Vendor Profile: Findings

The Findings page [ Vendor Profile ➔ Findings] in the Vendor Risk Management application shows a selected vendor’s findings.

Actions

Create a Finding

Instructions:

1. Select the Create Finding button at the top-right of the page.
2. Fill in the following details:
   • Criticality – Set the finding criticality.
   • Reported On – Add a finding source.
   • Description – Add a finding description.

Set the Review Status

Instructions: Select an option from the dropdown in the Review Status column. Options:

• Open
• 90 Days + Remediation
• Remediated
• Compensating Controls
• Will Not Remediate

Delete a Finding

Instructions:

1. Hover over a finding in the table.
2. Select Delete finding on the right.

Remove a Vendor

Instructions: Select the Actions ➔ Remove option from the dropdown at the top-right of the Findings page.

View the Reported On Sheet

View the Reported On sheet.

Instructions: Select a finding from the table.

Fields

Creation Date

The date when the finding was created.

Criticality

The finding criticality.

Filter: Criticality

Filter Values:

• None
• Low
• Medium
• High
• Critical

ID

An ID for the finding.

Messages

The number of messages regarding the finding.

Filter: Messages

Filter Values:

• Read
• Unread
• None

Reported On

The finding source.

Review Status

The review status.

Filter: Status

Filter Values:

• Open
• Remediated
• Compensating Controls
• Will Not Remediate

Will Remediate By...

The vendor’s response on remediating the finding.

Filter: Will Remediate By

Filter Values:

• Past Due
• No Date Set
• Custom

Reported On Sheet

The Reported On sheet contains the following tabs:

• Overview = Summarizes the details from the table. See details.
• Messages = The messages thread.
• Attachments = Contains attachments that the vendor uploaded.
• Internal Notes = Internal notes regarding the finding. It is treated as a public tag or annotation and is viewable by third parties.

Overview Tab Details

The Overview tab in the Reported On sheet summarizes the details from the table along with the:

• Description
• Reported On - Details:
  • Questionnaire
  • Category
  • Question
  • Answer/s
  • Comments
  • Attachments