Abstract: Aggregating risk assessments associated with a vendor may comprise retrieving a transaction risk assessment for a first transaction. A transaction risk assessment for a second transaction is retrieved. A first response to a question for measuring risk to an entity is determined. The first response is associated with the first transaction and indicative of risk associated with engaging a vendor to supply a first product to the entity. A second response to the question for measuring risk to the entity is determined. The second response is associated with the second transaction and indicative of risk associated with engaging the vendor to supply a second product to the entity. The first response is aggregated with the second response to determine an aggregated response to the question according to a highest level of risk perceived by the vendor from outsourcing the first product and the second product to the vendor.

Abstract: Managing a vendor may comprise identifying a product to be supplied to an entity. Risk elements associated with the product may be determined by performing a product category-driven risk assessment. A transaction level risk assessment is performed for one or more vendors proposed to supply the product to the entity. At least one management action is determined for reducing risk for a risk element of the plurality of risk elements associated with supplying the product to the entity by a selected vendor from a group comprising the one or more vendors proposed to the supply the product to the entity, wherein the at least one management action is determined according to results of the product category-driven risk assessment and the transaction level risk assessment for the selected entity. A vendor level quality plan for the selected vendor is created that comprises the at least one management action.

Abstract: Assessing risk associated with a transaction may comprise identifying a potential vendor for supplying a product to an entity in a transaction. A response to one or more of a first plurality of questions for measuring risk to the entity associated with engaging the potential vendor to supply the product in the transaction is determined. Responsive to determining the response to the one or more of the first plurality of questions, a dynamically-triggered question for measuring risk to the entity associated with engaging the potential vendor to supply the product in the transaction is identified. A response to the dynamically-triggered question is determined. A provision for insertion into a contract associated with the transaction is determined according to at least one of the response determined for the one or more of the first plurality of questions and the response determined for the dynamically-triggered question.