged all my vendors… I don't care about 80% of my vendors.”
♫
Said on The GRC Engineering Club's AntiCheckBox Podcast
Contrarian take Share this moment
“I'm going to pick one critical vendor this week. I'm going to review his access. I'm going to try to understand everything that lies in between the vendor tool and my client sites.”
♫
Said on Uncle Marv's IT Business Podcast (Products, stories, and tips for the MSP and IT Professional)
How they work Share this moment
“Create a database to identify key vendor details, designated vendor contracts, designated communication information... verified and certified banking information”
♫
Said on Public Risk Management
How they work Share this moment
“Segregation of duties was established to establish control for purchasing vendor management, to create a database to identify key vendor details”
♫
Said on Public Risk Management
How they work Share this moment

Moments like this, every Monday

The strongest new moments on your topics, in the speakers' own words. Free for three topics.

No card. No password. One-click unsubscribe.

Track a competitor?

Pro watches up to 25 names or phrases and emails you the morning after they are said.

See Pro, $29 a month

Verbatim quotes a short extract and links to the episode; the episode belongs to its publisher. Remove a show.