A llama sitting at a computer with the words product update.

September 11, 2023

New in Vanta | August 2023

Written by

Brian Kuan

Product Marketing Manager

Reviewed by

Accelerating security solutions for small businesses
‍

Tagore offers strategic services to small businesses.

A partnership that can scale
‍

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors
‍

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

The month of August was a busy month at Vanta — we shipped Access Reviews schedules, 35 new integrations and new integration capabilities, Improvements to Vendor Risk Management, and more:

‍

Improvements to Trust
Workspaces Console
Auto-populated Statement of Applicability for ISO 27001:2022
Plus additional updates!

‍

Introducing Access Reviews Schedules

‍

Access Reviews customers can now set up multiple custom schedules for conducting access reviews.

‍

Instead of being limited to a single review schedule for all their systems, this flexibility allows customers to have better security hygiene by reviewing systems with a greater inherent risk more frequently than lower-risk systems.

‍

Learn more about Access Reviews

‍

35 new integrations and improved Snowflake integration

Confluence, productboard, snowflake and many more. — *New Vanta integrations and improvements*

‍

August was our biggest month for integrations to date, with a record 35 new integrations, ranging from Access, HRIS, and two-way task-tracking.

‍

Access Reviews customers now have an additional 32 systems for access-only integrations, including Confluence, LaunchDarkly, and Productboard. We’ve added SAP Success Factors and Officient as HRIS integrations, integrated task creation in our Github integration, and improved our Snowflake integration so that it can connect to multiple warehouses. For integration requests, whether you want to integrate with your in-house tools or an unsupported vendor, please fill out the integrations feedback form!

‍

View available integrations

‍

Improvements to Vendor Risk Management

A graph showing the performance of a website. — *Improvements to Vendor Risk Management*

‍

Vendor Risk Management is now better than ever before, with two new improvements we shipped in August.

‍

We’ve surfaced the summaries of findings and final decisions to the aggregate table view and changed the selection option from free-form text to a selection. These changes allow users to better understand their vendor risk decisions on an aggregate level and allows for more automation. Additionally, we’ve added a reporting page where customers can track and display metrics such as number of vendors, number of completed security reviews, and average time for completing a security review to their stakeholders.

‍

Learn more about Vendor Risk Management

‍

Improvements to Trust

*Scoped document access for Trust Reports*

‍

Our Trust suite of products, including Trust Reports and Questionnaire Automation, received an uplift.

‍

Trust Reports customers can now scope the access level to individual documents, versus provisioning access to their entire Trust Report. Requestors are also able to specify which documents they want access to, and customers are able to select which documents they want to provide. Additionally, Questionnaire Automation customers can now edit answers directly within the browser extension, versus visiting the in-app Answer Library to make edits.

‍

Learn more about our Trust solutions

‍

Workspaces Console

A screen shot of a screen showing the settings for a project. — *Workspaces console*

‍

Vanta Workspaces customers with multiple workspaces now have a single-pane-of-glass to manage all their workspaces.

‍

The Workspace Admin Console allows admins to view all their connected workspaces on an aggregate level. Additionally, admins will be able to manage users, including add new users, link users, and change user access — enabling for faster cross-business unit collaboration within Vanta.

‍

Learn more about Vanta Workspaces

‍

Auto-populated Statement of Applicability for ISO 27001:2022

‍

In June we released an auto-populated Statement of Applicability for ISO 27001:2013. We’ve now expanded that functionality to generate an auto-populated Statement of Applicability for ISO 27001:2022.

‍

The Statement of Applicability is a critical step for ISO 27001 that explains which controls are or aren’t relevant to your organization’s information security management system (ISMS). Vanta now generates a pre-filled template that’s automatically filled with current control data for both ISO 27001:2013 and ISO 27001:2022, thereby simplifying the work needed to satisfy this important requirement.

‍

Visit Policies page

‍

See our Release Notes for all updates this month.

‍

Try it out

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager. And stay in the loop on Vanta news via LinkedIn.

‍

Or see it live - What’s New in Vanta: September Webinar

Join us for our monthly What’s New in Vanta webinar taking place September 20, 11am PT/2pm ET. This series provides you a live look at some of our newest releases and product improvements. This month we’ll talk through Role-based access control (RBAC), Workspaces Console, Executive Reporting, and more!

Access Review Stage	Content / Functionality
Across all stages	Easily create and save a new access review at a point in time View detailed audit evidence of historical access reviews
Setup access review procedures	Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems	Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta. Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS) Upload access files from non-integrated systems View and select systems in-scope for the review
Review, approve, and deny user access	Select the appropriate systems reviewer and due date Get automatic notifications and reminders to systems reviewer of deadlines Automatic flagging of “risky” employee accounts that have been terminated or switched departments Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section Track progress of individual systems access reviews and see accounts that need to be removed or have access modified Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners	Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access	Focused view of accounts flagged for access changes for easy tracking and management Automated evidence of remediation completion displayed for integrated systems Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results	Auditor can log into Vanta to see history of all completed access reviews Internals can see status of reviews in progress and also historical review detail