A llama sitting at a computer with the words product update.

May 3, 2023

New in Vanta | April 2023

Written by

Brian Kuan

Product Marketing Manager

Reviewed by

Accelerating security solutions for small businesses
‍

Tagore offers strategic services to small businesses.

A partnership that can scale
‍

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors
‍

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

We’re excited to announce the newest addition to Vanta’s product portfolio, Vendor Risk Management, as well as improvements to Access Reviews, and more updates from April:

‍

17 new integrations: New Relic, Freshteam, Basecamp…
Google Drive policy sync
Policies in multiple languages
Frameworks page redesign
And much more!

‍

Introducing: Vendor Risk Management

‍

We’re excited to announce the newest addition to our product portfolio: Vendor Risk Management.

‍

Vendor Risk Management simplifies the manual, time-consuming process of performing third-party vendor security reviews to ensure your sensitive data handled by these third-parties is secure. By automating vendor discovery, risk assessments, and remediation, you will spend less time on vendor reviews and have a stronger compliance and security posture.

Learn more about Vendor Risk Management

‍

Improvements to Access Reviews

‍

Vanta’s Access Reviews solution automates the process of ensuring only the correct users gain access to crucial systems, and reduces the risks for internal misuse and external threats.

‍

Vanta Access Reviews has been enhanced and now provides additional roles, workflows, and automation to manage the access review process more efficiently. This includes a System Reviewer role for non-compliance business users, two-way task tracker integrations for access remediation, 30+ additional account access integrations, an API for more automation, and more.

Learn more about Access Reviews

‍

17 new integrations: New Relic, Freshteam, Basecamp...

A screenshot of the start new view page on a yellow background. — *Vanta Integrations*

‍

Vanta’s ever-growing list of integrations means more flexibility when it comes to integrating the tools your team uses.

‍

In April we released 17 new integrations, ranging from access-only integrations for Access Reviews customers, New Relic for observability, HRIS, task trackers, and security awareness training. Our partners were also hard at work and expanded our integration ecosystem by creating some of their own through our Connectors API.

View the full list of available integrations

‍

Google Drive policy sync

Google docs sync with google drive. — *Google Drive policy sync*

‍

Vanta now has a Google Drive integration for policy sync, in addition to Confluence.

‍

Customers who use Google Drive to manage their policies will now be able to connect their Google Drive account. The integration looks at the “Vanta policies” shared drive of the integrated user and allows them to choose policies from this drive to sync to Vanta, ensuring that the policy sync process works with whatever tool your team uses.

‍

Visit the Policies page

‍

Policies in multiple languages

‍

Policies within Vanta can now be created in numerous languages at the same time.

‍

These languages, including English, French, German, and Spanish, can be selected at the time of creation, and can be added or removed for future policy versions. Users who want to review policies can then select which language they’d like to view the policies in - ensuring a seamless policy experience for your global team.

‍

Learn how to set policies in multiple languages

‍

Frameworks page redesign

A green screen showing the status of the organization. — *Frameworks page redesign*

‍

We’ve redesigned the Frameworks details page to make it easier to navigate than ever before.

‍

Each framework detail now includes a sidebar for easy navigation, as well as more organization and exposure to the framework’s hierarchy. We now break down frameworks by requirement category, its requirements, and each control mapped to those requirements. This redesign also applies to custom frameworks, where users will be able to edit each requirement and requirement category to their needs.

‍

Visit the Frameworks page

‍
See our Release Notes for all updates this month.

‍

Try it out

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager. And stay in the loop on Vanta news via LinkedIn.

Access Review Stage	Content / Functionality
Across all stages	Easily create and save a new access review at a point in time View detailed audit evidence of historical access reviews
Setup access review procedures	Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems	Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta. Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS) Upload access files from non-integrated systems View and select systems in-scope for the review
Review, approve, and deny user access	Select the appropriate systems reviewer and due date Get automatic notifications and reminders to systems reviewer of deadlines Automatic flagging of “risky” employee accounts that have been terminated or switched departments Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section Track progress of individual systems access reviews and see accounts that need to be removed or have access modified Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners	Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access	Focused view of accounts flagged for access changes for easy tracking and management Automated evidence of remediation completion displayed for integrated systems Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results	Auditor can log into Vanta to see history of all completed access reviews Internals can see status of reviews in progress and also historical review detail