To start your Vendor Risk Assessment for a potential Software as a Service solution, determine the...
Gathering the Basics on Cloud, SaaS Finalists
Once you have determined your finalists for your Software as a Service (SaaS) or Cloud providers' software or services, you need to gather some basic information about each one.
In this step, you collect basic information about each finalist (ideally no more than three) in your due diligence to ensure the best possible service and working relationship and lowest risk in such significant potential partners.
Some of this information you will already have from the initial step of determining which software will best help you achieve your business goals. At a minimum, you want to collect the following on all of your finalists:
- Company Name (including DBAs)
- All location addresses, phone numbers
- Relevant products offered
- Relevant services offered
- Holding Company if any
- Subsidiaries
- State of Incorporation
- Business Type (LLC, S Corp, etc.)
- Years in Business
- Annual Revenue
- Stock Price (if publicly traded company)
- Contact Info for all decision-makers and key personnel at headquarters and affiliated companies
- Contact Info for all Investors
- Number of Employees at headquarters and affiliated companies
- Picture or map of facilities your data would be housed in
- Internet Service Provider(s)
The Software Capabilities evaluation and the Basic Information gathering will give you a good start on the Risk Assessments to come.
For more information about performing a VRA on Cloud and SaaS vendors, grab your FREE copy of our e-Book, "Find Your Cloud 9's", which offers a mini-guide to the VRA process.
To set up a Reference Interview on the questions you have about investing in new technology for your business, contact me at 302-537-4198, ericm@edminfopro.com or on our Contact form.