Metrics drive the measure of progress and stand as benchmarks during any assessment, audit or review process. They are the life blood of reporting and when it comes to vendor risk management, it is not as straight forward as you might think. Let's take a deeper look into what Guy Dulberger of Ritchie Bros. has to say about the key metrics to track when assessing vendor risk and how a risk-based approach is the new norm for vendor risk management.
"I think an important aspect of what makes a great security report, KPI or metric is understanding your business and where your greatest orgnizational risk lies."
- Guy Dulberger, Information Security Executive