FAQ
Third-Party Risk Management

What is continuous vendor monitoring?

Continuous vendor monitoring is the ongoing observation of changes that could alter a vendor’s risk after onboarding. It may track cyber hygiene, new external assets, vulnerabilities, breaches, financial stress, ownership, compliance or geopolitical events. Effective monitoring links alerts to criticality and response actions instead of producing a stream of undifferentiated scores. ThingsRecon adds external evidence and Digital Proximity so teams can focus on vendors whose changes are most relevant to critical operations. In practice, teams should record the supporting evidence, confirm ownership and business criticality, and connect the finding to an accountable workflow. This prevents a useful observation from becoming another isolated score or dashboard alert. The strongest implementation combines external intelligence with internal knowledge, supplier engagement and documented risk decisions, creating a view that remains useful as the digital ecosystem changes.