{"catalogRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","download":{"releaseId":"sha256:30ac179fd116d09282f0116498473c3c250a9a7c00dc76f5e09b77649ef50b92","slug":"grc-new-vendor-onboarding","url":"/assets/agent_workflow-grc-new-vendor-onboarding-79a11f89.0ca83da8f28f22a2.json"},"kind":"record","record":{"attributes":{"department":"risk-management","domain":"grc","lineOfDefense":"operate"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-new-vendor-onboarding","description":"Runs automatically on a new System item marked as a vendor (System.vendor is true). Collect the requester's business facts and the vendor's security questionnaire, assess system and third-party risk, and approve the onboarding decision. Deliver the approved system risk review record, set the System item's tier, data classification, monitoring status and last and next assessment dates, and hand open actions to the responsible register owner; the yearly System & Third-Party Risk Review takes over from there.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-new-vendor-onboarding","capabilities":["new-vendor-onboarding"],"controls":["UC-RISK-18","UC-TPRM-02","UC-CONFIG-10","UC-TPRM-08","UC-TPRM-04"],"domains":["grc"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:30ac179fd116d09282f0116498473c3c250a9a7c00dc76f5e09b77649ef50b92","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-new-vendor-onboarding","standards":["iso-27001","nist-800-53","soc2"],"teams":["risk-management","procurement","it"]},"download":{"releaseId":"sha256:30ac179fd116d09282f0116498473c3c250a9a7c00dc76f5e09b77649ef50b92"},"history":{"digest":"0c1a8262ed3524c32357b6d54c6363a3eadfd7af2099d80a54f8e34d11f59394","firstSeenAt":"2026-10-09T17:15:44Z","firstSeenRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","updatedAt":"2026-10-09T17:15:44Z","updatedRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b"},"id":"wf:G41","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AG41","slug":"grc-new-vendor-onboarding","sourceIds":["aiuc-1","iso-27001","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"New Vendor Onboarding","type":"workflow"},"relationships":[{"expectedCatalogRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","id":"rel:341e5d854f1a22cc775ba7146bfd889eabf69e37694a033f5e8e597fb29ca6bb","properties":{},"sourceDetailPath":"/data/v1/records/wf-g41-0ff21df7.json","sourceId":"wf:G41","targetDetailPath":"/data/v1/records/uc-uc-tprm-04-e6aef252.json","targetId":"uc:UC-TPRM-04","type":"operates"},{"expectedCatalogRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","id":"rel:389d9620726faba5243769bf5b53f7fa3df1f5c17152ab5ba6222a7ee6da1f3b","properties":{},"sourceDetailPath":"/data/v1/records/wf-g41-0ff21df7.json","sourceId":"wf:G41","targetDetailPath":"/data/v1/records/uc-uc-tprm-02-c35b26eb.json","targetId":"uc:UC-TPRM-02","type":"operates"},{"expectedCatalogRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","id":"rel:6d94159f236034dce1bd26a494aeb2e49efcf51a7db73ed496c6e52a05eb265c","properties":{},"sourceDetailPath":"/data/v1/records/wf-g41-0ff21df7.json","sourceId":"wf:G41","targetDetailPath":"/data/v1/records/uc-uc-config-10-921518b8.json","targetId":"uc:UC-CONFIG-10","type":"operates"},{"expectedCatalogRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","id":"rel:79b2086ef14939aaabfcb157e3097967a37bf1fc2f518f139c75ae488735e58b","properties":{},"sourceDetailPath":"/data/v1/records/wf-g41-0ff21df7.json","sourceId":"wf:G41","targetDetailPath":"/data/v1/records/uc-uc-tprm-08-6de49908.json","targetId":"uc:UC-TPRM-08","type":"operates"},{"expectedCatalogRevision":"e3174baba4349814a5b925938b4124ba43ccab6702e45e83d6cdef7c8898f67b","id":"rel:b79c9e093d04ad69ef6b9d8021fe59c51a1450eebb643400515afd92b03f0a34","properties":{},"sourceDetailPath":"/data/v1/records/wf-g41-0ff21df7.json","sourceId":"wf:G41","targetDetailPath":"/data/v1/records/uc-uc-risk-18-23752e70.json","targetId":"uc:UC-RISK-18","type":"operates"}],"schemaVersion":1}