Bitsight VRM Findings: Reporting, Tracking, and Resolving Vendors Gaps

The ThirdPartytrust tool enables a cross-functional, co-operative workflow for issue management.

Evaluate differences between your requirements and vendor’s responses, converting gaps and issues identified by various assessment processes into action items.

What are the Findings?

Findings are actionable items that you can create while reviewing vendor’s assessments responses - they are a very important tool that allows kicking off conversations with your vendors regarding issues or questions that may arise within an assessment.

Where can a Finding be Created?

Findings can be created on Assurances, Questionnaires, Scans, and Breaches both marked as Available or Not Available by vendors.

Creating Findings on an Assurance

(Such as a Certification, or an Assessment)

1. Open the document.
2. Select the Create Finding button.
3. Select the corresponding criticality from the available Select Criticality options.
4. Add a description on the required Description field.
5. Select Confirm.

Creating Findings on a Breach

1. Select Create Finding.
2. Select the corresponding criticality from the available Select Criticality options.
3. Add a description on the required Description field.
4. Select Confirm.

c

Creating Findings on a Scans Provider

This includes providers such as Bitsight, Security Scorecard, and RiskRecon.

1. Select Create Finding.
2. Select the corresponding criticality from the available Select Criticality options.
3. Add a description on the required Description field.
4. Select Confirm.

Creating Findings on a Questionnaire Answer

1. Look for the question.
2. Select the Finding icon.
3. Select the corresponding criticality from the available Select Criticality options.
4. Add a description on the required Description field.
5. Select Confirm.

Tracking Findings

To track the findings you have reported to a vendor in particular, open their vendor profile, and go to the Findings tab.

To change the finding status, simply click on the Status dropdown, and select the corresponding stage.

If you need assistance configuring or changing the status values, please contact Bitsight Support.

View all Findings

If you want to look at all the findings that have been reported regardless of vendor, go to the Findings page located in the top navigation bar.