Leveraging Vendor Risk Management Software to Grow and Expand

As an HR innovation company focused on driving better hiring decisions through AI and machine learning, HireVue is used to being at the forefront of new trends and ideas. By working to close the gap between HR teams and the technology that makes their lives easier, HireVue works with customers and vendors across industries, which means that keeping this data and information secure is a top priority.

For a team that is so motivated to deliver automated processes to their clients, the internal manual processes of sending, receiving, and completing vendor security questionnaires from vendors and clients created a workflow that wasn’t efficient or scalable for the HireVue team. Instead of spreadsheets and manual tracking, the team was looking for a single source of truth across the entire vendor risk management lifecycle, including:

• Tracking new vendors, renewals, and documentation from different sources.
• A clear approval process for both internal use and external compliance efforts.
• An innovative tracking and approval workflow that fits alongside the team’s client-facing offerings.

HireVue turned to Whistic, another resident of the Silicon Slopes of Utah, to address all of the above challenges and more. First and foremost, the Whistic platform offered a focused, cost-effective solution that successfully eliminated the manual workflows that were standing in the way of HireVue’s growth and scalability goals. The Whistic platform also provided:

• A single source of truth and access for all vendor risk management questions.
• Advanced back-end metrics and reporting for a more holistic look at InfoSec processes.
• Access to a team of InfoSec experts with extensive experience and knowledge of the space.

With Whistic, HireVue has been able to overturn cumbersome manual processes and create an efficient, scalable vendor risk management workflow. Other results HireVue has seen with Whistic include:

• A clear line of approval to show that all vendors meet HireVue’s rigorous compliance standards.
• A single source of truth and knowledge for all vendor compliance standards, questionnaires, feedback, and documentation.
• The ability to visualize in real-time if a vendor has any potential risk factors that could cause issues down the road.

Altogether, HireVue was able to find what they were looking for with Whistic: a platform that allows them to grow and scale internally without putting compliance or security at risk. The InfoSec management team now has an additional level of assurance, visibility, and transparency into the risk management process while other team members can quickly complete their tasks without unnecessary manual effort.

You can read HireVue’s entire story about how they created a scalable vendor risk management process here (file will download automatically).