D&B Risk Analytics vs. UpGuard Vendor Risk

Great for vendor risk management and running financial health reports on our supplier base. In addition, our transactional banking team uses the platform (more specifically the Paydex score) to assess obligors and clients for financial health. I think the ESG component of the platform still needs more work. I don't think there's enough data in the industry to really make good predictive scores.

UpGuard Vendor Risk is great when we need a quick view of a vendor’s external security posture, especially during fast-paced onboarding. It’s also very useful for continuous monitoring with visibility into changes at Vendor's side without repeatedly chasing vendors for updates. The only scenario it is not very helpful, is small vendors / start ups that dont have an external footprint, but in that case the questionnaire's can be used.

Incentivized

• Robust insight on financial health.
• Continuous monitoring & alerts.
• Predictive measurers that are quantifiable.

• Helped us automate our vendor risk questionnaires
• Helps us continuously monitor our high-risk vendors
• All vendor risk data is in one place, organized by risk level, criticality, and status

Incentivized

• Finding the correct entity in D&B. There are usually tons of D&B #s for one entity.
• ESG ratings still need work.
• We are still determining internally what the best practice is for these financial health ratings. What does it mean for us?

• Integration with GRC systems, ticketing platforms could be stronger
• More configurable dashboards will be helpful

Incentivized

It gives overall risk visibility into our supply chain

Incentivized

D&B Risk Analytics contains all information I need to do my job well and has a daily updated scores to reflect the financial situation.

I only used D&B Risk Analytics.

We’ve evaluated other third-party security rating platforms, including those which focus heavily on questionnaires, self-assessments, and point-in-time reviews.
UpGuard's usp is continuous monitoring and external risk visibility, automated questionnaires, which reduced our reliance on manual follow-ups. That said, most tools in this space still need to be complemented with internal reviews and contract-level risk assessments, depending on the vendor and use case.

Incentivized

• We have had the solution for less than a year, so it is tough to say how much positive/negative impact it has had.
• We are now able to continuously monitor some entities in our supplier base. We were not able to do this before.

• reduce the time and effort spent on vendor due diligence
• it has improved our ability to identify higher-risk vendors early and focus remediation efforts where they matter most, rather than treating all vendors the same
• more informed risk decisions

Incentivized