Every division manages its vendors. The corporation sees them all.
On the Enterprise plan a corporation has divisions under it. Each division runs its own vendors, assessments and people; the corporation gets one view across all of them, shares the vendors it assesses once, and sets the rules everyone follows.
Large organisations rarely have one vendor list. Retail, logistics and health each buy their own tools, the group buys a few for everyone, and the same cloud provider turns up in four divisions with four separate questionnaires. Pistos gives each division its own company inside the corporation, so the work stays where it happens, and adds the layer on top: a roll-up the board can read, vendors assessed once and shared down, policies the corporation sets once, and access you control person by person.
What you get
One view across every division
A group overview shows each division side by side: vendors by residual risk, what needs attention, overdue assessments, renewals and shared vendors. Download it as a board-ready PDF or have it emailed on a schedule.
Spot the vendor four divisions use
The same vendor used by several divisions shows up as one row, with the worst rating and next renewal, matched by the vendor's own profile, website or name.
Assess once, share down
The corporation shares a vendor it has assessed with the divisions that use it. They see a read-only summary and can link their own vendor to it, instead of assessing it again.
Policies set once
The corporation sets the required documents per tier and the remediation deadlines, as a default divisions can override or as a lock, and keeps approved and prohibited vendor lists that apply to every division.
Access person by person
Choose who can work across divisions: full access, read only, or none. A read-only person can look into any division and cannot change anything there.
One sign-in, one directory
Set up Microsoft or Google sign-in once at the corporation and every division signs in with it. A directory feed can place each person in their division, and a read-only API key reads the roll-up.
One licence, a division cap
Divisions share the corporation's Enterprise licence for vendors and team seats, with a cap on how many divisions the plan covers. Corporate administrators add divisions themselves.
Reorganise without re-keying
Move a division to another corporation, spin it out on its own licence, attach an acquired company or absorb a whole corporation. Each division keeps its own data throughout.
How it works
Set up
Pistos makes your company a corporation and sets the number of divisions the plan covers.
Add divisions
Corporate administrators add each division and its administrators.
Set the rules
Choose the policies, vendor lists and who has access across divisions.
Share what you assess
Share corporate vendors with the divisions that use them.
Review together
Read the group overview, or schedule it by email as a PDF.
Questions
Can a division see another division's vendors?
No. A division sees only its own vendors, plus the corporate vendors the corporation has chosen to share with it, as a read-only summary. The corporation sees every division.
What does a division see of a corporate vendor?
The vendor's name and service, its criticality, the corporation's residual risk rating, the monitoring level, how recently it was assessed and how many findings are overdue. Never contacts, contracts, answers, documents or findings.
Can the corporation change things inside a division?
Corporate administrators with full access can work inside any division with their own role, and every switch is recorded. People with read-only access can look but not change anything.
Do vendors answer once for several divisions?
The corporation can link a division's vendor to its own assessment, and can invite a vendor that serves several divisions to link its accounts. Linking is the vendor's own decision, made from its own account.
Which plan includes divisions?
Divisions are part of the Enterprise plan, which is priced with a cap on the number of divisions. Talk to sales about your structure.
Can we move or merge divisions later?
Yes. Pistos administrators can move a division to another corporation, spin it out as a standalone company, attach an acquired company or absorb a whole corporation, without losing any division's data.
Related
Third-party risk management
Onboard vendors from a ticket, assess them, monitor them between reviews and keep the evidence, findings and decisions in one program.
TPRM for MSPs
Manage each client's vendor risk program on one platform, with every client's data kept separate and a single page that shows which client needs a conversation.
Vendor risk assessment
Pistos scopes each vendor, sends a questionnaire sized to its risk, turns the answers into findings, tracks the fixes and records the approval. Every step stays linked to the answer that raised it.
Ready to get out of spreadsheets?
Talk to us about your vendors, frameworks and timeline.
Start a free trial