VNDR-10 Vendor Off-boarding

What is VNDR-10 vendor off-boarding control?

One of the many controls, VNDR-10 vendor off-boarding control, is a process that organizations implement to manage the termination or discontinuation of relationships with vendors. It ensures that all necessary steps are taken to properly off-board vendors and protect the organization from any potential risks. VNDR-10 control typically includes activities such as terminating contracts, removing access privileges, returning any company property, and conducting a thorough review of the vendor’s performance and compliance with contractual obligations.

The VNDR-10 vendor off-boarding control helps organizations maintain control over their vendor relationships and mitigate any potential negative impacts on their operations or security.

The VNDR-10 vendor off-boarding process ensures that contractual obligations are fulfilled and any sensitive data is destroyed. You need to ensure that the vendor can no longer access the system and that they have destroyed any data in their possession. Ensure that all the bills have been paid, and issue a stop payment to financial institutions if needed.

Available tools in the marketplace

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version.

• TrustCloud Off-boarding checklist template

Control implementation

To implement this control,

1. Document an off-boarding checklist that includes the following components:
   1. ensure that the vendor can no longer access the system.
   2. ensure the vendor has destroyed any data in their possession.
   3. ensure that all the bills have been paid and issue a stop payment to financial institutions if needed.
2. Monitor the vendor’s lifecycle, and for any terminated vendors, ensure that the off-boarding checklist is used to properly end the relationship.

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide the most recently completed off-boarding checklist along with supporting evidence (access removal, invoice, etc.)

Evidence example

For the suggested action, an example is provided below:

1. Provide the most recently completed off-boarding checklist along with supporting evidence (access removal, invoice, etc.)
   The off-boarding checklist can be completed using the template available within TrustCloud, along with additional evidence such as:
   1. Access removal ticket for the vendor
   2. Final Invoice Paid Receipts
      The following screenshot shows the disabling of vendors in TrustCloud.
      

In conclusion, VNDR-10 vendor off-boarding control is a crucial process that organizations use to manage the termination or discontinuation of relationships with vendors. By implementing this control, organizations can ensure that all necessary steps are taken to properly off-board vendors, protect themselves from potential risks, and maintain control over vendor relationships.

This control involves activities such as terminating contracts, removing access privileges, returning company property, and conducting a thorough review of the vendor’s performance and compliance. By following an off-boarding checklist and providing evidence of completed actions, organizations can demonstrate their commitment to fulfilling contractual obligations, protecting sensitive data, and maintaining financial integrity.

Auditors typically look for the most recently completed off-boarding checklist along with supporting evidence to ensure compliance. Overall, VNDR-10 vendor off-boarding control plays a critical role in protecting organizations’ operations and security while managing vendor relationships effectively.