A llama sitting at a computer with the words product update.

July 10, 2023

New in Vanta | June 2023

Written by

Brian Kuan

Product Marketing Manager

Reviewed by

Accelerating security solutions for small businesses
‍

Tagore offers strategic services to small businesses.

A partnership that can scale
‍

Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate.

Standing out from competitors
‍

Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

June was a month full of exciting releases for Vanta, including enhanced Risk Management customization, 21 new integrations, Automated Statement of Applicability, and more:

‍

Custom Framework Audit
Improvements to Questionnaire Automation
Procurement Processess for Vendor Risk Management (VRM)

‍

Risk Management customization

‍

We’re excited to launch new capabilities for our Risk Management solution that allow for more customization to align to your organization’s goals.

‍

Customers will be able to customize risk scoring dimensions for risk scenarios, including the name, description, and scale, for each risk. You’ll also be able to customize the number of groupings and the bounds for each risk scenario group, as well as add custom columns to your risk register. Finally, new risk management settings can prompt users to auto-update your risk policy — ensuring that information stays accurate and up-to-date. These capabilities are available as a premium add-on for an additional cost.

‍

21 new integrations: Microsoft Teams, Mixpanel, ClickUp…

Mixpanel, clickup and many more. — *New Vanta integrations*

‍

June was an exciting month for integrations, as we launched 21 new integrations, ranging from Notifications, Access, Mobile Device Management (MDM), and more.

‍

We’ve added 11 more Access-only integrations for Access Reviews customers, a Notification integration with Microsoft teams, and additional integrations for task tracking, HRIS, and MDM. Our partners were also hard at work and shipped four new integrations through our Connectors API. For integration requests, whether you want to integrate with your in-house tools or an unsupported vendor, please fill out the integrations feedback form!

View available integrations

‍

Automated Statement of Applicability

A screen shot of a page showing the settings for a website. — *Automated Statement of Applicability*

‍

Vanta now automatically generates a pre-filled Statement of Applicability.

‍

The Statement of Applicability is a critical step for ISO 27001 that explains which controls are or aren’t relevant to your organization’s information security management system (ISMS). Vanta now generates a pre-filled template that’s automatically filled with current control data, thereby simplifying the work needed to satisfy this important requirement. Note: this feature is currently only available for ISO 27001:2013 and will be rolled out to other standards soon.

‍

Learn more about the Statement of Applicability

‍

Custom Framework Audit

An image of a dashboard with a rock in the background. — *Custom Framework Audit*

‍

Customers who create custom frameworks within Vanta can now create an audit against them.

‍

In February we released Custom Frameworks to cater to every business’s unique compliance needs. Now, customers will be able to create audits against those frameworks to show compliance to leadership teams. This is a part of a broader initiative to make Vanta more flexible and customizable as your business grows.

‍

Improvements to Questionnaire Automation

‍

In June we shipped various improvements to our Questionnaire Automation solution.

‍

This past April we released Questionnaire Automation — the easiest way to respond to security questionnaires and effectively communicate security and compliance to customers and prospects. We recently shipped many improvements to the platform, including an enhanced questionnaire import experience, additional filters for separating Answer Library and Resources content, and more.

‍

Learn more about Questionnaire Automation

‍

Procurement Processes for VRM

‍

Vendor Risk Management (VRM) now supports procurement processes within Vanta.

‍

VRM will now pull in procurement security review requests from your integrated task tracker and will manage all your procurement requests within the app. We’ve created a new inbox for security review requests that aggregates procurement processes created in the task tracker — resulting in faster security review SLAs, easier collaboration, and faster procurement processes.

‍

Learn more about Vendor Risk Management

‍

‍
See our Release Notes for all updates this month.

‍

Try it out

As always, we welcome your feedback. Let us know what you think by reaching out to your Customer Success Manager. And stay in the loop on Vanta news via LinkedIn.

‍

Or see it live - What’s New in Vanta: July Webinar

Join us for our monthly What’s New in Vanta webinar taking place July 19, 10am PT/1pm ET. This series gives you a live look at some of our newest releases and product improvements. This month we’ll take you inside enhanced Risk Management customization, improvements to Questionnaire Automation, procurement workflows in Vendor Risk Management, and more.

Access Review Stage	Content / Functionality
Across all stages	Easily create and save a new access review at a point in time View detailed audit evidence of historical access reviews
Setup access review procedures	Define a global access review procedure that stakeholders can follow, ensuring consistency and mitigation of human error in reviews Set your access review frequency (monthly, quarterly, etc.) and working period/deadlines
Consolidate account access data from systems	Integrate systems using dozens of pre-built integrations, or “connectors”. System account and HRIS data is pulled into Vanta. Upcoming integrations include Zoom and Intercom (account access), and Personio (HRIS) Upload access files from non-integrated systems View and select systems in-scope for the review
Review, approve, and deny user access	Select the appropriate systems reviewer and due date Get automatic notifications and reminders to systems reviewer of deadlines Automatic flagging of “risky” employee accounts that have been terminated or switched departments Intuitive interface to see all accounts with access, account accept/deny buttons, and notes section Track progress of individual systems access reviews and see accounts that need to be removed or have access modified Bulk sort, filter, and alter accounts based on account roles and employee title
Assign remediation tasks to system owners	Built-in remediation workflow for reviewers to request access changes and for admin to view and manage requests Optional task tracker integration to create tickets for any access changes and provide visibility to the status of tickets and remediation
Verify changes to access	Focused view of accounts flagged for access changes for easy tracking and management Automated evidence of remediation completion displayed for integrated systems Manual evidence of remediation can be uploaded for non-integrated systems
Report and re-evaluate results	Auditor can log into Vanta to see history of all completed access reviews Internals can see status of reviews in progress and also historical review detail