Vendor Risk Tiering and Assessment Plan
Sort suppliers by risk and assess in proportion.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Tier vendors. List of vendors with what they do, the data they hold and the systems they connect to: [VENDOR_LIST]. Business importance of each: [IMPORTANCE]. Define tiers by data sensitivity, system access, business dependency and replaceability. Assign each vendor, then specify the assessment for each tier: questionnaire length, evidence requested, review frequency and who approves. Calculate how many vendors fall into each tier. Return a table and a calendar for the year with review dates. Keep effort proportionate; low-risk vendors need only light checks. Add a worked tiering table. Vendor payroll provider: handles sensitive personal and bank data, high dependency, hard to replace, tier 1. Vendor email marketing tool: handles names and emails, medium dependency, replaceable, tier 2. Vendor stationery supplier: no data, no access, tier 3. Count: 1 tier 1, 1 tier 2, 1 tier 3. Review frequency: tier 1 yearly with evidence, tier 2 every two years with a short questionnaire, tier 3 only on contract renewal. Add effort estimates in hours and the total, so the programme is realistic for my team.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.