What is vendor due diligence?

Vendor due diligence is the process of assessing a supplier before approval and at key points in the relationship to understand the exposure it creates, evaluate evidence about its controls and resilience, and decide whether the organisation can accept the relationship. The depth of review should follow the supplier relationship’s inherent risk, with higher-impact suppliers receiving more evidence requests, specialist review and monitoring.