Gnatta

Risk Ledger | February 2022

Gnatta Elevates Third-Party Risk Management with Risk Ledger

We recently sat down (virtually of course) with Jack Barmby, Founder and CEO of Gnatta, to chat about his experience using Risk Ledger. Like a lot of suppliers, Gnatta was introduced to us by one of their clients.

“Risk Ledger was imposed on us. But it turned out to be a positive thing. We saw the benefit of taking it forward and using Risk Ledger for our other clients and prospects”.

That client was a global online fashion retailer and their request for Gnatta to create a Risk Ledger supplier profile triggered a complete shift in the way Jack and his team manage information security. As a scaling business, Gnatta was in the common position between needing someone to do the work of a CISO and not being quite mature enough to fill that role as a permanent hire.

“What it outlined was that we actually needed a central owner maintaining this stuff – instead of dragging shed loads of people away from their day jobs to manage every risk assessment that comes in.

We took on contracted help for six months and now the responsibility sits with an Information Security Manager who keeps our Risk Ledger profile updated as part of their duties. As documentation or process changes and accreditations come through the door, they’ll update those straight away”.

And that’s not the only positive change that Gnatta has made since setting up their Risk Ledger supplier profile. Jack says that joining the network has given the business a kind of strategic pipeline for what they want to develop from an information security standpoint.

Head to the Risk Ledger website to read the full case study.