Vendor Profile

The Vendor Profile is the central page for all information related to a specific vendor.

Overview

Each vendor in Galink has a detailed profile page that consolidates all relevant data, including properties, resources, findings, assessments, and activity history.

Tiering & Assessment

see following pages

Key properties

Every vendor profile includes the following key properties:

• Security Owner -- The person responsible for managing this vendor's security review.

• Business Owner -- The person who owns the business relationship with the vendor.

• Tier -- The vendor's risk classification (Tier 1, 2, or 3).

• Lifecycle -- The vendor's current lifecycle status.

• Organization -- The organizational unit the vendor belongs to (if the Organization feature is enabled).

• Custom properties -- Any additional properties configured by your organization.

Galink Insights

Galink automatically scrapes the vendor's website to extract basic data:

• A description of the vendor

• Founding date

• Country of origin

• Verification of certifications (SOC 2, ISO 27001, etc.)

This helps CISOs quickly understand unknown vendors without manual research.

OSINT -- Data breach detection

Galink monitors for data breaches associated with your vendors:

• Breaches detected in the last 6 months are displayed in the OSINT section.

• Clicking a breach redirects to the CERT or Ransomware.live page for the last known event.

• Sources include CERT-FR, Ransomware.live (with additional sources planned).

Profile tabs

The vendor profile is organized into several tabs:

• Resources -- View and manage all resources (questionnaires, certifications, documents) associated with the vendor.

• Findings -- View all findings flagged for this vendor.

• Remediations -- View and manage the vendor's remediation actions

Activity tracking

The Activity tab tracks all key vendor events:

• Vendor creation

• Tier updates

• Assessment updates

• Resource submissions

• Questionnaire clarification requests

• Reminder notifications sent

• Portal sharing activity

Deleted users are displayed as "Anonymous" in the activity timeline.