# What should Vanta users do when an alert flags a low-risk vendor as high risk?

<p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">A question I keep coming back to is what <a class="a a--md" elv="true" href="https://www.g2.com/products/vanta/reviews">Vanta</a> users do when an alert flags a low-risk vendor or dependency as high risk. Going by G2 reviews, the answer is to check the flag, recategorise the supplier manually and note the reasoning, so the dashboard reflects the real picture. It shows up mostly with legacy systems and low-level dependencies, where Vanta's monitoring leans towards caution, and that same caution is why continuous monitoring and clear visibility of passing and failing controls are what people value most: real issues surface early.</p><p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">In <a class="a a--md" elv="true" href="https://www.g2.com/categories/security-compliance">security compliance</a>, vendors tend to fall into three groups:</p><ol>
<li>Mainstream vendors with clear security documentation. The alert and the risk usually line up.</li>
<li>Legacy suppliers. The flag is a prompt to check, and recategorising records the outcome.</li>
<li>Low-level dependencies. A quick check clears it, with a note for the auditor.</li>
</ol><p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">Monitoring that leans cautious suits teams preparing for an audit, since checking a minor flag takes minutes and a missed issue costs far more.</p><p class="elv-tracking-normal elv-text-default elv-font-figtree elv-text-base elv-leading-base elv-font-normal" elv="true">How often do you recategorise flags? And do you record the reasoning inside Vanta or elsewhere?</p>

##### Post Metadata
- Posted at: about 23 hours ago
- Author title: SEO Content Specialist
- Net upvotes: 1


## Comments
### Comment 1

Do you keep your recategorisation notes inside Vanta or in a separate log for the auditor? Wondering what auditors actually prefer to see.

##### Comment Metadata
- Posted at: about 3 hours ago





## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: over 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: over 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: over 13 years ago
  - Comments: 4