Legacy Bitsight VRM enables a cross-functional, co-operative workflow for issue management. Evaluate differences between your requirements and vendor’s responses, converting gaps and issues identified by various assessment processes into action items.
Reporting, Tracking, and Resolving Vendors Gaps
Applications
What are the Findings?
Findings are actionable items that you can create while reviewing vendor’s assessments responses - they are a very important tool that allows kicking off conversations with your vendors regarding issues or questions that may arise within an assessment.
Where can a Finding be Created?
Findings can be created on Assurances, Questionnaires, Scans, and Breaches both marked as Available or Not Available by vendors.
Creating Findings on an Assurance
(Such as a Certification, or an Assessment)
- Open the document.
- Select the Create Finding button.
- Select the corresponding criticality from the available Select Criticality options.
- Add a description on the required Description field.
- Select Confirm.
Creating Findings on a Breach
- Select Create Finding.
- Select the corresponding criticality from the available Select Criticality options.
- Add a description on the required Description field.
- Select Confirm.
Creating Findings on a Scans Provider
This includes providers such as Bitsight, Security Scorecard, and RiskRecon.
- Select Create Finding.
- Select the corresponding criticality from the available Select Criticality options.
- Add a description on the required Description field.
- Select Confirm.
Creating Findings on a Questionnaire Answer
- Look for the question.
- Select the corresponding criticality from the available Select Criticality options.
- Add a description on the required Description field.
- Select Confirm.
Tracking Findings
To track the findings you have reported to a vendor in particular, open their vendor profile, and go to the Findings tab.
To change the finding status, simply click on the Status dropdown, and select the corresponding stage.
If you need assistance configuring or changing the status values, please contact Bitsight Support.
View all Findings
If you want to look at all the findings that have been reported regardless of vendor, go to the Findings page located in the top navigation bar.
- June 4, 2024: Linked to the Legacy Bitsight VRM overview.
- March 29, 2022: Updated instructions.
Feedback
0 comments
Please sign in to leave a comment.