--- title: "Proactively Managing Vendor Risk: Coffee & Compliance Webinar Recap" description: With the global rise of data breaches, companies must be proactive about vendor risk management and maintaining regulatory compliance. Read for tips. image: https://blog.linksquares.com/hubfs/risk.png --- [Skip to content](https://blog.linksquares.com/proactively-managing-vendor-risk-coffee-compliance-webinar-recap#main-content) [LinkSquares](https://blog.linksquares.com/) Open Mobile Menu [LinkSquares](https://linksquares.com/) Close Mobile Menu [Why LinkSquares](https://linksquares.com/why-linksquares/) [Products](https://linksquares.com/products/) --- [The LinkSquares Cloud One platform for all your in-house legal needs](https://linksquares.com/products/linksquares-cloud/) --- Contract Lifecycle Management Create, review, manage and sign contracts Legal Project Management Centralize your work and keep projects moving Cross-product capabilities Get scalability, efficiency and connectivity LinkSquares Onboarding Experience A step by step guide to get started today --- [Solutions](https://linksquares.com/solutions/) [Customer Stories](https://linksquares.com/customers/) Resources Content [LinkSquares+ Content curated for in-house leaders](https://linksquares.com/plus/) [The Library](https://linksquares.com/library/) In the studio [Demo Library](https://linksquares.com/demo-library/) Community & Events [Customer Stories](https://linksquares.com/customers/) [Events & Webinars](https://linksquares.com/events/) Learning [Blog](https://blog.linksquares.com/) [In-House Insights](https://linksquares.com/inhouse-insights/) [Knowledge Base](https://help.linksquares.com/) [Events](https://linksquares.com/events/) [About Us](https://linksquares.com/about-us/) [Careers](https://linksquares.com/careers/) [Press](https://blog.linksquares.com/tag/linksquares-news-press) [Pricing](https://linksquares.com/pricing/) [Request a demo](https://linksquares.com/demo-request/) Back Close Mobile Menu [Contract Lifecycle Management](https://linksquares.com/products/) [Finalize Streamline your contract creation process](https://linksquares.com/products/finalize/) [Sign Get your contracts executed faster](https://linksquares.com/products/sign/) [Analyze Your post-signature analytics & repository](https://linksquares.com/products/analyze/) [CLM Suite One platform to rule them all](https://linksquares.com/products/) [Request a demo](https://linksquares.com/demo-request/) Back Close Mobile Menu [Legal Project Management](https://linksquares.com/products/) [Prioritize Manage, track, and report on legal work in one place](https://linksquares.com/products/prioritize/) [Request a demo](https://linksquares.com/demo-request/) Back Close Mobile Menu [Cross-product capabilities](https://linksquares.com/products/) [LinkAI Predictive and generative AI](https://linksquares.com/products/analyze/features/ai/) [Integrations Connect the tools you love](https://linksquares.com/integrations/) [Reporting Improve your teams efficiency with KPIs](https://linksquares.com/products/analyze/features/dashboard/) [API Integrate with any third-party app](https://linksquares.com/integrations/linksquares-api/) [Request a demo](https://linksquares.com/demo-request/) Back Close Mobile Menu [Cross-product capabilities](https://linksquares.com/products/) [Onboarding We're here for you from day one](https://linksquares.com/onboarding-services/) [Services Short on time? We can help!](https://linksquares.com/services/) [Support Get answers to all of your technical questions](https://linksquares.com/contact-us/) [Request a demo](https://linksquares.com/demo-request/) [LinkSquares](https://linksquares.com/) - [Why LinkSquares](https://linksquares.com/why-linksquares/) - Products ![](https://images.ctfassets.net/a3hff24q6nt8/104udRs2GzBis3lVOIsQfq/24c371c6c0463777709a98a8bd89cc8c/Image.png) Introducing: Agentic AI for Contract Management Search, edit, and create contracts like never before. [Learn more](https://linksquares.com/agentic-ai/) Contract Lifecycle Management Create, review, manage and sign contracts Legal Project Management Centralize your work and keep projects moving Unified Capabilities Get scalability, efficiency and connectivity LinkSquares Onboarding Experience A step by step guide to get started quickly [Finalize Streamline your contract creation process](https://linksquares.com/products/finalize/) [Sign Get your contracts executed faster](https://linksquares.com/products/sign/) [Analyze Your post-signature analytics & repository](https://linksquares.com/products/analyze/) [CLM Suite One platform to rule them all](https://linksquares.com/products/) [Prioritize Manage, track, and report on legal work in one place](https://linksquares.com/products/prioritize/) [LinkAI Predictive and generative AI](https://linksquares.com/ai/) [Agentic AI Smarter contracting with a multi-agent approach](https://linksquares.com/agentic-ai/) [Integrations Connect the tools you love](https://linksquares.com/integrations/) [Reporting Improve your teams efficiency with KPIs](https://linksquares.com/products/analyze/features/dashboard/) [API Integrate with any third-party app](https://linksquares.com/integrations/linksquares-api/) [Onboarding We're here for you from day one](https://linksquares.com/onboarding-services/) [Services Short on time? We can help!](https://linksquares.com/services/) [Support Get answers to all of your technical questions](https://linksquares.com/contact-us/) - Solutions Use Cases [Crisis Management](https://linksquares.com/solutions/crisis-management/) [Contract Review](https://linksquares.com/solutions/contract-review/) [Contract Storage](https://linksquares.com/solutions/contract-storage/) [Data Privacy & Compliance](https://linksquares.com/solutions/data-privacy-compliance/) [Deal Acceleration](https://linksquares.com/solutions/deal-acceleration/) [Mergers & Acquisitions](https://linksquares.com/solutions/fundraising-and-ma/) [Vendor Management](https://linksquares.com/solutions/vendor-management/) --- DEPARTMENTS [Legal](https://linksquares.com/solutions/linksquares-for-legal/) [Procurement](https://linksquares.com/solutions/linksquares-for-procurement/) [Sales](https://linksquares.com/solutions/linksquares-for-sales/) - Resources Content [LinkSquares+ Content curated for in-house leaders](https://linksquares.com/plus/) [The Library](https://linksquares.com/library/) Community & Events [Customer Stories](https://linksquares.com/customers/) [Events & Webinars](https://linksquares.com/events/) In the studio [Demo Library](https://linksquares.com/demo-library/) Learning [Blog](https://blog.linksquares.com/) [In-House Insights](https://linksquares.com/inhouse-insights/) [Knowledge Base](https://help.linksquares.com/) [![](https://blog.linksquares.com/hubfs/Navigation/website-menu-navigation-hs-risk-scoring.png)](https://linksquares.com/events/product-spotlight-webinar-risk-revolution/) - Company [About Us](https://linksquares.com/about-us/) [Careers](https://linksquares.com/careers/) [Events](https://linksquares.com/events/) [Partner Program](https://linksquares.com/partners/) [Press](https://blog.linksquares.com/tag/linksquares-news-press) - [Pricing](https://linksquares.com/pricing/) - [Login](https://app.linksquares.com/) - [Request a demo](https://linksquares.com/demo-request/) ![compliance ](https://blog.linksquares.com/hs-fs/hubfs/Copy%20of%20Blog_Header-Aug-10-2023-01-30-37-9157-PM.png?width=575&name=Copy%20of%20Blog_Header-Aug-10-2023-01-30-37-9157-PM.png) [Alyssa Verzino](https://blog.linksquares.com/author/alyssa-verzino) Aug 10, 2023 6 min read # Proactively Managing Vendor Risk: Coffee & Compliance Webinar Recap Data breaches are costing companies [millions](https://www.ibm.com/reports/data-breach). Even when the cause of the breach traces back to your vendor, you’re still the one who pays the price. With the global rise of data breaches, companies must be proactive about vendor risk management and maintaining regulatory compliance.  Companies without a formal vendor risk management program can fall into the trap of auditing a too-narrow scope of vendors when they also need to be looking at which vendors *those* partners use. But the increase in [shadow IT](https://www.crowdstrike.com/cybersecurity-101/cloud-security/shadow-it/) and unauthorized SaaS purchases can make this difficult, and it puts your customers’ data at risk. In a recent [webinar](https://www.vanta.com/webinars/coffee-compliance-proactively-manage-vendor-risk?utm_campaign=ToF&utm_source=linksquares) with Vanta, directors of security shared ways for businesses to be more proactive in managing vendor risk and to ensure better compliance across the company. Here are some of their tips: ## Start with inventory Risk management processes begin with inventory. As Gig Walsh, LinkSquares Director of Security and Compliance, says, “You can’t protect what you don’t know you have.” Take stock of what tools the company currently pays for using self-reporting inventories or by tracking purchases through bank statements. This will give you a strong jumping-off point for learning whom you’re sharing your data with – intentionally and otherwise. ## Build awareness throughout the organization Sometimes, other teams don’t report their SaaS purchases (to IT, security, or any other responsible team) because they don’t know they’re supposed to. Facilitating organization-wide awareness of this helps other departments keep security top of mind as they assess and acquire tools. This lets you build security review into the RFP process and encourage teams to consider their risk responsibility, helping your business maintain better compliance. ## Prioritize by access to customer data After taking inventory, you might feel overwhelmed by the sheer number of vendors you use that have access to your data and what that might mean for compliance. Start with the vendors that have access to your customer’s data. Exposing customer data during a breach carries [the heaviest fines](https://resourcehub.bakermckenzie.com/en/resources/data-privacy-security/north-america/united-states/topics/penalties-for-non-compliance#:~:text=The%20VCDPA%20provides%20for%20civil,per%20violation%20and%20injunctive%20relief.&text=Violations%20of%20HIPAA%20can%20include,years%20imprisonment%20in%20certain%20cases.), so prioritize assessing vendors that introduce the greatest risk. ## Repurpose assessment questionnaires Some companies provide security questionnaires that are hundreds of questions, but yours don’t have to be that long. You don’t even have to create them from scratch. Repurpose questions from [SOC 2](https://blog.linksquares.com/what-is-soc-2)reports and [ISO certifications](https://blog.linksquares.com/linksquares-smart-values-for-cybersecurity), and use tools like [Vanta](https://www.vanta.com/) to create any extra questions not covered in those. ## Use CLM to track vendors Without a streamlined or centralized way to track vendors across the entire organization, you’ll always be playing catch-up. Walsh shared how the LinkSquares team uses Contract Lifecycle Management (CLM) to manage any new vendors, which is how he becomes aware of them early on in the process. With CLM, teams can track the status of vendor assessments and automatically review terms for compliance.  ## Takeaways It can be hard to make the case for a full-time vendor risk management position, so security and IT teams have to make room on their to-do lists to manage vendor risk and maintain compliance. [Learn how LinkSqaures](https://linksquares.com/solutions/data-privacy-compliance/) can help you stay ahead of [data privacy and compliance](https://linksquares.com/solutions/data-privacy-compliance/) concerns today. ![avatar](https://blog.linksquares.com/hs-fs/hubfs/alyssa%20.jpeg?width=290&name=alyssa%20.jpeg) #### [Alyssa Verzino](https://blog.linksquares.com/author/alyssa-verzino) Alyssa Verzino is a Senior Content Marketing Manager at LinkSquares. ## Subscribe to the LinkSquares Blog Stay up to date on best practices for GCs and legal teams, current events, legal tech, and more. ## Related Articles ### [Alyssa Verzino Jun 15, 2023 4 min read How CLM Helps With SOX and Contract Compliance In the early 2000s, corporations like Enron and Worldcom mismanaged their funds, hid their losses, and lied about it to ... Start Reading](https://blog.linksquares.com/how-clm-helps-with-sox-and-contract-compliance) ### [Alyssa Verzino Nov 09, 2021 5 min read GDPR Compliance: Primary Contract Clauses to Focus On Welcome back to our blog series all about General Data Protection Regulation (GDPR) compliance. Yesterday we covered the ... Start Reading](https://blog.linksquares.com/contract-clauses-gdpr-compliance) ### [Alyssa Verzino Jul 25, 2023 5 min read Compliance and Audit Management with CLM It’s possible to forget about a contract after it’s been signed, but that’s a costly mistake. Instead, legal teams and ... Start Reading](https://blog.linksquares.com/compliance-and-audit-management-with-clm) - [Products](https://linksquares.com/products) - [LinkSquares Cloud](https://linksquares.com/products/linksquares-cloud/) - [Prioritize](https://linksquares.com/products/prioritize/) - [Finalize](https://linksquares.com/products/finalize) - [Sign](https://linksquares.com/products/sign) - [Analyze](https://linksquares.com/products/analyze) - [Full Suite](https://linksquares.com/products) - [Integrations](https://linksquares.com/integrations) - [Reporting](https://linksquares.com/products/analyze/features/dashboard/) - [API](https://linksquares.com/integrations/linksquares-api/) - [LinkAI](https://linksquares.com/ai/) - [Agentic AI](https://linksquares.com/agentic-ai/) - [Services](https://linksquares.com/services/) - [Solutions](https://linksquares.com/solutions) - [Crisis Management](https://linksquares.com/solutions/crisis-management/) - [Contract Review](https://linksquares.com/solutions/contract-review/) - [Contract Storage](https://linksquares.com/solutions/contract-storage/) - [Data Privacy & Compliance](https://linksquares.com/solutions/data-privacy-compliance/) - [Deal Acceleration](https://linksquares.com/solutions/deal-acceleration/) - [Mergers & Acquisitions](https://linksquares.com/solutions/fundraising-and-ma/) - [Vendor Management](https://linksquares.com/solutions/vendor-management/) - Departments - [Legal](https://linksquares.com/solutions/linksquares-for-legal/) - [Procurement](https://linksquares.com/solutions/linksquares-for-procurement/) - [Sales](https://linksquares.com/solutions/linksquares-for-sales/) - [Resources](https://linksquares.com/library) - [LinkSquares+](https://linksquares.com/plus) - [Blog](https://blog.linksquares.com/) - [Cockpit Counsel](https://linksquares.com/cockpit-counsel-series) - [Customer Stories](https://linksquares.com/customers) - [Demo Library](https://linksquares.com/demo-library) - [Events & Webinars](https://linksquares.com/events) - [In-House Insights](https://linksquares.com/inhouse-insights/) - [Knowledge Base](https://help.linksquares.com/) - [The Library](https://linksquares.com/resources) - Company - [About Us](https://linksquares.com/about-us) - [Careers](https://linksquares.com/careers) - [Contact Us](https://linksquares.com/contact-us/) - [Onboarding](https://linksquares.com/onboarding-services/) - [Partner Program](https://linksquares.com/partners) - [Pricing](https://linksquares.com/pricing/) - [Press](https://blog.linksquares.com/tag/linksquares-news-events) - [Recognition](https://linksquares.com/recognition/) - [Support](mailto:support@linksquares.com) - [Why LinkSquares](https://linksquares.com/why-linksquares/) #### LINKSQUARES, INC. 60 State St. Suite 1200 Boston, MA 02109 [617-681-8552](tel:617-681-8552) [salesinfo@linksquares.com](mailto:salesinfo@linksquares.com) © 2026 LinkSquares, Inc. - [SaaS Terms of Service](https://linksquares.com/saas-terms-of-service/) - [Privacy](https://linksquares.com/privacy-policy/) - [Security](https://linksquares.com/security/) - [Status](https://linksquares.statuspage.io/) - [Your Privacy Choices](https://go.linksquares.com/linksquares-do-not-sell-or-share-personal-data) - ![aicpa soc 2](https://blog.linksquares.com/hs-fs/hubfs/soc2_66933e61%20copy.png?width=100&height=100&name=soc2_66933e61%20copy.png) - ![barr certification](https://blog.linksquares.com/hs-fs/hubfs/Frame%201921.png?width=129&height=57&name=Frame%201921.png) ```json { "@context" : "http://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Boston", "addressRegion" : "MA", "postalCode" : "02109", "streetAddress" : "60 State Street" }, "knowsLanguage" : "en", "logo" : { "@type" : "ImageObject", "url" : "https://6934676.fs1.hubspotusercontent-na1.net/hubfs/6934676/Navigation/logo_643dd1b1.svg" }, "name" : "LinkSquares", "url" : "https://blog.linksquares.com/proactively-managing-vendor-risk-coffee-compliance-webinar-recap" } ``` ```json { "@context" : "http://schema.org", "@type" : "BlogPosting", "abstract" : "With the global rise of data breaches, companies must be proactive about vendor risk management and maintaining regulatory compliance. Read for tips.", "author" : { "@type" : "Person", "name" : "Alyssa Verzino" }, "dateModified" : "2023-08-10T13:34:40Z", "datePublished" : "2023-08-10T13:34:40Z", "headline" : "Proactively Managing Vendor Risk: Coffee & Compliance Webinar Recap", "image" : "https://6934676.fs1.hubspotusercontent-na1.net/hubfs/6934676/risk.png", "inLanguage" : "en", "keywords" : "[Regulatory & Compliance]", "mainEntityOfPage" : { "@type" : "WebPage" }, "name" : "Proactively Managing Vendor Risk: Coffee & Compliance Webinar Recap", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://6934676.fs1.hubspotusercontent-na1.net/hubfs/6934676/Navigation/logo_643dd1b1.svg" }, "name" : "LinkSquares" }, "text" : "Data breaches are costing companies millions. Even when the cause of the breach traces back to your vendor, you’re still the one who pays the price. With the global rise of data breaches, companies must be proactive about vendor risk management and maintaining regulatory compliance. Companies without a formal vendor risk management program can fall into the trap of auditing a too-narrow scope of vendors when they also need to be looking at which vendors those partners use. But the increase in shadow IT and unauthorized SaaS purchases can make this difficult, and it puts your customers’ data at risk. In a recent webinar with Vanta, directors of security shared ways for businesses to be more proactive in managing vendor risk and to ensure better compliance across the company. Here are some of their tips: Start with inventory Risk management processes begin with inventory. As Gig Walsh, LinkSquares Director of Security and Compliance, says, “You can’t protect what you don’t know you have.” Take stock of what tools the company currently pays for using self-reporting inventories or by tracking purchases through bank statements. This will give you a strong jumping-off point for learning whom you’re sharing your data with – intentionally and otherwise. Build awareness throughout the organization Sometimes, other teams don’t report their SaaS purchases (to IT, security, or any other responsible team) because they don’t know they’re supposed to. Facilitating organization-wide awareness of this helps other departments keep security top of mind as they assess and acquire tools. This lets you build security review into the RFP process and encourage teams to consider their risk responsibility, helping your business maintain better compliance. Prioritize by access to customer data After taking inventory, you might feel overwhelmed by the sheer number of vendors you use that have access to your data and what that might mean for compliance. Start with the vendors that have access to your customer’s data. Exposing customer data during a breach carries the heaviest fines, so prioritize assessing vendors that introduce the greatest risk. Repurpose assessment questionnaires Some companies provide security questionnaires that are hundreds of questions, but yours don’t have to be that long. You don’t even have to create them from scratch. Repurpose questions from SOC 2 reports and ISO certifications, and use tools like Vanta to create any extra questions not covered in those. Use CLM to track vendors Without a streamlined or centralized way to track vendors across the entire organization, you’ll always be playing catch-up. Walsh shared how the LinkSquares team uses Contract Lifecycle Management (CLM) to manage any new vendors, which is how he becomes aware of them early on in the process. With CLM, teams can track the status of vendor assessments and automatically review terms for compliance. Takeaways It can be hard to make the case for a full-time vendor risk management position, so security and IT teams have to make room on their to-do lists to manage vendor risk and maintain compliance. Learn how LinkSqaures can help you stay ahead of data privacy and compliance concerns today.", "url" : "https://blog.linksquares.com/proactively-managing-vendor-risk-coffee-compliance-webinar-recap", "wordCount" : "810" } ```