Vendor prioritization is central to a successful TPRM program. But for many healthcare organizations, vendors continue to be treated in a homogenized way, regardless of the nature of their products, their level of risk, and their potential impact on the business if compromised. Generally, vendors with network access who are handling large volumes of PHI should be prioritized for more rigorous risk evaluation. The CORL solution prioritizes vendors dynamically based on these variables. In addition, we consider pre-assessment data, including assurances and CORL Cleared status, in our evaluation of vendor risk. This enables our healthcare clients to focus their TPRM efforts in the areas that will bring about the greatest tangible reduction to risk.