To align supply chain management with your organisation's strategy, CSFaaS drives the Third Parties module from editable catalogues. They provide the foundation for classifying, managing and assessing third-party relationships consistently.
1. Why Tailor Your Catalogues
- Strategic Alignment: reflect your organisation's risk tolerance, compliance requirements and operational goals.
- Consistency Across Teams: standardised definitions keep third-party management uniform across the organisation.
- Operational Efficiency: predefined categories and classifications reduce manual effort and ambiguity.
- Enhanced Risk Management: tailored criteria let you prioritise the relationships that matter most.
Combined with a complete inventory, this helps you identify critical providers with access to sensitive systems or data, and map the dependencies between third parties and your organisation.
2. Where Catalogues Are Managed
All workspace catalogues live in the Databases module, under the Configuration Catalogs tab. The catalogues are grouped by the module they serve: the Third Parties Module group holds the third-party-specific lists, next to Cross-module lists shared with other modules. You can search the tree or narrow it with the module filter.
Select a catalogue to see its description and entries, then click Open editor to add, edit or hide entries.
Note: editing catalogues requires the Catalog Management permission (workspace owners and Account Managers always have it); without it the tab is read-only.
3. Catalogues Used by the Third Parties Module
Cross-Module Catalogues
These apply across the whole workspace; you may already have configured them while setting up your global environment:
- Business Units
- Regions
- Data Classification
Third-Party-Specific Catalogues
| Catalogue | What it defines |
|---|---|
| Third Parties IT Providers | The types of third-party products and services providers that may impact your IT environment |
| Third Parties Tiers Levels | The criticality ranking of third-party relationships, guiding resource allocation and management focus |
| Third Parties Types | The nature of the relationship (vendor, client, partner, regulator...), for strategic alignment and risk management |
| CIA Levels | The confidentiality, integrity and availability scale used in the CIA Levels of Processed Data table (shared with the Systems module) |
4. Adapting Over Time
By customising these catalogues, you implement a third-party management framework that is efficient and aligned with your company's objectives. Because the lists remain editable, you can adapt quickly to changing requirements while keeping your supply chain inventory consistent.