Evaluate Controls for a Vendor Review
Introduction
A Vendor Review primarily consists of Control Categories with Sub-Controls that can be marked as ‘Not in Place / In Place’ and ‘Not Audited / Audited’.
Not In Place / In Place - A Control Category or Sub-Control may be marked as ‘In Place’ if there is some evidence that the controls are being implemented
Not Audited / Audited - A Control Category or Sub-Control may be marked as ‘Audited’ if there is concrete evidence that the controls are being implemented, usually found in an audit document.
Step-by-Step Guide
Within a Vendor Review, open the ‘Evaluate Controls’ Menu
Select each Control Category to open the Sub-controls
Based on documentation, toggle the In Place and Audited switches for each Sub-control
If all Sub-controls are In Place or fully Audited, use the drop down menus to toggle all Sub-controls in the category
Video Tutorial
Related Articles
- Create a Vendor Control Category Template
- Create a Vendor Solution for a Vendor
- Create a Vendor Sub-Control
- Perform a Vendor Review
- Generate a Controls Vendor Review Report
- Generate a Full Vendor Review Report
- Create a Pre-Qualified Certification
- Applying a Pre-Qualified Certification to a Vendor Review
- Generate a Summary for a Vendor Review
- Evaluate Controls for a Vendor Review