Vendor Vetting Recommendations for Intelligence Sharing

This document is a guide that outlines recommendations for improving intelligence sharing within the vendor vetting ecosystem, particularly in relation to adversarial capital. It builds on previous work from a Convergence event and addresses the challenges faced by various agencies in the U.S. government regarding vendor vetting. The document details the limitations of current information sharing practices, which often lead to redundant efforts and missed risk signals. It emphasizes the need for a 'loose-coupling' approach to sharing information rather than a centralized risk assessment framework. Several recommendations are presented, including the importance of sharing contacts and facts among agencies, incentivizing vendor transparency, and prioritizing open-source data. The guide concludes by advocating for a collaborative vendor vetting ecosystem that allows individual organizations to lead while contributing to a collective effort to enhance national security and mitigate risks associated with adversarial influences.