How To Assess a Vendor

Vendor Assessments are used to to assess entities that are external to your organization. Typically, vendor assessments are used to provide a survey of questions about a specific product or offering, which is filled out by a representative from the vendor.

You must have a role in an organizational unit to create a vendor assessment.

Before you can create a Vendor Assessment, there must be an existing vendor assessment series and at least one vendor question list. Only superusers can create new assessment series and question lists.

See also: https://saltycloud.atlassian.net/wiki/spaces/TES/pages/1538949129 https://saltycloud.atlassian.net/wiki/spaces/TES/pages/1275463670

  1. Log into Isora GRC and go to the Assessment page. Click the New Assessment button.

     

  2. Choose Vendor as the Target Type. This will adjust the rest of the options presented in the dialog. There should be a default Vendor assessment series. Choose a question list and optionally assign a name. Then click the Select Product link.

     


    See also: https://saltycloud.atlassian.net/wiki/spaces/TES/pages/1538949129

  3. Fill in the product and vendor details and click Select.

     

  4. If you have roles in multiple OUs, choose which one you want this vendor assessment to be associated with as the Requestor. Choose an expiration date which is far enough in the future to allow adequate time for the survey to be completed. If the survey is not completed in time, the assessment will disappear from Isora GRC. If you want to allow people from other OUs to be able to view the report, then check the checkbox to “Allow report to be viewed by other users.” Click Save.

     

  5. Back on the Open tab of the Assessment page, expand the Vendor series and locate the new assessment you just created. Click the Launch button.

     

  6. After launching, you can click the product name or the View button to access the survey. You should copy the Access Link and email it to the representative from your vendor so they can answer the questions.

     

  7. After all questions have been answered, the vendor rep can acknowledge the survey to indicate completion. Or, if you wish to review and possibly question the vendor rep about any of their answers before they submit it, then ask to let you do the acknowledgement step.

     

  8. Once the survey has been acknowledged, it will appear as a report on the Complete tab of the Assessment page. Click the View Report button to see details of the assessment.

     

  9. To see the individual questions and answers, you can click on Answer Details.

     

  10. You can also download a CSV of the report.