Third-Party Vendor Product Deployments

2 min read

This information is for all users of Isora GRC.

Third-party vendor product deployments, also known as product deployments, provide a way for you to track who is using a product and how they are using it. Keep in mind that third-party vendor products in inventory aren’t specifically owned by any particular unit. A deployment creates a relationship in Isora GRC between the product and a unit that actually uses the product. It’s also a convenient place for keeping track of details about how the product is being used and who is responsible for the product. You can also assign a data classification based on the type of data the product accesses.

⚠️
In older versions of Isora GRC, product deployments were an optional feature. In the latest version, it is necessary to create a product deployment before you can assess a third-party vendor product.

Product Deployment Features

Field nameUsage
Deploying UnitThe unit requesting to use the product or actually using the product.
Owning Unit(s)Additional unit(s) responsible for this deployment. Usually this is the same as the Deploying Unit, but it doesn’t have to be. (For example, the HR might be utilizing a product that is maintained and managed by IT. In that case, HR is the deploying unit but IT is the owning unit.)
Owning User(s)User(s) responsible for this deployment (they must have a user account in Isora GRC).
EnvironmentThe type of deployment- usually dev, test, production etc (this is a customizable field).
ScopeThe scope of the deployment (Enterprise, Team, Individual, Unit).
Vendor ContactsContact information for people who are knowledgeable about this product and/or deployment (usually people external to your organization, such as vendor representatives, but they could also be people within the organization who don’t have user accounts in Isora GRC).
NotesAny additional info you’d like to document about the deployment.

These are optional fields.


See also: Third-Party Vendor Product Intake How-To: Create a Third-Party Vendor Product Deployment

Did this answer your question?